}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x15}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x3}}]}, {0x4}]}]}, {0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @multicast2}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "de94396af71f7566bbf608619f7a57482ba0d52a60ec5574273ae267b4c31d60"}]}, {0x454, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x8000, @loopback, 0x2}}, @WGPEER_A_ALLOWEDIPS={0x214, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, {0x5}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x27}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ALLOWEDIPS={0x21c, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}]}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x124c}, 0x1, 0x0, 0x0, 0x4008081}, 0x4895)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)=@can_delroute={0x34, 0x19, 0x200, 0x70bd2a, 0x25dfdbfb, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x5, 0x2, 0x0, 0x0, "547c6e3e6498e2c2"}, 0x2}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x40084)
ioctl$BINDER_WRITE_READ(r1, 0x2, 0x0)
memfd_secret(0x0) (async)
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) (async)
sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000001340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001300)={&(0x7f0000000080)={0x124c, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x1224, 0x8, 0x0, 0x1, [{0x764, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}, 0x80}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_ALLOWEDIPS={0x3c0, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x4}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xec29}, @WGPEER_A_ALLOWEDIPS={0x328, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x11}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}]}]}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast2}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00', 0x7}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x100}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x34}}}]}, {0x378, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x374, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xc}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x31}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}]}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x24c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "120d1579081b5f72b9b16e1eb7b9bec410a0e0e5a0c6accc26a92094f5d8a688"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x21c, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x15}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x3}}]}, {0x4}]}]}, {0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @multicast2}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "de94396af71f7566bbf608619f7a57482ba0d52a60ec5574273ae267b4c31d60"}]}, {0x454, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x8000, @loopback, 0x2}}, @WGPEER_A_ALLOWEDIPS={0x214, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, {0x5}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x27}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ALLOWEDIPS={0x21c, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}]}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x124c}, 0x1, 0x0, 0x0, 0x4008081}, 0x4895) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)=@can_delroute={0x34, 0x19, 0x200, 0x70bd2a, 0x25dfdbfb, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x5, 0x2, 0x0, 0x0, "547c6e3e6498e2c2"}, 0x2}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x40084) (async)
ioctl$BINDER_WRITE_READ(r1, 0x2, 0x0) (async)

23:15:38 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40046304, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:38 executing program 5:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000003c0)={0x0, 0x200, "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"})

23:15:38 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

[  824.243466][ T6157] binder: 6142:6157 ioctl c018620c 20000000 returned -1
23:15:38 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:38 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x8)

23:15:38 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40046304, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:38 executing program 5:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000003c0))

23:15:38 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (rerun: 64)

23:15:39 executing program 4:
r0 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0)
getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4)
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000})
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r2, 0x0, 0x0)

23:15:39 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:39 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0) (async, rerun: 32)
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x8) (rerun: 32)

23:15:39 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

23:15:39 executing program 5:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000003c0))

23:15:39 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

23:15:39 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x8)

23:15:39 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000080)={0x1, 0x10}, 0x18)

23:15:39 executing program 5:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000003c0))

23:15:39 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  825.119755][ T6247] binder: 6241:6247 ioctl c0306201 0 returned -14
23:15:39 executing program 5:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000003c0)={0x0, 0x100, "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"})

23:15:39 executing program 4:
r0 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0)
getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4)
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000})
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r2, 0x0, 0x0)
memfd_secret(0x0) (async)
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) (async)
getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) (async)
memfd_secret(0x0) (async)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) (async)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000}) (async)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
bind$can_j1939(r2, 0x0, 0x0) (async)

23:15:39 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

23:15:39 executing program 5:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000003c0))

23:15:39 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000080)={0x1, 0x10}, 0x18)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000080)={0x1, 0x10}, 0x18) (async)

23:15:39 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:39 executing program 4:
r0 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) (async)
getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) (async)
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) (async)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000})
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r2, 0x0, 0x0)

23:15:39 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[  825.231911][ T6271] binder: 6269:6271 ioctl c0306201 0 returned -14
23:15:39 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000080)={0x1, 0x10}, 0x18)

23:15:39 executing program 5:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000003c0))

23:15:39 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:39 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:39 executing program 4:
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r0, 0x0, 0x0)
r1 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180))
ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000000)={0x400, 0x0, '\x00', {0x0, @bt={0x2, 0xffff, 0x0, 0x1, 0xfffffffffffffff7, 0x0, 0x9, 0x8000, 0x7, 0xfff, 0x2, 0x1fb72e74, 0x3, 0x5, 0xc, 0xc50cb216a65e7667, {0x5, 0x2e33}, 0xa6}}})

23:15:39 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  825.303233][ T6282] binder: 6281:6282 ioctl c0306201 0 returned -14
23:15:39 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:39 executing program 5:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000003c0))

23:15:39 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:39 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:39 executing program 4:
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r0, 0x0, 0x0) (async)
r1 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180)) (async)
ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000000)={0x400, 0x0, '\x00', {0x0, @bt={0x2, 0xffff, 0x0, 0x1, 0xfffffffffffffff7, 0x0, 0x9, 0x8000, 0x7, 0xfff, 0x2, 0x1fb72e74, 0x3, 0x5, 0xc, 0xc50cb216a65e7667, {0x5, 0x2e33}, 0xa6}}})

23:15:39 executing program 5:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000003c0)={0x0, 0x80, "2097e3f8e2dddf4afb2134548e97cccb4f3958cc19af08e62e904b2010dba0d4474a27d2148bc62a6f15c6cdf7ef4cc362d8a9ea3c79563a41830603f293fa81826f0063a776d7cf4178454cd4b2423cd0219dbf5a1395b90ac29ee16272ab94d90935c353922c9e5fc18ed102d4e917e6b23b7fc0ebb59b79e3ca6d3e63518b"})

23:15:39 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:39 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:39 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:39 executing program 4:
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r0, 0x0, 0x0) (async)
r1 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180)) (async)
ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000000)={0x400, 0x0, '\x00', {0x0, @bt={0x2, 0xffff, 0x0, 0x1, 0xfffffffffffffff7, 0x0, 0x9, 0x8000, 0x7, 0xfff, 0x2, 0x1fb72e74, 0x3, 0x5, 0xc, 0xc50cb216a65e7667, {0x5, 0x2e33}, 0xa6}}})

23:15:39 executing program 5:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000003c0))

23:15:39 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:39 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000080)={@rand_addr, @multicast2}, &(0x7f00000000c0)=0xc)
r2 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000001180))
r3 = mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x9)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x110, 0x0, &(0x7f00000002c0)=[@decrefs={0x40046307, 0x2}, @decrefs={0x40046307, 0x2}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000500)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r1, @ANYBLOB="0000000000000000000000008561646600000000030000000000000001000000000000003e00000000000000852a646600000000", @ANYRES32=r2, @ANYBLOB="000000000000000000200000000000000004179090b9b9ef4c5060254d98b6e457156d99a203dcfd628d631377eb0b12651a252696abf6bea910c4f677d9d2e9acf33802003d8bba45edd5489012bbd8dc"], &(0x7f0000000000)={0x0, 0x18, 0x38}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1100, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/33, 0x21, 0x2, 0x27}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}}, @free_buffer={0x40086303, r3}, @dead_binder_done, @free_buffer, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x4, 0x1, 0x2}, @flat=@binder={0x73622a85, 0xb, 0x1}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}, 0x40}], 0x9d, 0x0, &(0x7f0000000400)="3ef811a4856b61e328959935df150802f3f3ac7ffe80e6e1451f2fc9e59553873fc78f58f4fb200d8d73822a0a03aebeb91a53fa6e34e50905b8ef43a86c956e9140af1db935b0f41e12e07d53b203129b3e00da57177ebf813e5a46820ce9fbb65035cab23c60a4cfdd5d9e0b97c529d0e1daf43921f5777dcd50c1eb415a7aaa78a53c80b48f79151d07514f3b290dc1b7526f5f0438c3f328fe928f"})

23:15:39 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x2}}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg2\x00', <r1=>0x0})
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg2\x00', <r2=>0x0})
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg2\x00', <r3=>0x0})
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5, 0x0, {0x2}}, 0x18)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r7=>0x0})
bind$can_j1939(r6, &(0x7f00000000c0)={0x1d, r7, 0x0, {0x2}}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', <r8=>0x0})
r9 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r10=>0x0})
bind$can_j1939(r9, &(0x7f00000000c0)={0x1d, r10, 0x0, {0x2}}, 0x18)
r11 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r12=>0x0})
bind$can_j1939(r11, &(0x7f00000000c0)={0x1d, r12, 0x0, {0x2}}, 0x18)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000f80)=ANY=[@ANYBLOB="1406ff002007020517d7e93ac4b49fa3772cf33d8f26758ab38ba513f87e77536358a426bd49a24914389eb6b2819d54e627b79c322e19d53a011a286a15c4d753dddfc1ff2ba05850c840c3e9a3f0e3d693b1ef77514be66c75e2fe0efffa63a136384c58a1d807802f07bcedfd8e3552f0a38d0d0f8497c2b31b83017cf2435815ea0a42316605b35d26e4ed2b52e0a0e2787cdb07f38a39c0c441d6798705f21806816d838f6e02eb2179a60b4f6699581ca3e928616b83f0d926745147c70da7a1cef6aae5e073e1cdc2e3", @ANYRES16=0x0, @ANYBLOB="00022bbd7000fedbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="4c01028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000800000008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c000400ffffbe7f060000000f0f0401800000001f0007d82000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000900000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r1, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="6001028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004001000000008000600", @ANYRES32=r2, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400a600000008000600", @ANYRES32=r3, @ANYBLOB="6c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000003c000400ff07fe2006000000b100030418000000fcff01ff020000000500040601000080000480017f0000000008060c08000000ff077f07ff03000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400fa00000008000100", @ANYRES32=0x0, @ANYBLOB="bc00028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400e54b000008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r5, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="7800028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400fd0e00003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="800002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r7, @ANYBLOB="080007000000000008000100", @ANYRES32=r8, @ANYBLOB="7001028044000100240001006d6f6465000000000000000000000000000000000000000000002846d47e69c2000000000500030005000000110004006163746976656261636b7570000000003c00010024000100757365725f6c696e6b750000000000000000000000ee3db6d1c7050003000600000004000400"/134, @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000008000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000600000008000600", @ANYRES32=r10, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004007f0000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r12, @ANYBLOB], 0x614}, 0x1, 0x0, 0x0, 0x20000801}, 0x20040000)

23:15:39 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0})

23:15:39 executing program 5:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000003c0))

23:15:40 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000080)={@rand_addr, @multicast2}, &(0x7f00000000c0)=0xc)
r2 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000001180))
r3 = mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x9)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x110, 0x0, &(0x7f00000002c0)=[@decrefs={0x40046307, 0x2}, @decrefs={0x40046307, 0x2}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000500)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r1, @ANYBLOB="0000000000000000000000008561646600000000030000000000000001000000000000003e00000000000000852a646600000000", @ANYRES32=r2, @ANYBLOB="000000000000000000200000000000000004179090b9b9ef4c5060254d98b6e457156d99a203dcfd628d631377eb0b12651a252696abf6bea910c4f677d9d2e9acf33802003d8bba45edd5489012bbd8dc"], &(0x7f0000000000)={0x0, 0x18, 0x38}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1100, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/33, 0x21, 0x2, 0x27}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}}, @free_buffer={0x40086303, r3}, @dead_binder_done, @free_buffer, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x4, 0x1, 0x2}, @flat=@binder={0x73622a85, 0xb, 0x1}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}, 0x40}], 0x9d, 0x0, &(0x7f0000000400)="3ef811a4856b61e328959935df150802f3f3ac7ffe80e6e1451f2fc9e59553873fc78f58f4fb200d8d73822a0a03aebeb91a53fa6e34e50905b8ef43a86c956e9140af1db935b0f41e12e07d53b203129b3e00da57177ebf813e5a46820ce9fbb65035cab23c60a4cfdd5d9e0b97c529d0e1daf43921f5777dcd50c1eb415a7aaa78a53c80b48f79151d07514f3b290dc1b7526f5f0438c3f328fe928f"})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000080)={@rand_addr, @multicast2}, &(0x7f00000000c0)=0xc) (async)
syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2) (async)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000001180)) (async)
mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x9) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x110, 0x0, &(0x7f00000002c0)=[@decrefs={0x40046307, 0x2}, @decrefs={0x40046307, 0x2}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000500)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r1, @ANYBLOB="0000000000000000000000008561646600000000030000000000000001000000000000003e00000000000000852a646600000000", @ANYRES32=r2, @ANYBLOB="000000000000000000200000000000000004179090b9b9ef4c5060254d98b6e457156d99a203dcfd628d631377eb0b12651a252696abf6bea910c4f677d9d2e9acf33802003d8bba45edd5489012bbd8dc"], &(0x7f0000000000)={0x0, 0x18, 0x38}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1100, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/33, 0x21, 0x2, 0x27}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}}, @free_buffer={0x40086303, r3}, @dead_binder_done, @free_buffer, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x4, 0x1, 0x2}, @flat=@binder={0x73622a85, 0xb, 0x1}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}, 0x40}], 0x9d, 0x0, &(0x7f0000000400)="3ef811a4856b61e328959935df150802f3f3ac7ffe80e6e1451f2fc9e59553873fc78f58f4fb200d8d73822a0a03aebeb91a53fa6e34e50905b8ef43a86c956e9140af1db935b0f41e12e07d53b203129b3e00da57177ebf813e5a46820ce9fbb65035cab23c60a4cfdd5d9e0b97c529d0e1daf43921f5777dcd50c1eb415a7aaa78a53c80b48f79151d07514f3b290dc1b7526f5f0438c3f328fe928f"}) (async)

23:15:40 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0) (async)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x2}}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg2\x00', <r1=>0x0}) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg2\x00', <r2=>0x0}) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg2\x00', <r3=>0x0}) (async)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5, 0x0, {0x2}}, 0x18) (async)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r7=>0x0})
bind$can_j1939(r6, &(0x7f00000000c0)={0x1d, r7, 0x0, {0x2}}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', <r8=>0x0})
r9 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r10=>0x0})
bind$can_j1939(r9, &(0x7f00000000c0)={0x1d, r10, 0x0, {0x2}}, 0x18)
r11 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r12=>0x0})
bind$can_j1939(r11, &(0x7f00000000c0)={0x1d, r12, 0x0, {0x2}}, 0x18) (async)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000f80)=ANY=[@ANYBLOB="1406ff002007020517d7e93ac4b49fa3772cf33d8f26758ab38ba513f87e77536358a426bd49a24914389eb6b2819d54e627b79c322e19d53a011a286a15c4d753dddfc1ff2ba05850c840c3e9a3f0e3d693b1ef77514be66c75e2fe0efffa63a136384c58a1d807802f07bcedfd8e3552f0a38d0d0f8497c2b31b83017cf2435815ea0a42316605b35d26e4ed2b52e0a0e2787cdb07f38a39c0c441d6798705f21806816d838f6e02eb2179a60b4f6699581ca3e928616b83f0d926745147c70da7a1cef6aae5e073e1cdc2e3", @ANYRES16=0x0, @ANYBLOB="00022bbd7000fedbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="4c01028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000800000008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c000400ffffbe7f060000000f0f0401800000001f0007d82000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000900000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r1, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="6001028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004001000000008000600", @ANYRES32=r2, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400a600000008000600", @ANYRES32=r3, @ANYBLOB="6c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000003c000400ff07fe2006000000b100030418000000fcff01ff020000000500040601000080000480017f0000000008060c08000000ff077f07ff03000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400fa00000008000100", @ANYRES32=0x0, @ANYBLOB="bc00028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400e54b000008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r5, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="7800028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400fd0e00003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="800002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r7, @ANYBLOB="080007000000000008000100", @ANYRES32=r8, @ANYBLOB="7001028044000100240001006d6f6465000000000000000000000000000000000000000000002846d47e69c2000000000500030005000000110004006163746976656261636b7570000000003c00010024000100757365725f6c696e6b750000000000000000000000ee3db6d1c7050003000600000004000400"/134, @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000008000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000600000008000600", @ANYRES32=r10, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004007f0000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r12, @ANYBLOB], 0x614}, 0x1, 0x0, 0x0, 0x20000801}, 0x20040000)

23:15:40 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0})

23:15:40 executing program 4:
ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000000)=0x3)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r0, 0x0, 0x0)

23:15:40 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:40 executing program 5:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000003c0))

23:15:40 executing program 4:
ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000000)=0x3)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r0, 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000000)=0x3) (async)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
bind$can_j1939(r0, 0x0, 0x0) (async)

23:15:40 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x2}}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg2\x00', <r1=>0x0}) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg2\x00', <r2=>0x0}) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg2\x00', <r3=>0x0})
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5, 0x0, {0x2}}, 0x18) (async)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r7=>0x0})
bind$can_j1939(r6, &(0x7f00000000c0)={0x1d, r7, 0x0, {0x2}}, 0x18) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', <r8=>0x0}) (async)
r9 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r10=>0x0})
bind$can_j1939(r9, &(0x7f00000000c0)={0x1d, r10, 0x0, {0x2}}, 0x18) (async)
r11 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r12=>0x0})
bind$can_j1939(r11, &(0x7f00000000c0)={0x1d, r12, 0x0, {0x2}}, 0x18)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000f80)=ANY=[@ANYBLOB="1406ff002007020517d7e93ac4b49fa3772cf33d8f26758ab38ba513f87e77536358a426bd49a24914389eb6b2819d54e627b79c322e19d53a011a286a15c4d753dddfc1ff2ba05850c840c3e9a3f0e3d693b1ef77514be66c75e2fe0efffa63a136384c58a1d807802f07bcedfd8e3552f0a38d0d0f8497c2b31b83017cf2435815ea0a42316605b35d26e4ed2b52e0a0e2787cdb07f38a39c0c441d6798705f21806816d838f6e02eb2179a60b4f6699581ca3e928616b83f0d926745147c70da7a1cef6aae5e073e1cdc2e3", @ANYRES16=0x0, @ANYBLOB="00022bbd7000fedbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="4c01028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000800000008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c000400ffffbe7f060000000f0f0401800000001f0007d82000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000900000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r1, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="6001028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004001000000008000600", @ANYRES32=r2, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400a600000008000600", @ANYRES32=r3, @ANYBLOB="6c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000003c000400ff07fe2006000000b100030418000000fcff01ff020000000500040601000080000480017f0000000008060c08000000ff077f07ff03000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400fa00000008000100", @ANYRES32=0x0, @ANYBLOB="bc00028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400e54b000008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r5, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="7800028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400fd0e00003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="800002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r7, @ANYBLOB="080007000000000008000100", @ANYRES32=r8, @ANYBLOB="7001028044000100240001006d6f6465000000000000000000000000000000000000000000002846d47e69c2000000000500030005000000110004006163746976656261636b7570000000003c00010024000100757365725f6c696e6b750000000000000000000000ee3db6d1c7050003000600000004000400"/134, @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000008000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000600000008000600", @ANYRES32=r10, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004007f0000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r12, @ANYBLOB], 0x614}, 0x1, 0x0, 0x0, 0x20000801}, 0x20040000)

23:15:40 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000080)={@rand_addr, @multicast2}, &(0x7f00000000c0)=0xc)
r2 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000001180))
r3 = mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x9)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x110, 0x0, &(0x7f00000002c0)=[@decrefs={0x40046307, 0x2}, @decrefs={0x40046307, 0x2}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000500)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r1, @ANYBLOB="0000000000000000000000008561646600000000030000000000000001000000000000003e00000000000000852a646600000000", @ANYRES32=r2, @ANYBLOB="000000000000000000200000000000000004179090b9b9ef4c5060254d98b6e457156d99a203dcfd628d631377eb0b12651a252696abf6bea910c4f677d9d2e9acf33802003d8bba45edd5489012bbd8dc"], &(0x7f0000000000)={0x0, 0x18, 0x38}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1100, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/33, 0x21, 0x2, 0x27}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}}, @free_buffer={0x40086303, r3}, @dead_binder_done, @free_buffer, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x4, 0x1, 0x2}, @flat=@binder={0x73622a85, 0xb, 0x1}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}, 0x40}], 0x9d, 0x0, &(0x7f0000000400)="3ef811a4856b61e328959935df150802f3f3ac7ffe80e6e1451f2fc9e59553873fc78f58f4fb200d8d73822a0a03aebeb91a53fa6e34e50905b8ef43a86c956e9140af1db935b0f41e12e07d53b203129b3e00da57177ebf813e5a46820ce9fbb65035cab23c60a4cfdd5d9e0b97c529d0e1daf43921f5777dcd50c1eb415a7aaa78a53c80b48f79151d07514f3b290dc1b7526f5f0438c3f328fe928f"})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000080)={@rand_addr, @multicast2}, &(0x7f00000000c0)=0xc) (async)
syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2) (async)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000001180)) (async)
mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x9) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x110, 0x0, &(0x7f00000002c0)=[@decrefs={0x40046307, 0x2}, @decrefs={0x40046307, 0x2}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000500)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r1, @ANYBLOB="0000000000000000000000008561646600000000030000000000000001000000000000003e00000000000000852a646600000000", @ANYRES32=r2, @ANYBLOB="000000000000000000200000000000000004179090b9b9ef4c5060254d98b6e457156d99a203dcfd628d631377eb0b12651a252696abf6bea910c4f677d9d2e9acf33802003d8bba45edd5489012bbd8dc"], &(0x7f0000000000)={0x0, 0x18, 0x38}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1100, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/33, 0x21, 0x2, 0x27}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}}, @free_buffer={0x40086303, r3}, @dead_binder_done, @free_buffer, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x4, 0x1, 0x2}, @flat=@binder={0x73622a85, 0xb, 0x1}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}, 0x40}], 0x9d, 0x0, &(0x7f0000000400)="3ef811a4856b61e328959935df150802f3f3ac7ffe80e6e1451f2fc9e59553873fc78f58f4fb200d8d73822a0a03aebeb91a53fa6e34e50905b8ef43a86c956e9140af1db935b0f41e12e07d53b203129b3e00da57177ebf813e5a46820ce9fbb65035cab23c60a4cfdd5d9e0b97c529d0e1daf43921f5777dcd50c1eb415a7aaa78a53c80b48f79151d07514f3b290dc1b7526f5f0438c3f328fe928f"}) (async)

23:15:40 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:40 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0})

23:15:40 executing program 4:
ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000000)=0x3)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r0, 0x0, 0x0)

23:15:40 executing program 5:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000003c0)={0x0, 0x40, "2097e3f8e2dddf4afb2134548e97cccb4f3958cc19af08e62e904b2010dba0d4474a27d2148bc62a6f15c6cdf7ef4cc362d8a9ea3c79563a41830603f293fa81"})

23:15:40 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:40 executing program 4:
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff)
bind$can_j1939(r0, 0x0, 0x0)

23:15:40 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0})

23:15:40 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x3})
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)
r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0, r5}}, 0x18)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r8=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r7, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0, r8}}, 0x18)
r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r9, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {&(0x7f0000000200), r5, 0x2}}, 0x18)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000000)={0x2, 0x1b, 0xfa00, {0x0, {0xa, 0x4e22, 0x3, @local, 0x3}, r8}}, 0x30)

23:15:40 executing program 3:
r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000080)={0x0, @reserved})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:40 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000080)={@rand_addr, @multicast2}, &(0x7f00000000c0)=0xc)
r2 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000001180))
r3 = mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x9)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x110, 0x0, &(0x7f00000002c0)=[@decrefs={0x40046307, 0x2}, @decrefs={0x40046307, 0x2}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000500)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r1, @ANYBLOB="0000000000000000000000008561646600000000030000000000000001000000000000003e00000000000000852a646600000000", @ANYRES32=r2, @ANYBLOB="000000000000000000200000000000000004179090b9b9ef4c5060254d98b6e457156d99a203dcfd628d631377eb0b12651a252696abf6bea910c4f677d9d2e9acf33802003d8bba45edd5489012bbd8dc"], &(0x7f0000000000)={0x0, 0x18, 0x38}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1100, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/33, 0x21, 0x2, 0x27}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}}, @free_buffer={0x40086303, r3}, @dead_binder_done, @free_buffer, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x4, 0x1, 0x2}, @flat=@binder={0x73622a85, 0xb, 0x1}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}, 0x40}], 0x9d, 0x0, &(0x7f0000000400)="3ef811a4856b61e328959935df150802f3f3ac7ffe80e6e1451f2fc9e59553873fc78f58f4fb200d8d73822a0a03aebeb91a53fa6e34e50905b8ef43a86c956e9140af1db935b0f41e12e07d53b203129b3e00da57177ebf813e5a46820ce9fbb65035cab23c60a4cfdd5d9e0b97c529d0e1daf43921f5777dcd50c1eb415a7aaa78a53c80b48f79151d07514f3b290dc1b7526f5f0438c3f328fe928f"})

23:15:40 executing program 5:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000003c0)={0x0, 0x40, "2097e3f8e2dddf4afb2134548e97cccb4f3958cc19af08e62e904b2010dba0d4474a27d2148bc62a6f15c6cdf7ef4cc362d8a9ea3c79563a41830603f293fa81"})

23:15:40 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:40 executing program 4:
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff)
bind$can_j1939(r0, 0x0, 0x0)

23:15:40 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x3})
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)
r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0, r5}}, 0x18)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r8=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r7, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0, r8}}, 0x18)
r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r9, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {&(0x7f0000000200), r5, 0x2}}, 0x18)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000000)={0x2, 0x1b, 0xfa00, {0x0, {0xa, 0x4e22, 0x3, @local, 0x3}, r8}}, 0x30)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async)
memfd_secret(0x0) (async)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) (async)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x3}) (async)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0) (async)
pidfd_getfd(0xffffffffffffffff, r0, 0x0) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0, r5}}, 0x18) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r7, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0, r8}}, 0x18) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r9, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {&(0x7f0000000200), r5, 0x2}}, 0x18) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000000)={0x2, 0x1b, 0xfa00, {0x0, {0xa, 0x4e22, 0x3, @local, 0x3}, r8}}, 0x30) (async)

23:15:40 executing program 3:
r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000080)={0x0, @reserved})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) (async)
ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000080)={0x0, @reserved}) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)

23:15:40 executing program 5:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000003c0)={0x0, 0x40, "2097e3f8e2dddf4afb2134548e97cccb4f3958cc19af08e62e904b2010dba0d4474a27d2148bc62a6f15c6cdf7ef4cc362d8a9ea3c79563a41830603f293fa81"})

23:15:40 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000080)={@rand_addr, @multicast2}, &(0x7f00000000c0)=0xc)
r2 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000001180))
r3 = mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x9)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x110, 0x0, &(0x7f00000002c0)=[@decrefs={0x40046307, 0x2}, @decrefs={0x40046307, 0x2}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000500)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r1, @ANYBLOB="0000000000000000000000008561646600000000030000000000000001000000000000003e00000000000000852a646600000000", @ANYRES32=r2, @ANYBLOB="000000000000000000200000000000000004179090b9b9ef4c5060254d98b6e457156d99a203dcfd628d631377eb0b12651a252696abf6bea910c4f677d9d2e9acf33802003d8bba45edd5489012bbd8dc"], &(0x7f0000000000)={0x0, 0x18, 0x38}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1100, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/33, 0x21, 0x2, 0x27}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}}, @free_buffer={0x40086303, r3}, @dead_binder_done, @free_buffer, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x4, 0x1, 0x2}, @flat=@binder={0x73622a85, 0xb, 0x1}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}, 0x40}], 0x9d, 0x0, &(0x7f0000000400)="3ef811a4856b61e328959935df150802f3f3ac7ffe80e6e1451f2fc9e59553873fc78f58f4fb200d8d73822a0a03aebeb91a53fa6e34e50905b8ef43a86c956e9140af1db935b0f41e12e07d53b203129b3e00da57177ebf813e5a46820ce9fbb65035cab23c60a4cfdd5d9e0b97c529d0e1daf43921f5777dcd50c1eb415a7aaa78a53c80b48f79151d07514f3b290dc1b7526f5f0438c3f328fe928f"})

23:15:40 executing program 4:
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) (async, rerun: 64)
bind$can_j1939(r0, 0x0, 0x0) (rerun: 64)

23:15:40 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:40 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000080)={@rand_addr, @multicast2}, &(0x7f00000000c0)=0xc)
r2 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000001180))
r3 = mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x9)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x110, 0x0, &(0x7f00000002c0)=[@decrefs={0x40046307, 0x2}, @decrefs={0x40046307, 0x2}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000500)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r1, @ANYBLOB="0000000000000000000000008561646600000000030000000000000001000000000000003e00000000000000852a646600000000", @ANYRES32=r2, @ANYBLOB="000000000000000000200000000000000004179090b9b9ef4c5060254d98b6e457156d99a203dcfd628d631377eb0b12651a252696abf6bea910c4f677d9d2e9acf33802003d8bba45edd5489012bbd8dc"], &(0x7f0000000000)={0x0, 0x18, 0x38}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1100, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/33, 0x21, 0x2, 0x27}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}}, @free_buffer={0x40086303, r3}, @dead_binder_done, @free_buffer, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x4, 0x1, 0x2}, @flat=@binder={0x73622a85, 0xb, 0x1}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}, 0x40}], 0x9d, 0x0, &(0x7f0000000400)="3ef811a4856b61e328959935df150802f3f3ac7ffe80e6e1451f2fc9e59553873fc78f58f4fb200d8d73822a0a03aebeb91a53fa6e34e50905b8ef43a86c956e9140af1db935b0f41e12e07d53b203129b3e00da57177ebf813e5a46820ce9fbb65035cab23c60a4cfdd5d9e0b97c529d0e1daf43921f5777dcd50c1eb415a7aaa78a53c80b48f79151d07514f3b290dc1b7526f5f0438c3f328fe928f"})

23:15:40 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) (async)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x3})
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0) (async)
r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) (async)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0, r5}}, 0x18) (async)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r8=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r7, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0, r8}}, 0x18)
r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r9, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {&(0x7f0000000200), r5, 0x2}}, 0x18) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000000)={0x2, 0x1b, 0xfa00, {0x0, {0xa, 0x4e22, 0x3, @local, 0x3}, r8}}, 0x30)

23:15:40 executing program 5:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000003c0)={0x0, 0x60, "2097e3f8e2dddf4afb2134548e97cccb4f3958cc19af08e62e904b2010dba0d4474a27d2148bc62a6f15c6cdf7ef4cc362d8a9ea3c79563a41830603f293fa81826f0063a776d7cf4178454cd4b2423cd0219dbf5a1395b90ac29ee16272ab94"})

23:15:40 executing program 3:
r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000080)={0x0, @reserved})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:40 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x0, 0x0)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000100))
r2 = syz_open_dev$vivid(&(0x7f0000000140), 0x1, 0x2)
ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, &(0x7f0000000180)={0x5, "07b44506071678194e4fef4f1e198ba0ad2d54ef7417255934f8f7802f90dd73", 0x20, 0xfff, 0xb4, 0x4, 0x1})
ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000080)={0x0, "db9fe7491644f31a3852a31f2203739af91822de83fdd32636cb699d0d0571e6", 0x2, 0x2, 0x0, 0x80000})
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)

23:15:40 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:40 executing program 5:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000003c0)={0x0, 0x40, "2097e3f8e2dddf4afb2134548e97cccb4f3958cc19af08e62e904b2010dba0d4474a27d2148bc62a6f15c6cdf7ef4cc362d8a9ea3c79563a41830603f293fa81"})

23:15:40 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000080)={@rand_addr, @multicast2}, &(0x7f00000000c0)=0xc)
r2 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000001180))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x110, 0x0, &(0x7f00000002c0)=[@decrefs={0x40046307, 0x2}, @decrefs={0x40046307, 0x2}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000500)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r1, @ANYBLOB="0000000000000000000000008561646600000000030000000000000001000000000000003e00000000000000852a646600000000", @ANYRES32=r2, @ANYBLOB="000000000000000000200000000000000004179090b9b9ef4c5060254d98b6e457156d99a203dcfd628d631377eb0b12651a252696abf6bea910c4f677d9d2e9acf33802003d8bba45edd5489012bbd8dc"], &(0x7f0000000000)={0x0, 0x18, 0x38}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1100, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/33, 0x21, 0x2, 0x27}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}}, @free_buffer, @dead_binder_done, @free_buffer, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x4, 0x1, 0x2}, @flat=@binder={0x73622a85, 0xb, 0x1}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}, 0x40}], 0x9d, 0x0, &(0x7f0000000400)="3ef811a4856b61e328959935df150802f3f3ac7ffe80e6e1451f2fc9e59553873fc78f58f4fb200d8d73822a0a03aebeb91a53fa6e34e50905b8ef43a86c956e9140af1db935b0f41e12e07d53b203129b3e00da57177ebf813e5a46820ce9fbb65035cab23c60a4cfdd5d9e0b97c529d0e1daf43921f5777dcd50c1eb415a7aaa78a53c80b48f79151d07514f3b290dc1b7526f5f0438c3f328fe928f"})

23:15:40 executing program 3:
sysfs$1(0x1, &(0x7f0000000000)='\x00')
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:40 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:40 executing program 4:
r0 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000001180))
r1 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180))
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000080)=<r2=>0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f00000000c0)={{r1}, r2, 0x6, @unused=[0x200, 0x8, 0x4, 0x80], @subvolid=0x3})
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000))
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x5, 0x4, 0x4, 0x80000001, 0x4, 0xffffff7f, 0x7})

23:15:40 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x0, 0x0) (async)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000100)) (async)
r2 = syz_open_dev$vivid(&(0x7f0000000140), 0x1, 0x2)
ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, &(0x7f0000000180)={0x5, "07b44506071678194e4fef4f1e198ba0ad2d54ef7417255934f8f7802f90dd73", 0x20, 0xfff, 0xb4, 0x4, 0x1}) (async)
ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000080)={0x0, "db9fe7491644f31a3852a31f2203739af91822de83fdd32636cb699d0d0571e6", 0x2, 0x2, 0x0, 0x80000}) (async)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)

23:15:40 executing program 3:
sysfs$1(0x1, &(0x7f0000000000)='\x00')
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sysfs$1(0x1, &(0x7f0000000000)='\x00') (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)

23:15:40 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000080)={@rand_addr, @multicast2}, &(0x7f00000000c0)=0xc)
r2 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x110, 0x0, &(0x7f00000002c0)=[@decrefs={0x40046307, 0x2}, @decrefs={0x40046307, 0x2}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000500)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r1, @ANYBLOB="0000000000000000000000008561646600000000030000000000000001000000000000003e00000000000000852a646600000000", @ANYRES32=r2, @ANYBLOB="000000000000000000200000000000000004179090b9b9ef4c5060254d98b6e457156d99a203dcfd628d631377eb0b12651a252696abf6bea910c4f677d9d2e9acf33802003d8bba45edd5489012bbd8dc"], &(0x7f0000000000)={0x0, 0x18, 0x38}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1100, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/33, 0x21, 0x2, 0x27}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}}, @free_buffer, @dead_binder_done, @free_buffer, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x4, 0x1, 0x2}, @flat=@binder={0x73622a85, 0xb, 0x1}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}, 0x40}], 0x9d, 0x0, &(0x7f0000000400)="3ef811a4856b61e328959935df150802f3f3ac7ffe80e6e1451f2fc9e59553873fc78f58f4fb200d8d73822a0a03aebeb91a53fa6e34e50905b8ef43a86c956e9140af1db935b0f41e12e07d53b203129b3e00da57177ebf813e5a46820ce9fbb65035cab23c60a4cfdd5d9e0b97c529d0e1daf43921f5777dcd50c1eb415a7aaa78a53c80b48f79151d07514f3b290dc1b7526f5f0438c3f328fe928f"})

23:15:40 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:40 executing program 5:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000003c0)={0x0, 0x40, "2097e3f8e2dddf4afb2134548e97cccb4f3958cc19af08e62e904b2010dba0d4474a27d2148bc62a6f15c6cdf7ef4cc362d8a9ea3c79563a41830603f293fa81"})

23:15:40 executing program 4:
r0 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000001180)) (async)
r1 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180)) (async)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000080)=<r2=>0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f00000000c0)={{r1}, r2, 0x6, @unused=[0x200, 0x8, 0x4, 0x80], @subvolid=0x3}) (async, rerun: 32)
r3 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 32)
bind$can_j1939(r3, 0x0, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)) (async)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x5, 0x4, 0x4, 0x80000001, 0x4, 0xffffff7f, 0x7})

23:15:40 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x0, 0x0)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000100)) (async)
r2 = syz_open_dev$vivid(&(0x7f0000000140), 0x1, 0x2)
ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, &(0x7f0000000180)={0x5, "07b44506071678194e4fef4f1e198ba0ad2d54ef7417255934f8f7802f90dd73", 0x20, 0xfff, 0xb4, 0x4, 0x1}) (async)
ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000080)={0x0, "db9fe7491644f31a3852a31f2203739af91822de83fdd32636cb699d0d0571e6", 0x2, 0x2, 0x0, 0x80000})
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)

23:15:40 executing program 3:
sysfs$1(0x1, &(0x7f0000000000)='\x00')
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:40 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:40 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000080)={@rand_addr, @multicast2}, &(0x7f00000000c0)=0xc)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x110, 0x0, &(0x7f00000002c0)=[@decrefs={0x40046307, 0x2}, @decrefs={0x40046307, 0x2}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000500)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r1, @ANYBLOB="0000000000000000000000008561646600000000030000000000000001000000000000003e00000000000000852a646600000000", @ANYRES32, @ANYBLOB="000000000000000000200000000000000004179090b9b9ef4c5060254d98b6e457156d99a203dcfd628d631377eb0b12651a252696abf6bea910c4f677d9d2e9acf33802003d8bba45edd5489012bbd8dc"], &(0x7f0000000000)={0x0, 0x18, 0x38}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1100, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/33, 0x21, 0x2, 0x27}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}}, @free_buffer, @dead_binder_done, @free_buffer, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x4, 0x1, 0x2}, @flat=@binder={0x73622a85, 0xb, 0x1}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}, 0x40}], 0x9d, 0x0, &(0x7f0000000400)="3ef811a4856b61e328959935df150802f3f3ac7ffe80e6e1451f2fc9e59553873fc78f58f4fb200d8d73822a0a03aebeb91a53fa6e34e50905b8ef43a86c956e9140af1db935b0f41e12e07d53b203129b3e00da57177ebf813e5a46820ce9fbb65035cab23c60a4cfdd5d9e0b97c529d0e1daf43921f5777dcd50c1eb415a7aaa78a53c80b48f79151d07514f3b290dc1b7526f5f0438c3f328fe928f"})

23:15:40 executing program 5:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000003c0)={0x0, 0x40, "2097e3f8e2dddf4afb2134548e97cccb4f3958cc19af08e62e904b2010dba0d4474a27d2148bc62a6f15c6cdf7ef4cc362d8a9ea3c79563a41830603f293fa81"})

23:15:40 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x0, 0x0)
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000003c0)={<r3=>0x0, 0x2, 0x4, 0x1})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f00000007c0)={<r4=>0x0, "83415baedffe497dedf0d1997abe1b14"})
ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f00000017c0)={0x1, 0x6, {0xfffffffffffffffd, @usage=0x4, r3, 0x4, 0x10001, 0x0, 0x96, 0x7ff, 0x9, @struct={0x2, 0x401}, 0xe3f8, 0x40, [0xfffffffffffffffe, 0x4, 0xffffffff, 0x7, 0x4, 0x3]}, {0x4, @struct={0x21, 0x8}, 0x0, 0x5, 0x8001, 0xffff, 0x8000000000000001, 0x4, 0x414, @struct={0x1, 0x80000001}, 0x7, 0xffffffff, [0x3, 0x8000000000000001, 0x1, 0x80000001, 0x8, 0x10002]}, {0x7, @struct={0x3, 0xffff}, r4, 0x9, 0x0, 0x100000000, 0x7, 0x0, 0x12, @struct={0xbe, 0x7fff}, 0x40, 0x28d3, [0x7, 0x9, 0x40, 0xffffffffffffff4e, 0x5, 0x3]}, {0x4, 0x100000001, 0xff}})
ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000380)={0x2, 0x0, 0x0, 0xffffffbf, 0x0, 0x0})

23:15:40 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x5)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)

23:15:40 executing program 4:
r0 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000001180)) (async)
r1 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180))
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000080)=<r2=>0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f00000000c0)={{r1}, r2, 0x6, @unused=[0x200, 0x8, 0x4, 0x80], @subvolid=0x3}) (async)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r3, 0x0, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000))
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x5, 0x4, 0x4, 0x80000001, 0x4, 0xffffff7f, 0x7})

23:15:40 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:40 executing program 5:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000003c0)={0x0, 0x50, "2097e3f8e2dddf4afb2134548e97cccb4f3958cc19af08e62e904b2010dba0d4474a27d2148bc62a6f15c6cdf7ef4cc362d8a9ea3c79563a41830603f293fa81826f0063a776d7cf4178454cd4b2423c"})

23:15:40 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:40 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x110, 0x0, &(0x7f00000002c0)=[@decrefs={0x40046307, 0x2}, @decrefs={0x40046307, 0x2}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000500)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r1, @ANYBLOB="0000000000000000000000008561646600000000030000000000000001000000000000003e00000000000000852a646600000000", @ANYRES32, @ANYBLOB="000000000000000000200000000000000004179090b9b9ef4c5060254d98b6e457156d99a203dcfd628d631377eb0b12651a252696abf6bea910c4f677d9d2e9acf33802003d8bba45edd5489012bbd8dc"], &(0x7f0000000000)={0x0, 0x18, 0x38}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1100, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/33, 0x21, 0x2, 0x27}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}}, @free_buffer, @dead_binder_done, @free_buffer, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x4, 0x1, 0x2}, @flat=@binder={0x73622a85, 0xb, 0x1}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}, 0x40}], 0x9d, 0x0, &(0x7f0000000400)="3ef811a4856b61e328959935df150802f3f3ac7ffe80e6e1451f2fc9e59553873fc78f58f4fb200d8d73822a0a03aebeb91a53fa6e34e50905b8ef43a86c956e9140af1db935b0f41e12e07d53b203129b3e00da57177ebf813e5a46820ce9fbb65035cab23c60a4cfdd5d9e0b97c529d0e1daf43921f5777dcd50c1eb415a7aaa78a53c80b48f79151d07514f3b290dc1b7526f5f0438c3f328fe928f"})

23:15:40 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x5) (async)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)

23:15:40 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x110, 0x0, &(0x7f00000002c0)=[@decrefs={0x40046307, 0x2}, @decrefs={0x40046307, 0x2}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000500)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32, @ANYBLOB="0000000000000000000000008561646600000000030000000000000001000000000000003e00000000000000852a646600000000", @ANYRES32, @ANYBLOB="000000000000000000200000000000000004179090b9b9ef4c5060254d98b6e457156d99a203dcfd628d631377eb0b12651a252696abf6bea910c4f677d9d2e9acf33802003d8bba45edd5489012bbd8dc"], &(0x7f0000000000)={0x0, 0x18, 0x38}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1100, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/33, 0x21, 0x2, 0x27}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}}, @free_buffer, @dead_binder_done, @free_buffer, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x4, 0x1, 0x2}, @flat=@binder={0x73622a85, 0xb, 0x1}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}, 0x40}], 0x9d, 0x0, &(0x7f0000000400)="3ef811a4856b61e328959935df150802f3f3ac7ffe80e6e1451f2fc9e59553873fc78f58f4fb200d8d73822a0a03aebeb91a53fa6e34e50905b8ef43a86c956e9140af1db935b0f41e12e07d53b203129b3e00da57177ebf813e5a46820ce9fbb65035cab23c60a4cfdd5d9e0b97c529d0e1daf43921f5777dcd50c1eb415a7aaa78a53c80b48f79151d07514f3b290dc1b7526f5f0438c3f328fe928f"})

23:15:40 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x0, 0x0) (async)
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async, rerun: 32)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000003c0)={<r3=>0x0, 0x2, 0x4, 0x1}) (async, rerun: 32)
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f00000007c0)={<r4=>0x0, "83415baedffe497dedf0d1997abe1b14"})
ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f00000017c0)={0x1, 0x6, {0xfffffffffffffffd, @usage=0x4, r3, 0x4, 0x10001, 0x0, 0x96, 0x7ff, 0x9, @struct={0x2, 0x401}, 0xe3f8, 0x40, [0xfffffffffffffffe, 0x4, 0xffffffff, 0x7, 0x4, 0x3]}, {0x4, @struct={0x21, 0x8}, 0x0, 0x5, 0x8001, 0xffff, 0x8000000000000001, 0x4, 0x414, @struct={0x1, 0x80000001}, 0x7, 0xffffffff, [0x3, 0x8000000000000001, 0x1, 0x80000001, 0x8, 0x10002]}, {0x7, @struct={0x3, 0xffff}, r4, 0x9, 0x0, 0x100000000, 0x7, 0x0, 0x12, @struct={0xbe, 0x7fff}, 0x40, 0x28d3, [0x7, 0x9, 0x40, 0xffffffffffffff4e, 0x5, 0x3]}, {0x4, 0x100000001, 0xff}})
ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000380)={0x2, 0x0, 0x0, 0xffffffbf, 0x0, 0x0})

23:15:40 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  826.032076][ T6471] binder: 6470:6471 ioctl d000941e 200007c0 returned -22
23:15:40 executing program 5:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000003c0)={0x0, 0x40, "2097e3f8e2dddf4afb2134548e97cccb4f3958cc19af08e62e904b2010dba0d4474a27d2148bc62a6f15c6cdf7ef4cc362d8a9ea3c79563a41830603f293fa81"})

23:15:40 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:40 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:40 executing program 0:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x110, 0x0, &(0x7f00000002c0)=[@decrefs={0x40046307, 0x2}, @decrefs={0x40046307, 0x2}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000500)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32, @ANYBLOB="0000000000000000000000008561646600000000030000000000000001000000000000003e00000000000000852a646600000000", @ANYRES32, @ANYBLOB="000000000000000000200000000000000004179090b9b9ef4c5060254d98b6e457156d99a203dcfd628d631377eb0b12651a252696abf6bea910c4f677d9d2e9acf33802003d8bba45edd5489012bbd8dc"], &(0x7f0000000000)={0x0, 0x18, 0x38}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1100, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/33, 0x21, 0x2, 0x27}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}}, @free_buffer, @dead_binder_done, @free_buffer, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000200)={@fd, @fda={0x66646185, 0x4, 0x1, 0x2}, @flat=@binder={0x73622a85, 0xb, 0x1}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}, 0x40}], 0x9d, 0x0, &(0x7f0000000400)="3ef811a4856b61e328959935df150802f3f3ac7ffe80e6e1451f2fc9e59553873fc78f58f4fb200d8d73822a0a03aebeb91a53fa6e34e50905b8ef43a86c956e9140af1db935b0f41e12e07d53b203129b3e00da57177ebf813e5a46820ce9fbb65035cab23c60a4cfdd5d9e0b97c529d0e1daf43921f5777dcd50c1eb415a7aaa78a53c80b48f79151d07514f3b290dc1b7526f5f0438c3f328fe928f"})

23:15:40 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x5) (async)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)

23:15:40 executing program 5:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000003c0)={0x0, 0x40, "2097e3f8e2dddf4afb2134548e97cccb4f3958cc19af08e62e904b2010dba0d4474a27d2148bc62a6f15c6cdf7ef4cc362d8a9ea3c79563a41830603f293fa81"})

23:15:40 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x0, 0x0)
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000003c0)={<r3=>0x0, 0x2, 0x4, 0x1})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f00000007c0)={<r4=>0x0, "83415baedffe497dedf0d1997abe1b14"})
ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f00000017c0)={0x1, 0x6, {0xfffffffffffffffd, @usage=0x4, r3, 0x4, 0x10001, 0x0, 0x96, 0x7ff, 0x9, @struct={0x2, 0x401}, 0xe3f8, 0x40, [0xfffffffffffffffe, 0x4, 0xffffffff, 0x7, 0x4, 0x3]}, {0x4, @struct={0x21, 0x8}, 0x0, 0x5, 0x8001, 0xffff, 0x8000000000000001, 0x4, 0x414, @struct={0x1, 0x80000001}, 0x7, 0xffffffff, [0x3, 0x8000000000000001, 0x1, 0x80000001, 0x8, 0x10002]}, {0x7, @struct={0x3, 0xffff}, r4, 0x9, 0x0, 0x100000000, 0x7, 0x0, 0x12, @struct={0xbe, 0x7fff}, 0x40, 0x28d3, [0x7, 0x9, 0x40, 0xffffffffffffff4e, 0x5, 0x3]}, {0x4, 0x100000001, 0xff}})
ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000380)={0x2, 0x0, 0x0, 0xffffffbf, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x0, 0x0) (async)
memfd_secret(0x0) (async)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000003c0)={0x0, 0x2, 0x4, 0x1}) (async)
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f00000007c0)={0x0, "83415baedffe497dedf0d1997abe1b14"}) (async)
ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f00000017c0)={0x1, 0x6, {0xfffffffffffffffd, @usage=0x4, r3, 0x4, 0x10001, 0x0, 0x96, 0x7ff, 0x9, @struct={0x2, 0x401}, 0xe3f8, 0x40, [0xfffffffffffffffe, 0x4, 0xffffffff, 0x7, 0x4, 0x3]}, {0x4, @struct={0x21, 0x8}, 0x0, 0x5, 0x8001, 0xffff, 0x8000000000000001, 0x4, 0x414, @struct={0x1, 0x80000001}, 0x7, 0xffffffff, [0x3, 0x8000000000000001, 0x1, 0x80000001, 0x8, 0x10002]}, {0x7, @struct={0x3, 0xffff}, r4, 0x9, 0x0, 0x100000000, 0x7, 0x0, 0x12, @struct={0xbe, 0x7fff}, 0x40, 0x28d3, [0x7, 0x9, 0x40, 0xffffffffffffff4e, 0x5, 0x3]}, {0x4, 0x100000001, 0xff}}) (async)
ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000380)={0x2, 0x0, 0x0, 0xffffffbf, 0x0, 0x0}) (async)

23:15:40 executing program 4:
sysfs$1(0x1, &(0x7f0000000000)='\x00')
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:40 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:40 executing program 0:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x110, 0x0, &(0x7f00000002c0)=[@decrefs={0x40046307, 0x2}, @decrefs={0x40046307, 0x2}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000500)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32, @ANYBLOB="0000000000000000000000008561646600000000030000000000000001000000000000003e00000000000000852a646600000000", @ANYRES32, @ANYBLOB="000000000000000000200000000000000004179090b9b9ef4c5060254d98b6e457156d99a203dcfd628d631377eb0b12651a252696abf6bea910c4f677d9d2e9acf33802003d8bba45edd5489012bbd8dc"], &(0x7f0000000000)={0x0, 0x18, 0x38}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1100, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/33, 0x21, 0x2, 0x27}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}}, @free_buffer, @dead_binder_done, @free_buffer, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000200)={@fd, @fda={0x66646185, 0x4, 0x1, 0x2}, @flat=@binder={0x73622a85, 0xb, 0x1}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}, 0x40}], 0x9d, 0x0, &(0x7f0000000400)="3ef811a4856b61e328959935df150802f3f3ac7ffe80e6e1451f2fc9e59553873fc78f58f4fb200d8d73822a0a03aebeb91a53fa6e34e50905b8ef43a86c956e9140af1db935b0f41e12e07d53b203129b3e00da57177ebf813e5a46820ce9fbb65035cab23c60a4cfdd5d9e0b97c529d0e1daf43921f5777dcd50c1eb415a7aaa78a53c80b48f79151d07514f3b290dc1b7526f5f0438c3f328fe928f"})

23:15:40 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180))
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000080)={0x2, 0x4, 0x7, 0x6, 0xfffffeff, 0x55a4, 0x4})
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)
r2 = memfd_secret(0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x0, {0x2}}, 0x18)
sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1d, r4, 0x3, {0x2, 0xfe}}, 0x18, &(0x7f0000000180)={&(0x7f0000000100)="578ea31cae2242154d143feca525f0d37cee594e686e02185cee0008d469280ef904a263f7ef7214dc0b4fed4b08f9275f0215b171af98ffe1414a411b78e2c80e9461367d70bec6438bf607eb47eed35469ee6a90d5caa12269534e443ffa3cdba0f2f4e7270597d7d6d8e7", 0x6c}, 0x1, 0x0, 0x0, 0x880}, 0x4)
ioctl$NS_GET_USERNS(r2, 0xb701, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000000))

23:15:40 executing program 5:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000003c0)={0x0, 0x40, "2097e3f8e2dddf4afb2134548e97cccb4f3958cc19af08e62e904b2010dba0d4474a27d2148bc62a6f15c6cdf7ef4cc362d8a9ea3c79563a41830603f293fa81"})

23:15:40 executing program 4:
sysfs$1(0x1, &(0x7f0000000000)='\x00')
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:40 executing program 0:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x110, 0x0, &(0x7f00000002c0)=[@decrefs={0x40046307, 0x2}, @decrefs={0x40046307, 0x2}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000500)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32, @ANYBLOB="0000000000000000000000008561646600000000030000000000000001000000000000003e00000000000000852a646600000000", @ANYRES32, @ANYBLOB="000000000000000000200000000000000004179090b9b9ef4c5060254d98b6e457156d99a203dcfd628d631377eb0b12651a252696abf6bea910c4f677d9d2e9acf33802003d8bba45edd5489012bbd8dc"], &(0x7f0000000000)={0x0, 0x18, 0x38}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1100, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/33, 0x21, 0x2, 0x27}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}}, @free_buffer, @dead_binder_done, @free_buffer, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000200)={@fd, @fda={0x66646185, 0x4, 0x1, 0x2}, @flat=@binder={0x73622a85, 0xb, 0x1}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}, 0x40}], 0x9d, 0x0, &(0x7f0000000400)="3ef811a4856b61e328959935df150802f3f3ac7ffe80e6e1451f2fc9e59553873fc78f58f4fb200d8d73822a0a03aebeb91a53fa6e34e50905b8ef43a86c956e9140af1db935b0f41e12e07d53b203129b3e00da57177ebf813e5a46820ce9fbb65035cab23c60a4cfdd5d9e0b97c529d0e1daf43921f5777dcd50c1eb415a7aaa78a53c80b48f79151d07514f3b290dc1b7526f5f0438c3f328fe928f"})

23:15:40 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180))
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000080)={0x2, 0x4, 0x7, 0x6, 0xfffffeff, 0x55a4, 0x4})
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)
r2 = memfd_secret(0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x0, {0x2}}, 0x18)
sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1d, r4, 0x3, {0x2, 0xfe}}, 0x18, &(0x7f0000000180)={&(0x7f0000000100)="578ea31cae2242154d143feca525f0d37cee594e686e02185cee0008d469280ef904a263f7ef7214dc0b4fed4b08f9275f0215b171af98ffe1414a411b78e2c80e9461367d70bec6438bf607eb47eed35469ee6a90d5caa12269534e443ffa3cdba0f2f4e7270597d7d6d8e7", 0x6c}, 0x1, 0x0, 0x0, 0x880}, 0x4)
ioctl$NS_GET_USERNS(r2, 0xb701, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000000))
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async)
syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2) (async)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180)) (async)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000080)={0x2, 0x4, 0x7, 0x6, 0xfffffeff, 0x55a4, 0x4}) (async)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0) (async)
memfd_secret(0x0) (async)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) (async)
bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x0, {0x2}}, 0x18) (async)
sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1d, r4, 0x3, {0x2, 0xfe}}, 0x18, &(0x7f0000000180)={&(0x7f0000000100)="578ea31cae2242154d143feca525f0d37cee594e686e02185cee0008d469280ef904a263f7ef7214dc0b4fed4b08f9275f0215b171af98ffe1414a411b78e2c80e9461367d70bec6438bf607eb47eed35469ee6a90d5caa12269534e443ffa3cdba0f2f4e7270597d7d6d8e7", 0x6c}, 0x1, 0x0, 0x0, 0x880}, 0x4) (async)
ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) (async)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000000)) (async)

23:15:40 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:40 executing program 5:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000003c0)={0x0, 0x48, "2097e3f8e2dddf4afb2134548e97cccb4f3958cc19af08e62e904b2010dba0d4474a27d2148bc62a6f15c6cdf7ef4cc362d8a9ea3c79563a41830603f293fa81826f0063a776d7cf"})

[  826.210054][ T6514] binder: 6506:6514 ioctl d000941e 200007c0 returned -22
23:15:40 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180))
r2 = socket$inet(0x2, 0x80000, 0x8)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f00000003c0)={{r2}, 0x0, 0x0, @unused=[0x8000, 0x4, 0x0, 0x6], @subvolid=0x3})

23:15:40 executing program 4:
sysfs$1(0x1, &(0x7f0000000000)='\x00')
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:40 executing program 5:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000003c0)={0x0, 0x40, "2097e3f8e2dddf4afb2134548e97cccb4f3958cc19af08e62e904b2010dba0d4474a27d2148bc62a6f15c6cdf7ef4cc362d8a9ea3c79563a41830603f293fa81"})

23:15:40 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:40 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x110, 0x0, &(0x7f00000002c0)=[@decrefs={0x40046307, 0x2}, @decrefs={0x40046307, 0x2}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000500)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32, @ANYBLOB="0000000000000000000000008561646600000000030000000000000001000000000000003e00000000000000852a646600000000", @ANYRES32, @ANYBLOB="000000000000000000200000000000000004179090b9b9ef4c5060254d98b6e457156d99a203dcfd628d631377eb0b12651a252696abf6bea910c4f677d9d2e9acf33802003d8bba45edd5489012bbd8dc"], &(0x7f0000000000)={0x0, 0x18, 0x38}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1100, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/33, 0x21, 0x2, 0x27}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}}, @free_buffer, @dead_binder_done, @free_buffer, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x4, 0x1, 0x2}, @flat=@binder={0x73622a85, 0xb, 0x1}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}, 0x40}], 0x9d, 0x0, &(0x7f0000000400)="3ef811a4856b61e328959935df150802f3f3ac7ffe80e6e1451f2fc9e59553873fc78f58f4fb200d8d73822a0a03aebeb91a53fa6e34e50905b8ef43a86c956e9140af1db935b0f41e12e07d53b203129b3e00da57177ebf813e5a46820ce9fbb65035cab23c60a4cfdd5d9e0b97c529d0e1daf43921f5777dcd50c1eb415a7aaa78a53c80b48f79151d07514f3b290dc1b7526f5f0438c3f328fe928f"})

23:15:40 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 64)
r1 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2) (rerun: 64)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180))
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000080)={0x2, 0x4, 0x7, 0x6, 0xfffffeff, 0x55a4, 0x4})
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0) (async)
r2 = memfd_secret(0x0) (async, rerun: 32)
r3 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x0, {0x2}}, 0x18) (async)
sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1d, r4, 0x3, {0x2, 0xfe}}, 0x18, &(0x7f0000000180)={&(0x7f0000000100)="578ea31cae2242154d143feca525f0d37cee594e686e02185cee0008d469280ef904a263f7ef7214dc0b4fed4b08f9275f0215b171af98ffe1414a411b78e2c80e9461367d70bec6438bf607eb47eed35469ee6a90d5caa12269534e443ffa3cdba0f2f4e7270597d7d6d8e7", 0x6c}, 0x1, 0x0, 0x0, 0x880}, 0x4) (async, rerun: 64)
ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) (rerun: 64)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000000))

23:15:40 executing program 4:
sysfs$1(0x1, &(0x7f0000000000)='\x00')
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)

23:15:40 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x110, 0x0, &(0x7f00000002c0)=[@decrefs={0x40046307, 0x2}, @decrefs={0x40046307, 0x2}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000500)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32, @ANYBLOB="0000000000000000000000008561646600000000030000000000000001000000000000003e00000000000000852a646600000000", @ANYRES32, @ANYBLOB="000000000000000000200000000000000004179090b9b9ef4c5060254d98b6e457156d99a203dcfd628d631377eb0b12651a252696abf6bea910c4f677d9d2e9acf33802003d8bba45edd5489012bbd8dc"], &(0x7f0000000000)={0x0, 0x18, 0x38}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1100, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/33, 0x21, 0x2, 0x27}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}}, @free_buffer, @dead_binder_done, @free_buffer, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x4, 0x1, 0x2}, @flat=@binder={0x73622a85, 0xb, 0x1}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}, 0x40}], 0x9d, 0x0, &(0x7f0000000400)="3ef811a4856b61e328959935df150802f3f3ac7ffe80e6e1451f2fc9e59553873fc78f58f4fb200d8d73822a0a03aebeb91a53fa6e34e50905b8ef43a86c956e9140af1db935b0f41e12e07d53b203129b3e00da57177ebf813e5a46820ce9fbb65035cab23c60a4cfdd5d9e0b97c529d0e1daf43921f5777dcd50c1eb415a7aaa78a53c80b48f79151d07514f3b290dc1b7526f5f0438c3f328fe928f"})

23:15:40 executing program 5:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000003c0)={0x0, 0x40, "2097e3f8e2dddf4afb2134548e97cccb4f3958cc19af08e62e904b2010dba0d4474a27d2148bc62a6f15c6cdf7ef4cc362d8a9ea3c79563a41830603f293fa81"})

23:15:40 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:40 executing program 5:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000003c0)={0x0, 0x40, "2097e3f8e2dddf4afb2134548e97cccb4f3958cc19af08e62e904b2010dba0d4474a27d2148bc62a6f15c6cdf7ef4cc362d8a9ea3c79563a41830603f293fa81"})

23:15:40 executing program 4:
sysfs$1(0x1, &(0x7f0000000000)='\x00')

23:15:40 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r1 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180)) (async)
r2 = socket$inet(0x2, 0x80000, 0x8)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f00000003c0)={{r2}, 0x0, 0x0, @unused=[0x8000, 0x4, 0x0, 0x6], @subvolid=0x3})

23:15:40 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x110, 0x0, &(0x7f00000002c0)=[@decrefs={0x40046307, 0x2}, @decrefs={0x40046307, 0x2}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000500)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32, @ANYBLOB="0000000000000000000000008561646600000000030000000000000001000000000000003e00000000000000852a646600000000", @ANYRES32, @ANYBLOB="000000000000000000200000000000000004179090b9b9ef4c5060254d98b6e457156d99a203dcfd628d631377eb0b12651a252696abf6bea910c4f677d9d2e9acf33802003d8bba45edd5489012bbd8dc"], &(0x7f0000000000)={0x0, 0x18, 0x38}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1100, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/33, 0x21, 0x2, 0x27}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}}, @free_buffer, @dead_binder_done, @free_buffer, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x4, 0x1, 0x2}, @flat=@binder={0x73622a85, 0xb, 0x1}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}, 0x40}], 0x9d, 0x0, &(0x7f0000000400)="3ef811a4856b61e328959935df150802f3f3ac7ffe80e6e1451f2fc9e59553873fc78f58f4fb200d8d73822a0a03aebeb91a53fa6e34e50905b8ef43a86c956e9140af1db935b0f41e12e07d53b203129b3e00da57177ebf813e5a46820ce9fbb65035cab23c60a4cfdd5d9e0b97c529d0e1daf43921f5777dcd50c1eb415a7aaa78a53c80b48f79151d07514f3b290dc1b7526f5f0438c3f328fe928f"})

23:15:40 executing program 4:
sysfs$1(0x1, 0x0)

23:15:40 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:40 executing program 5:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000003c0)={0x0, 0x44, "2097e3f8e2dddf4afb2134548e97cccb4f3958cc19af08e62e904b2010dba0d4474a27d2148bc62a6f15c6cdf7ef4cc362d8a9ea3c79563a41830603f293fa81826f0063"})

23:15:40 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x110, 0x0, &(0x7f00000002c0)=[@decrefs={0x40046307, 0x2}, @decrefs={0x40046307, 0x2}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000500)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32, @ANYBLOB="0000000000000000000000008561646600000000030000000000000001000000000000003e00000000000000852a646600000000", @ANYRES32, @ANYBLOB="000000000000000000200000000000000004179090b9b9ef4c5060254d98b6e457156d99a203dcfd628d631377eb0b12651a252696abf6bea910c4f677d9d2e9acf33802003d8bba45edd5489012bbd8dc"], &(0x7f0000000000)={0x0, 0x18, 0x38}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1100, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/33, 0x21, 0x2, 0x27}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}}, @free_buffer, @dead_binder_done, @free_buffer, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x4, 0x1, 0x2}, @flat=@binder={0x73622a85, 0xb, 0x1}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}, 0x40}], 0x9d, 0x0, &(0x7f0000000400)="3ef811a4856b61e328959935df150802f3f3ac7ffe80e6e1451f2fc9e59553873fc78f58f4fb200d8d73822a0a03aebeb91a53fa6e34e50905b8ef43a86c956e9140af1db935b0f41e12e07d53b203129b3e00da57177ebf813e5a46820ce9fbb65035cab23c60a4cfdd5d9e0b97c529d0e1daf43921f5777dcd50c1eb415a7aaa78a53c80b48f79151d07514f3b290dc1b7526f5f0438c3f328fe928f"})

23:15:40 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:40 executing program 4:
sysfs$1(0x1, 0x0)

23:15:40 executing program 5:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000003c0)={0x0, 0x40, "2097e3f8e2dddf4afb2134548e97cccb4f3958cc19af08e62e904b2010dba0d4474a27d2148bc62a6f15c6cdf7ef4cc362d8a9ea3c79563a41830603f293fa81"})

23:15:41 executing program 4:
sysfs$1(0x1, 0x0)

23:15:41 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:41 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x110, 0x0, &(0x7f00000002c0)=[@decrefs={0x40046307, 0x2}, @decrefs={0x40046307, 0x2}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000500)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32, @ANYBLOB="0000000000000000000000008561646600000000030000000000000001000000000000003e00000000000000852a646600000000", @ANYRES32, @ANYBLOB="000000000000000000200000000000000004179090b9b9ef4c5060254d98b6e457156d99a203dcfd628d631377eb0b12651a252696abf6bea910c4f677d9d2e9acf33802003d8bba45edd5489012bbd8dc"], &(0x7f0000000000)={0x0, 0x18, 0x38}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1100, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/33, 0x21, 0x2, 0x27}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}}, @free_buffer, @dead_binder_done, @free_buffer, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x4, 0x1, 0x2}, @flat=@binder={0x73622a85, 0xb, 0x1}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}, 0x40}], 0x9d, 0x0, &(0x7f0000000400)="3ef811a4856b61e328959935df150802f3f3ac7ffe80e6e1451f2fc9e59553873fc78f58f4fb200d8d73822a0a03aebeb91a53fa6e34e50905b8ef43a86c956e9140af1db935b0f41e12e07d53b203129b3e00da57177ebf813e5a46820ce9fbb65035cab23c60a4cfdd5d9e0b97c529d0e1daf43921f5777dcd50c1eb415a7aaa78a53c80b48f79151d07514f3b290dc1b7526f5f0438c3f328fe928f"})

23:15:41 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180))
r2 = socket$inet(0x2, 0x80000, 0x8)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f00000003c0)={{r2}, 0x0, 0x0, @unused=[0x8000, 0x4, 0x0, 0x6], @subvolid=0x3})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2) (async)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180)) (async)
socket$inet(0x2, 0x80000, 0x8) (async)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f00000003c0)={{r2}, 0x0, 0x0, @unused=[0x8000, 0x4, 0x0, 0x6], @subvolid=0x3}) (async)

23:15:41 executing program 5:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000003c0)={0x0, 0x40, "2097e3f8e2dddf4afb2134548e97cccb4f3958cc19af08e62e904b2010dba0d4474a27d2148bc62a6f15c6cdf7ef4cc362d8a9ea3c79563a41830603f293fa81"})

23:15:41 executing program 2:
memfd_secret(0x0)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000011c0)={0x0, 0x7, 0x4, 0x1})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x2, 0x0)
socketpair(0x18, 0xa, 0x2, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180))
r2 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r2, 0xb701, 0x0)
ioctl$NS_GET_USERNS(r2, 0xb701, 0x0)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x543400, 0x0)
r3 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
r4 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000001180))
ioctl$VIDIOC_G_TUNER(r4, 0xc054561d, &(0x7f0000000100)={0x5, "a17bb450abad7c67a30000000600", 0x1, 0x80, 0x800, 0xbd2, 0x8, 0x3, 0xfff, 0x5})
ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000001180))
r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x408701, 0x0)
pidfd_getfd(r5, r1, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000c80)={0x0, 0x0, {0x0, @usage, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000480)={<r7=>0x0, 0x10001, 0x3f, 0x1})
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000880)={0x0, 0x0, {0x37, @struct={0x0, 0x4}, r6, 0x20, 0x9, 0x4, 0x8, 0x7fffffffffffffff, 0x2c, @struct={0x6, 0xa88}, 0x2, 0x5, [0x180, 0x7, 0x5e5, 0x501f5d63, 0x98f1, 0x8b]}, {0x4, @struct={0x1f, 0x1}, r7, 0x9, 0x0, 0xfff, 0x8000000000000001, 0xfffffffffffffffe, 0xc2, @usage=0x4, 0x9, 0x7, [0x6, 0xfffffffffffffffd, 0x81, 0x1, 0x5, 0x800]}, {0x8000, @usage=0x2, 0x0, 0x4, 0x9, 0x8, 0x8000000000000000, 0xf1, 0xc6f, @struct={0x1, 0x5}, 0x8001, 0x8001, [0x6, 0x1ff, 0x5884, 0x39c6, 0x2f07]}, {0x8000000000000000, 0x3, 0x1}})

23:15:41 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:41 executing program 4:
r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000080)={0x0, @reserved})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:41 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x110, 0x0, &(0x7f00000002c0)=[@decrefs={0x40046307, 0x2}, @decrefs={0x40046307, 0x2}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000500)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32, @ANYBLOB="0000000000000000000000008561646600000000030000000000000001000000000000003e00000000000000852a646600000000", @ANYRES32, @ANYBLOB="000000000000000000200000000000000004179090b9b9ef4c5060254d98b6e457156d99a203dcfd628d631377eb0b12651a252696abf6bea910c4f677d9d2e9acf33802003d8bba45edd5489012bbd8dc"], &(0x7f0000000000)={0x0, 0x18, 0x38}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1100, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/33, 0x21, 0x2, 0x27}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}}, @free_buffer, @dead_binder_done, @free_buffer, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x4, 0x1, 0x2}, @flat=@binder={0x73622a85, 0xb, 0x1}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}, 0x40}], 0x9d, 0x0, &(0x7f0000000400)="3ef811a4856b61e328959935df150802f3f3ac7ffe80e6e1451f2fc9e59553873fc78f58f4fb200d8d73822a0a03aebeb91a53fa6e34e50905b8ef43a86c956e9140af1db935b0f41e12e07d53b203129b3e00da57177ebf813e5a46820ce9fbb65035cab23c60a4cfdd5d9e0b97c529d0e1daf43921f5777dcd50c1eb415a7aaa78a53c80b48f79151d07514f3b290dc1b7526f5f0438c3f328fe928f"})

23:15:41 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:41 executing program 5:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000003c0)={0x0, 0x40, "2097e3f8e2dddf4afb2134548e97cccb4f3958cc19af08e62e904b2010dba0d4474a27d2148bc62a6f15c6cdf7ef4cc362d8a9ea3c79563a41830603f293fa81"})

23:15:41 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x3})
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)
r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0, r5}}, 0x18)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r8=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r7, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0, r8}}, 0x18)
r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r9, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {&(0x7f0000000200), r5, 0x2}}, 0x18)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000000)={0x2, 0x1b, 0xfa00, {0x0, {0xa, 0x4e22, 0x3, @local, 0x3}, r8}}, 0x30)

23:15:41 executing program 2:
memfd_secret(0x0)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000011c0)={0x0, 0x7, 0x4, 0x1})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x2, 0x0)
socketpair(0x18, 0xa, 0x2, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180))
r2 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r2, 0xb701, 0x0)
ioctl$NS_GET_USERNS(r2, 0xb701, 0x0)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x543400, 0x0)
r3 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
r4 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000001180))
ioctl$VIDIOC_G_TUNER(r4, 0xc054561d, &(0x7f0000000100)={0x5, "a17bb450abad7c67a30000000600", 0x1, 0x80, 0x800, 0xbd2, 0x8, 0x3, 0xfff, 0x5})
ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000001180))
r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x408701, 0x0)
pidfd_getfd(r5, r1, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000c80)={0x0, 0x0, {0x0, @usage, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000480)={<r7=>0x0, 0x10001, 0x3f, 0x1})
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000880)={0x0, 0x0, {0x37, @struct={0x0, 0x4}, r6, 0x20, 0x9, 0x4, 0x8, 0x7fffffffffffffff, 0x2c, @struct={0x6, 0xa88}, 0x2, 0x5, [0x180, 0x7, 0x5e5, 0x501f5d63, 0x98f1, 0x8b]}, {0x4, @struct={0x1f, 0x1}, r7, 0x9, 0x0, 0xfff, 0x8000000000000001, 0xfffffffffffffffe, 0xc2, @usage=0x4, 0x9, 0x7, [0x6, 0xfffffffffffffffd, 0x81, 0x1, 0x5, 0x800]}, {0x8000, @usage=0x2, 0x0, 0x4, 0x9, 0x8, 0x8000000000000000, 0xf1, 0xc6f, @struct={0x1, 0x5}, 0x8001, 0x8001, [0x6, 0x1ff, 0x5884, 0x39c6, 0x2f07]}, {0x8000000000000000, 0x3, 0x1}})
memfd_secret(0x0) (async)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000011c0)={0x0, 0x7, 0x4, 0x1}) (async)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x2, 0x0) (async)
socketpair(0x18, 0xa, 0x2, &(0x7f0000000000)) (async)
syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2) (async)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180)) (async)
memfd_secret(0x0) (async)
ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) (async)
ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) (async)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x543400, 0x0) (async)
syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2) (async)
syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2) (async)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000001180)) (async)
ioctl$VIDIOC_G_TUNER(r4, 0xc054561d, &(0x7f0000000100)={0x5, "a17bb450abad7c67a30000000600", 0x1, 0x80, 0x800, 0xbd2, 0x8, 0x3, 0xfff, 0x5}) (async)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000001180)) (async)
openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x408701, 0x0) (async)
pidfd_getfd(r5, r1, 0x0) (async)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000c80)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000480)={0x0, 0x10001, 0x3f, 0x1}) (async)
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000880)={0x0, 0x0, {0x37, @struct={0x0, 0x4}, r6, 0x20, 0x9, 0x4, 0x8, 0x7fffffffffffffff, 0x2c, @struct={0x6, 0xa88}, 0x2, 0x5, [0x180, 0x7, 0x5e5, 0x501f5d63, 0x98f1, 0x8b]}, {0x4, @struct={0x1f, 0x1}, r7, 0x9, 0x0, 0xfff, 0x8000000000000001, 0xfffffffffffffffe, 0xc2, @usage=0x4, 0x9, 0x7, [0x6, 0xfffffffffffffffd, 0x81, 0x1, 0x5, 0x800]}, {0x8000, @usage=0x2, 0x0, 0x4, 0x9, 0x8, 0x8000000000000000, 0xf1, 0xc6f, @struct={0x1, 0x5}, 0x8001, 0x8001, [0x6, 0x1ff, 0x5884, 0x39c6, 0x2f07]}, {0x8000000000000000, 0x3, 0x1}}) (async)

23:15:41 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

23:15:41 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:41 executing program 3:
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040))
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:41 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x3})
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)
r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0, r5}}, 0x18)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r8=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r7, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0, r8}}, 0x18)
r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r9, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {&(0x7f0000000200), r5, 0x2}}, 0x18)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000000)={0x2, 0x1b, 0xfa00, {0x0, {0xa, 0x4e22, 0x3, @local, 0x3}, r8}}, 0x30)

23:15:41 executing program 5:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000003c0)={0x0, 0x42, "2097e3f8e2dddf4afb2134548e97cccb4f3958cc19af08e62e904b2010dba0d4474a27d2148bc62a6f15c6cdf7ef4cc362d8a9ea3c79563a41830603f293fa81826f"})

23:15:41 executing program 2:
memfd_secret(0x0) (async)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000011c0)={0x0, 0x7, 0x4, 0x1}) (async)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x2, 0x0) (async)
socketpair(0x18, 0xa, 0x2, &(0x7f0000000000)={<r0=>0xffffffffffffffff}) (async)
r1 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180))
r2 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) (async)
ioctl$NS_GET_USERNS(r2, 0xb701, 0x0)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x543400, 0x0) (async, rerun: 64)
r3 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2) (rerun: 64)
r4 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000001180)) (async)
ioctl$VIDIOC_G_TUNER(r4, 0xc054561d, &(0x7f0000000100)={0x5, "a17bb450abad7c67a30000000600", 0x1, 0x80, 0x800, 0xbd2, 0x8, 0x3, 0xfff, 0x5}) (async, rerun: 32)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000001180)) (async, rerun: 32)
r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x408701, 0x0)
pidfd_getfd(r5, r1, 0x0) (async)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000c80)={0x0, 0x0, {0x0, @usage, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async, rerun: 32)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000480)={<r7=>0x0, 0x10001, 0x3f, 0x1}) (rerun: 32)
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000880)={0x0, 0x0, {0x37, @struct={0x0, 0x4}, r6, 0x20, 0x9, 0x4, 0x8, 0x7fffffffffffffff, 0x2c, @struct={0x6, 0xa88}, 0x2, 0x5, [0x180, 0x7, 0x5e5, 0x501f5d63, 0x98f1, 0x8b]}, {0x4, @struct={0x1f, 0x1}, r7, 0x9, 0x0, 0xfff, 0x8000000000000001, 0xfffffffffffffffe, 0xc2, @usage=0x4, 0x9, 0x7, [0x6, 0xfffffffffffffffd, 0x81, 0x1, 0x5, 0x800]}, {0x8000, @usage=0x2, 0x0, 0x4, 0x9, 0x8, 0x8000000000000000, 0xf1, 0xc6f, @struct={0x1, 0x5}, 0x8001, 0x8001, [0x6, 0x1ff, 0x5884, 0x39c6, 0x2f07]}, {0x8000000000000000, 0x3, 0x1}})

23:15:41 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:41 executing program 5:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000003c0)={0x0, 0x40, "2097e3f8e2dddf4afb2134548e97cccb4f3958cc19af08e62e904b2010dba0d4474a27d2148bc62a6f15c6cdf7ef4cc362d8a9ea3c79563a41830603f293fa81"})

23:15:41 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x3})
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)
r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0, r5}}, 0x18)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r8=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r7, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0, r8}}, 0x18)
r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r9, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {&(0x7f0000000200), r5, 0x2}}, 0x18)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000000)={0x2, 0x1b, 0xfa00, {0x0, {0xa, 0x4e22, 0x3, @local, 0x3}, r8}}, 0x30)

23:15:41 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:41 executing program 5:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000003c0)={0x0, 0x40, "2097e3f8e2dddf4afb2134548e97cccb4f3958cc19af08e62e904b2010dba0d4474a27d2148bc62a6f15c6cdf7ef4cc362d8a9ea3c79563a41830603f293fa81"})

[  826.739999][ T6646] binder: 6641:6646 ioctl c0306201 0 returned -14
23:15:41 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r2, 0xb701, 0x0)
pidfd_getfd(r1, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0x2, 0x0)

23:15:41 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

23:15:41 executing program 3:
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040))
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:41 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x3})
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)
pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0, r4}}, 0x18)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r7=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0, r7}}, 0x18)
r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r8, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {&(0x7f0000000200), r4, 0x2}}, 0x18)

23:15:41 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) (async)
r2 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r2, 0xb701, 0x0)
pidfd_getfd(r1, 0xffffffffffffffff, 0x0) (async)
ioctl$BINDER_WRITE_READ(r2, 0x2, 0x0)

23:15:41 executing program 3:
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040))
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) (async)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x800, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)

23:15:41 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:41 executing program 5:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000003c0)={0x0, 0x40, "2097e3f8e2dddf4afb2134548e97cccb4f3958cc19af08e62e904b2010dba0d4474a27d2148bc62a6f15c6cdf7ef4cc362d8a9ea3c79563a41830603f293fa81"})

23:15:41 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[  826.836681][ T6666] binder: 6665:6666 ioctl c0306201 0 returned -14
23:15:41 executing program 5:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000003c0)={0x0, 0x41, "2097e3f8e2dddf4afb2134548e97cccb4f3958cc19af08e62e904b2010dba0d4474a27d2148bc62a6f15c6cdf7ef4cc362d8a9ea3c79563a41830603f293fa8182"})

23:15:41 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180))
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000003c0)={0x0, 0x3, 0xfffffffffffffffb})
r2 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r2, 0xb701, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000000)={0x3})

23:15:41 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x3})
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)
pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0, r4}}, 0x18)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r7=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0, r7}}, 0x18)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {&(0x7f0000000200), r4, 0x2}}, 0x18)

23:15:41 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) (async, rerun: 64)
r2 = memfd_secret(0x0) (rerun: 64)
ioctl$NS_GET_USERNS(r2, 0xb701, 0x0)
pidfd_getfd(r1, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0x2, 0x0)

23:15:41 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:41 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x3})
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)
pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0, r4}}, 0x18)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r7=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0, r7}}, 0x18)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {&(0x7f0000000200), r4, 0x2}}, 0x18)

23:15:41 executing program 5:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000003c0)={0x0, 0x40, "2097e3f8e2dddf4afb2134548e97cccb4f3958cc19af08e62e904b2010dba0d4474a27d2148bc62a6f15c6cdf7ef4cc362d8a9ea3c79563a41830603f293fa81"})

23:15:41 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x9d, 0x0, &(0x7f0000000400)="3ef811a4856b61e328959935df150802f3f3ac7ffe80e6e1451f2fc9e59553873fc78f58f4fb200d8d73822a0a03aebeb91a53fa6e34e50905b8ef43a86c956e9140af1db935b0f41e12e07d53b203129b3e00da57177ebf813e5a46820ce9fbb65035cab23c60a4cfdd5d9e0b97c529d0e1daf43921f5777dcd50c1eb415a7aaa78a53c80b48f79151d07514f3b290dc1b7526f5f0438c3f328fe928f"})

23:15:41 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180))
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000003c0)={0x0, 0x3, 0xfffffffffffffffb})
r2 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r2, 0xb701, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000000)={0x3})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async)
syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2) (async)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180)) (async)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000003c0)={0x0, 0x3, 0xfffffffffffffffb}) (async)
memfd_secret(0x0) (async)
ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
memfd_secret(0x0) (async)
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) (async)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000000)={0x3}) (async)

23:15:41 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)
write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040)={'veth0_macvtap', 0x32, 0x33}, 0x10)

23:15:41 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  826.943723][ T6698] binder: 6696:6698 ioctl c0306201 0 returned -14
23:15:41 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x9d, 0x0, &(0x7f0000000400)="3ef811a4856b61e328959935df150802f3f3ac7ffe80e6e1451f2fc9e59553873fc78f58f4fb200d8d73822a0a03aebeb91a53fa6e34e50905b8ef43a86c956e9140af1db935b0f41e12e07d53b203129b3e00da57177ebf813e5a46820ce9fbb65035cab23c60a4cfdd5d9e0b97c529d0e1daf43921f5777dcd50c1eb415a7aaa78a53c80b48f79151d07514f3b290dc1b7526f5f0438c3f328fe928f"})

23:15:41 executing program 5:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000003c0)={0x0, 0x40, "2097e3f8e2dddf4afb2134548e97cccb4f3958cc19af08e62e904b2010dba0d4474a27d2148bc62a6f15c6cdf7ef4cc362d8a9ea3c79563a41830603f293fa81"})

23:15:41 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x3})
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)
pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0, r4}}, 0x18)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r7=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0, r7}}, 0x18)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {&(0x7f0000000200), r4, 0x2}}, 0x18)

23:15:41 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r1 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180)) (async)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000003c0)={0x0, 0x3, 0xfffffffffffffffb})
r2 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) (async, rerun: 64)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 64)
r3 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) (async)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000000)={0x3})

23:15:41 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)
write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040)={'veth0_macvtap', 0x32, 0x33}, 0x10)

23:15:41 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:41 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x9d, 0x0, &(0x7f0000000400)="3ef811a4856b61e328959935df150802f3f3ac7ffe80e6e1451f2fc9e59553873fc78f58f4fb200d8d73822a0a03aebeb91a53fa6e34e50905b8ef43a86c956e9140af1db935b0f41e12e07d53b203129b3e00da57177ebf813e5a46820ce9fbb65035cab23c60a4cfdd5d9e0b97c529d0e1daf43921f5777dcd50c1eb415a7aaa78a53c80b48f79151d07514f3b290dc1b7526f5f0438c3f328fe928f"})

23:15:41 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x3})
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)
pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0, r4}}, 0x18)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {&(0x7f0000000200), r4, 0x2}}, 0x18)

23:15:41 executing program 5:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000003c0)={0x0, 0x40, "2097e3f8e2dddf4afb2134548e97cccb4f3958cc19af08e62e904b2010dba0d4474a27d2148bc62a6f15c6cdf7ef4cc362d8a9ea3c79563a41830603f293fa81"})

23:15:41 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0) (async)
write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040)={'veth0_macvtap', 0x32, 0x33}, 0x10)

23:15:41 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0xc4, 0x0, &(0x7f00000002c0)=[@decrefs={0x40046307, 0x2}, @decrefs={0x40046307, 0x2}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000500)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32, @ANYBLOB="0000000000000000000000008561646600000000030000000000000001000000000000003e00000000000000852a646600000000", @ANYRES32, @ANYBLOB="000000000000000000200000000000000004179090b9b9ef4c5060254d98b6e457156d99a203dcfd628d631377eb0b12651a252696abf6bea910c4f677d9d2e9acf33802003d8bba45edd5489012bbd8dc"], &(0x7f0000000000)={0x0, 0x18, 0x38}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1100, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/33, 0x21, 0x2, 0x27}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}}, @free_buffer, @dead_binder_done, @free_buffer], 0x9d, 0x0, &(0x7f0000000400)="3ef811a4856b61e328959935df150802f3f3ac7ffe80e6e1451f2fc9e59553873fc78f58f4fb200d8d73822a0a03aebeb91a53fa6e34e50905b8ef43a86c956e9140af1db935b0f41e12e07d53b203129b3e00da57177ebf813e5a46820ce9fbb65035cab23c60a4cfdd5d9e0b97c529d0e1daf43921f5777dcd50c1eb415a7aaa78a53c80b48f79151d07514f3b290dc1b7526f5f0438c3f328fe928f"})

23:15:41 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:41 executing program 3:
pselect6(0x40, &(0x7f0000000000)={0x7, 0x7, 0x7, 0x327, 0x8, 0x3f, 0xffffffffffff2e20, 0x2c2}, &(0x7f0000000080)={0xfff, 0x9, 0x100000000, 0x9, 0x2f, 0x3, 0xfff}, &(0x7f00000000c0)={0x8000, 0x6, 0xffffffffffff8000, 0x6, 0x874a, 0x5, 0x592e, 0xffffffff}, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={[0xfd4]}, 0x8})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@bridge_getvlan={0x38, 0x72, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x8800)
r0 = memfd_secret(0x80000)
r1 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180))
ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f00000002c0)={0x81, 0x0, '\x00', {0x0, @bt={0x400, 0x8, 0x0, 0x3, 0x1, 0x8, 0x3, 0x81, 0x9, 0x1, 0x95e0, 0x0, 0x1000, 0x8, 0x0, 0x2, {0x4, 0xd7}, 0x3, 0x40}}})
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0xfffffffffffffea0, 0x0, 0x0, 0x54, 0x0, 0x0})

23:15:41 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x3})
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)
pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0, r4}}, 0x18)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r5, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {&(0x7f0000000200), r4, 0x2}}, 0x18)

23:15:41 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:41 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)

23:15:41 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:41 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0xb8, 0x0, &(0x7f00000002c0)=[@decrefs={0x40046307, 0x2}, @decrefs={0x40046307, 0x2}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000500)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32, @ANYBLOB="0000000000000000000000008561646600000000030000000000000001000000000000003e00000000000000852a646600000000", @ANYRES32, @ANYBLOB="000000000000000000200000000000000004179090b9b9ef4c5060254d98b6e457156d99a203dcfd628d631377eb0b12651a252696abf6bea910c4f677d9d2e9acf33802003d8bba45edd5489012bbd8dc"], &(0x7f0000000000)={0x0, 0x18, 0x38}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1100, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/33, 0x21, 0x2, 0x27}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}}, @free_buffer, @dead_binder_done], 0x9d, 0x0, &(0x7f0000000400)="3ef811a4856b61e328959935df150802f3f3ac7ffe80e6e1451f2fc9e59553873fc78f58f4fb200d8d73822a0a03aebeb91a53fa6e34e50905b8ef43a86c956e9140af1db935b0f41e12e07d53b203129b3e00da57177ebf813e5a46820ce9fbb65035cab23c60a4cfdd5d9e0b97c529d0e1daf43921f5777dcd50c1eb415a7aaa78a53c80b48f79151d07514f3b290dc1b7526f5f0438c3f328fe928f"})

23:15:41 executing program 3:
pselect6(0x40, &(0x7f0000000000)={0x7, 0x7, 0x7, 0x327, 0x8, 0x3f, 0xffffffffffff2e20, 0x2c2}, &(0x7f0000000080)={0xfff, 0x9, 0x100000000, 0x9, 0x2f, 0x3, 0xfff}, &(0x7f00000000c0)={0x8000, 0x6, 0xffffffffffff8000, 0x6, 0x874a, 0x5, 0x592e, 0xffffffff}, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={[0xfd4]}, 0x8})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@bridge_getvlan={0x38, 0x72, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x8800)
r0 = memfd_secret(0x80000) (async)
r1 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180))
ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f00000002c0)={0x81, 0x0, '\x00', {0x0, @bt={0x400, 0x8, 0x0, 0x3, 0x1, 0x8, 0x3, 0x81, 0x9, 0x1, 0x95e0, 0x0, 0x1000, 0x8, 0x0, 0x2, {0x4, 0xd7}, 0x3, 0x40}}}) (async)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0xfffffffffffffea0, 0x0, 0x0, 0x54, 0x0, 0x0})

23:15:41 executing program 5:
pselect6(0x40, &(0x7f0000000000)={0x7, 0x7, 0x7, 0x327, 0x8, 0x3f, 0xffffffffffff2e20, 0x2c2}, &(0x7f0000000080)={0xfff, 0x9, 0x100000000, 0x9, 0x2f, 0x3, 0xfff}, &(0x7f00000000c0)={0x8000, 0x6, 0xffffffffffff8000, 0x6, 0x874a, 0x5, 0x592e, 0xffffffff}, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={[0xfd4]}, 0x8})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@bridge_getvlan={0x38, 0x72, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x8800)
r0 = memfd_secret(0x80000)
r1 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180))
ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f00000002c0)={0x81, 0x0, '\x00', {0x0, @bt={0x400, 0x8, 0x0, 0x3, 0x1, 0x8, 0x3, 0x81, 0x9, 0x1, 0x95e0, 0x0, 0x1000, 0x8, 0x0, 0x2, {0x4, 0xd7}, 0x3, 0x40}}})
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0xfffffffffffffea0, 0x0, 0x0, 0x54, 0x0, 0x0})

23:15:41 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)

23:15:41 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x3})
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)
pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0, r4}}, 0x18)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r5, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {&(0x7f0000000200), r4, 0x2}}, 0x18)

23:15:41 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0xac, 0x0, &(0x7f00000002c0)=[@decrefs={0x40046307, 0x2}, @decrefs={0x40046307, 0x2}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000500)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32, @ANYBLOB="0000000000000000000000008561646600000000030000000000000001000000000000003e00000000000000852a646600000000", @ANYRES32, @ANYBLOB="000000000000000000200000000000000004179090b9b9ef4c5060254d98b6e457156d99a203dcfd628d631377eb0b12651a252696abf6bea910c4f677d9d2e9acf33802003d8bba45edd5489012bbd8dc"], &(0x7f0000000000)={0x0, 0x18, 0x38}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1100, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/33, 0x21, 0x2, 0x27}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}}, @free_buffer], 0x9d, 0x0, &(0x7f0000000400)="3ef811a4856b61e328959935df150802f3f3ac7ffe80e6e1451f2fc9e59553873fc78f58f4fb200d8d73822a0a03aebeb91a53fa6e34e50905b8ef43a86c956e9140af1db935b0f41e12e07d53b203129b3e00da57177ebf813e5a46820ce9fbb65035cab23c60a4cfdd5d9e0b97c529d0e1daf43921f5777dcd50c1eb415a7aaa78a53c80b48f79151d07514f3b290dc1b7526f5f0438c3f328fe928f"})

23:15:41 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:41 executing program 3:
pselect6(0x40, &(0x7f0000000000)={0x7, 0x7, 0x7, 0x327, 0x8, 0x3f, 0xffffffffffff2e20, 0x2c2}, &(0x7f0000000080)={0xfff, 0x9, 0x100000000, 0x9, 0x2f, 0x3, 0xfff}, &(0x7f00000000c0)={0x8000, 0x6, 0xffffffffffff8000, 0x6, 0x874a, 0x5, 0x592e, 0xffffffff}, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={[0xfd4]}, 0x8}) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@bridge_getvlan={0x38, 0x72, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x8800) (async)
r0 = memfd_secret(0x80000) (async)
r1 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180)) (async)
ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f00000002c0)={0x81, 0x0, '\x00', {0x0, @bt={0x400, 0x8, 0x0, 0x3, 0x1, 0x8, 0x3, 0x81, 0x9, 0x1, 0x95e0, 0x0, 0x1000, 0x8, 0x0, 0x2, {0x4, 0xd7}, 0x3, 0x40}}}) (async)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0xfffffffffffffea0, 0x0, 0x0, 0x54, 0x0, 0x0})

23:15:41 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x3})
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)
pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0, r4}}, 0x18)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r5, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {&(0x7f0000000200), r4, 0x2}}, 0x18)

23:15:41 executing program 5:
pselect6(0x40, &(0x7f0000000000)={0x7, 0x7, 0x7, 0x327, 0x8, 0x3f, 0xffffffffffff2e20, 0x2c2}, &(0x7f0000000080)={0xfff, 0x9, 0x100000000, 0x9, 0x2f, 0x3, 0xfff}, &(0x7f00000000c0)={0x8000, 0x6, 0xffffffffffff8000, 0x6, 0x874a, 0x5, 0x592e, 0xffffffff}, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={[0xfd4]}, 0x8})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@bridge_getvlan={0x38, 0x72, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x8800)
r0 = memfd_secret(0x80000)
r1 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180))
ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f00000002c0)={0x81, 0x0, '\x00', {0x0, @bt={0x400, 0x8, 0x0, 0x3, 0x1, 0x8, 0x3, 0x81, 0x9, 0x1, 0x95e0, 0x0, 0x1000, 0x8, 0x0, 0x2, {0x4, 0xd7}, 0x3, 0x40}}})
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0xfffffffffffffea0, 0x0, 0x0, 0x54, 0x0, 0x0})

23:15:41 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0) (async)

23:15:41 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0xa0, 0x0, &(0x7f00000002c0)=[@decrefs={0x40046307, 0x2}, @decrefs={0x40046307, 0x2}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000500)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32, @ANYBLOB="0000000000000000000000008561646600000000030000000000000001000000000000003e00000000000000852a646600000000", @ANYRES32, @ANYBLOB="000000000000000000200000000000000004179090b9b9ef4c5060254d98b6e457156d99a203dcfd628d631377eb0b12651a252696abf6bea910c4f677d9d2e9acf33802003d8bba45edd5489012bbd8dc"], &(0x7f0000000000)={0x0, 0x18, 0x38}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1100, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/33, 0x21, 0x2, 0x27}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}}], 0x9d, 0x0, &(0x7f0000000400)="3ef811a4856b61e328959935df150802f3f3ac7ffe80e6e1451f2fc9e59553873fc78f58f4fb200d8d73822a0a03aebeb91a53fa6e34e50905b8ef43a86c956e9140af1db935b0f41e12e07d53b203129b3e00da57177ebf813e5a46820ce9fbb65035cab23c60a4cfdd5d9e0b97c529d0e1daf43921f5777dcd50c1eb415a7aaa78a53c80b48f79151d07514f3b290dc1b7526f5f0438c3f328fe928f"})

23:15:41 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:41 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = memfd_secret(0x80000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x800, 0x3})
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f0000000280)={0x1, 0x2a5e1a9d, @status={[0x5, 0x3, 0x9f3, 0x9, 0x6, 0x8]}, [0x1, 0x3ff, 0x0, 0x1000, 0x5, 0x0, 0x400, 0x649, 0x1e3, 0xd2, 0x87, 0xff, 0x3, 0x2, 0x8000, 0x3, 0x8001, 0x74db, 0x8, 0x0, 0x4, 0x593, 0x7, 0x6, 0x7ff, 0x8000000000000001, 0x4, 0x5, 0x0, 0x5, 0x31a1, 0x2, 0x10001, 0x7, 0x9, 0xae, 0x8, 0x4, 0x1, 0x0, 0x10001, 0x4, 0x3a, 0x4, 0x80000000, 0x1, 0xfffffffffffffffc, 0xa2, 0x9, 0xc7, 0x0, 0x4, 0x3816, 0x10000, 0x20, 0x117b000000, 0x0, 0x7, 0x6, 0xe59, 0x80, 0x2, 0xffff, 0x31a]})
r3 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0)
r4 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r4, 0xb701, 0x0)
r5 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r5, 0xb701, 0x0)
r6 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r6, 0xb701, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r7=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r8=>0xffffffffffffffff})
r9 = socket(0x29, 0x4, 0x6)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000cc0), r9)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x94, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r1}]}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r9}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x26}]}, 0x94}, 0x1, 0x0, 0x0, 0x6044004}, 0x4c002)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)

23:15:41 executing program 5:
pselect6(0x40, &(0x7f0000000000)={0x7, 0x7, 0x7, 0x327, 0x8, 0x3f, 0xffffffffffff2e20, 0x2c2}, &(0x7f0000000080)={0xfff, 0x9, 0x100000000, 0x9, 0x2f, 0x3, 0xfff}, &(0x7f00000000c0)={0x8000, 0x6, 0xffffffffffff8000, 0x6, 0x874a, 0x5, 0x592e, 0xffffffff}, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={[0xfd4]}, 0x8})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@bridge_getvlan={0x38, 0x72, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x8800)
r0 = memfd_secret(0x80000)
r1 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180))
ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f00000002c0)={0x81, 0x0, '\x00', {0x0, @bt={0x400, 0x8, 0x0, 0x3, 0x1, 0x8, 0x3, 0x81, 0x9, 0x1, 0x95e0, 0x0, 0x1000, 0x8, 0x0, 0x2, {0x4, 0xd7}, 0x3, 0x40}}})
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0xfffffffffffffea0, 0x0, 0x0, 0x54, 0x0, 0x0})

23:15:41 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0)
sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4801}, 0x4000000)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:41 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x3})
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)
pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {&(0x7f0000000200), r3, 0x2}}, 0x18)

23:15:41 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x5c, 0x0, &(0x7f00000002c0)=[@decrefs={0x40046307, 0x2}, @decrefs={0x40046307, 0x2}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000500)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32, @ANYBLOB="0000000000000000000000008561646600000000030000000000000001000000000000003e00000000000000852a646600000000", @ANYRES32, @ANYBLOB="000000000000000000200000000000000004179090b9b9ef4c5060254d98b6e457156d99a203dcfd628d631377eb0b12651a252696abf6bea910c4f677d9d2e9acf33802003d8bba45edd5489012bbd8dc"], &(0x7f0000000000)={0x0, 0x18, 0x38}}}], 0x9d, 0x0, &(0x7f0000000400)="3ef811a4856b61e328959935df150802f3f3ac7ffe80e6e1451f2fc9e59553873fc78f58f4fb200d8d73822a0a03aebeb91a53fa6e34e50905b8ef43a86c956e9140af1db935b0f41e12e07d53b203129b3e00da57177ebf813e5a46820ce9fbb65035cab23c60a4cfdd5d9e0b97c529d0e1daf43921f5777dcd50c1eb415a7aaa78a53c80b48f79151d07514f3b290dc1b7526f5f0438c3f328fe928f"})

23:15:41 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:41 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0)
sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4801}, 0x4000000)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async)
sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4801}, 0x4000000) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)

23:15:41 executing program 5:
pselect6(0x40, &(0x7f0000000000)={0x7, 0x7, 0x7, 0x327, 0x8, 0x3f, 0xffffffffffff2e20, 0x2c2}, &(0x7f0000000080)={0xfff, 0x9, 0x100000000, 0x9, 0x2f, 0x3, 0xfff}, &(0x7f00000000c0)={0x8000, 0x6, 0xffffffffffff8000, 0x6, 0x874a, 0x5, 0x592e, 0xffffffff}, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={[0xfd4]}, 0x8})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@bridge_getvlan={0x38, 0x72, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x8800)
r0 = memfd_secret(0x80000)
r1 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180))
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0xfffffffffffffea0, 0x0, 0x0, 0x54, 0x0, 0x0})

23:15:41 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x3})
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)
pidfd_getfd(0xffffffffffffffff, r0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {&(0x7f0000000200), 0xffffffffffffffff, 0x2}}, 0x18)

23:15:41 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = memfd_secret(0x80000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x800, 0x3})
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f0000000280)={0x1, 0x2a5e1a9d, @status={[0x5, 0x3, 0x9f3, 0x9, 0x6, 0x8]}, [0x1, 0x3ff, 0x0, 0x1000, 0x5, 0x0, 0x400, 0x649, 0x1e3, 0xd2, 0x87, 0xff, 0x3, 0x2, 0x8000, 0x3, 0x8001, 0x74db, 0x8, 0x0, 0x4, 0x593, 0x7, 0x6, 0x7ff, 0x8000000000000001, 0x4, 0x5, 0x0, 0x5, 0x31a1, 0x2, 0x10001, 0x7, 0x9, 0xae, 0x8, 0x4, 0x1, 0x0, 0x10001, 0x4, 0x3a, 0x4, 0x80000000, 0x1, 0xfffffffffffffffc, 0xa2, 0x9, 0xc7, 0x0, 0x4, 0x3816, 0x10000, 0x20, 0x117b000000, 0x0, 0x7, 0x6, 0xe59, 0x80, 0x2, 0xffff, 0x31a]})
r3 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0)
r4 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r4, 0xb701, 0x0)
r5 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r5, 0xb701, 0x0)
r6 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r6, 0xb701, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r7=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r8=>0xffffffffffffffff})
r9 = socket(0x29, 0x4, 0x6)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000cc0), r9)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x94, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r1}]}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r9}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x26}]}, 0x94}, 0x1, 0x0, 0x0, 0x6044004}, 0x4c002)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async)
memfd_secret(0x80000) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x800, 0x3}) (async)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f0000000280)={0x1, 0x2a5e1a9d, @status={[0x5, 0x3, 0x9f3, 0x9, 0x6, 0x8]}, [0x1, 0x3ff, 0x0, 0x1000, 0x5, 0x0, 0x400, 0x649, 0x1e3, 0xd2, 0x87, 0xff, 0x3, 0x2, 0x8000, 0x3, 0x8001, 0x74db, 0x8, 0x0, 0x4, 0x593, 0x7, 0x6, 0x7ff, 0x8000000000000001, 0x4, 0x5, 0x0, 0x5, 0x31a1, 0x2, 0x10001, 0x7, 0x9, 0xae, 0x8, 0x4, 0x1, 0x0, 0x10001, 0x4, 0x3a, 0x4, 0x80000000, 0x1, 0xfffffffffffffffc, 0xa2, 0x9, 0xc7, 0x0, 0x4, 0x3816, 0x10000, 0x20, 0x117b000000, 0x0, 0x7, 0x6, 0xe59, 0x80, 0x2, 0xffff, 0x31a]}) (async)
memfd_secret(0x0) (async)
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) (async)
memfd_secret(0x0) (async)
ioctl$NS_GET_USERNS(r4, 0xb701, 0x0) (async)
memfd_secret(0x0) (async)
ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) (async)
memfd_secret(0x0) (async)
ioctl$NS_GET_USERNS(r6, 0xb701, 0x0) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async)
socket(0x29, 0x4, 0x6) (async)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000cc0), r9) (async)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x94, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r1}]}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r9}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x26}]}, 0x94}, 0x1, 0x0, 0x0, 0x6044004}, 0x4c002) (async)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0) (async)

23:15:41 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x10, 0x0, &(0x7f00000002c0)=[@decrefs={0x40046307, 0x2}, @decrefs={0x40046307, 0x2}], 0x9d, 0x0, &(0x7f0000000400)="3ef811a4856b61e328959935df150802f3f3ac7ffe80e6e1451f2fc9e59553873fc78f58f4fb200d8d73822a0a03aebeb91a53fa6e34e50905b8ef43a86c956e9140af1db935b0f41e12e07d53b203129b3e00da57177ebf813e5a46820ce9fbb65035cab23c60a4cfdd5d9e0b97c529d0e1daf43921f5777dcd50c1eb415a7aaa78a53c80b48f79151d07514f3b290dc1b7526f5f0438c3f328fe928f"})

23:15:41 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:41 executing program 5:
pselect6(0x40, &(0x7f0000000000)={0x7, 0x7, 0x7, 0x327, 0x8, 0x3f, 0xffffffffffff2e20, 0x2c2}, &(0x7f0000000080)={0xfff, 0x9, 0x100000000, 0x9, 0x2f, 0x3, 0xfff}, &(0x7f00000000c0)={0x8000, 0x6, 0xffffffffffff8000, 0x6, 0x874a, 0x5, 0x592e, 0xffffffff}, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={[0xfd4]}, 0x8})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@bridge_getvlan={0x38, 0x72, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x8800)
r0 = memfd_secret(0x80000)
syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0xfffffffffffffea0, 0x0, 0x0, 0x54, 0x0, 0x0})

23:15:41 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x3})
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)
pidfd_getfd(0xffffffffffffffff, r0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {&(0x7f0000000200), 0xffffffffffffffff, 0x2}}, 0x18)

23:15:41 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:41 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f00000002c0)=[@decrefs={0x40046307, 0x2}], 0x9d, 0x0, &(0x7f0000000400)="3ef811a4856b61e328959935df150802f3f3ac7ffe80e6e1451f2fc9e59553873fc78f58f4fb200d8d73822a0a03aebeb91a53fa6e34e50905b8ef43a86c956e9140af1db935b0f41e12e07d53b203129b3e00da57177ebf813e5a46820ce9fbb65035cab23c60a4cfdd5d9e0b97c529d0e1daf43921f5777dcd50c1eb415a7aaa78a53c80b48f79151d07514f3b290dc1b7526f5f0438c3f328fe928f"})

23:15:41 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0)
sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4801}, 0x4000000)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async)
sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4801}, 0x4000000) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)

23:15:41 executing program 5:
pselect6(0x40, &(0x7f0000000000)={0x7, 0x7, 0x7, 0x327, 0x8, 0x3f, 0xffffffffffff2e20, 0x2c2}, &(0x7f0000000080)={0xfff, 0x9, 0x100000000, 0x9, 0x2f, 0x3, 0xfff}, &(0x7f00000000c0)={0x8000, 0x6, 0xffffffffffff8000, 0x6, 0x874a, 0x5, 0x592e, 0xffffffff}, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={[0xfd4]}, 0x8})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@bridge_getvlan={0x38, 0x72, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x8800)
r0 = memfd_secret(0x80000)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0xfffffffffffffea0, 0x0, 0x0, 0x54, 0x0, 0x0})

23:15:41 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = memfd_secret(0x80000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x800, 0x3})
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f0000000280)={0x1, 0x2a5e1a9d, @status={[0x5, 0x3, 0x9f3, 0x9, 0x6, 0x8]}, [0x1, 0x3ff, 0x0, 0x1000, 0x5, 0x0, 0x400, 0x649, 0x1e3, 0xd2, 0x87, 0xff, 0x3, 0x2, 0x8000, 0x3, 0x8001, 0x74db, 0x8, 0x0, 0x4, 0x593, 0x7, 0x6, 0x7ff, 0x8000000000000001, 0x4, 0x5, 0x0, 0x5, 0x31a1, 0x2, 0x10001, 0x7, 0x9, 0xae, 0x8, 0x4, 0x1, 0x0, 0x10001, 0x4, 0x3a, 0x4, 0x80000000, 0x1, 0xfffffffffffffffc, 0xa2, 0x9, 0xc7, 0x0, 0x4, 0x3816, 0x10000, 0x20, 0x117b000000, 0x0, 0x7, 0x6, 0xe59, 0x80, 0x2, 0xffff, 0x31a]})
r3 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0)
r4 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r4, 0xb701, 0x0)
r5 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r5, 0xb701, 0x0)
r6 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r6, 0xb701, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r7=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r8=>0xffffffffffffffff})
r9 = socket(0x29, 0x4, 0x6)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000cc0), r9)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x94, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r1}]}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r9}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x26}]}, 0x94}, 0x1, 0x0, 0x0, 0x6044004}, 0x4c002)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async)
memfd_secret(0x80000) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x800, 0x3}) (async)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f0000000280)={0x1, 0x2a5e1a9d, @status={[0x5, 0x3, 0x9f3, 0x9, 0x6, 0x8]}, [0x1, 0x3ff, 0x0, 0x1000, 0x5, 0x0, 0x400, 0x649, 0x1e3, 0xd2, 0x87, 0xff, 0x3, 0x2, 0x8000, 0x3, 0x8001, 0x74db, 0x8, 0x0, 0x4, 0x593, 0x7, 0x6, 0x7ff, 0x8000000000000001, 0x4, 0x5, 0x0, 0x5, 0x31a1, 0x2, 0x10001, 0x7, 0x9, 0xae, 0x8, 0x4, 0x1, 0x0, 0x10001, 0x4, 0x3a, 0x4, 0x80000000, 0x1, 0xfffffffffffffffc, 0xa2, 0x9, 0xc7, 0x0, 0x4, 0x3816, 0x10000, 0x20, 0x117b000000, 0x0, 0x7, 0x6, 0xe59, 0x80, 0x2, 0xffff, 0x31a]}) (async)
memfd_secret(0x0) (async)
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) (async)
memfd_secret(0x0) (async)
ioctl$NS_GET_USERNS(r4, 0xb701, 0x0) (async)
memfd_secret(0x0) (async)
ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) (async)
memfd_secret(0x0) (async)
ioctl$NS_GET_USERNS(r6, 0xb701, 0x0) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async)
socket(0x29, 0x4, 0x6) (async)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000cc0), r9) (async)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x94, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r1}]}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r9}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x26}]}, 0x94}, 0x1, 0x0, 0x0, 0x6044004}, 0x4c002) (async)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0) (async)

23:15:41 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0), 0x9d, 0x0, &(0x7f0000000400)="3ef811a4856b61e328959935df150802f3f3ac7ffe80e6e1451f2fc9e59553873fc78f58f4fb200d8d73822a0a03aebeb91a53fa6e34e50905b8ef43a86c956e9140af1db935b0f41e12e07d53b203129b3e00da57177ebf813e5a46820ce9fbb65035cab23c60a4cfdd5d9e0b97c529d0e1daf43921f5777dcd50c1eb415a7aaa78a53c80b48f79151d07514f3b290dc1b7526f5f0438c3f328fe928f"})

23:15:41 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x3})
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)
pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {&(0x7f0000000200), 0xffffffffffffffff, 0x2}}, 0x18)

23:15:41 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = pidfd_getfd(r1, r1, 0x0)
r3 = syz_clone(0x200800, &(0x7f0000000080)="8a691ba056f7c2fe31e4bf3f194c5e0103a7b89af5c5fec85c1635", 0x1b, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="942e5e3a1bc8b6eab795ad3d95d877e96e54009cfca3ad7c131772c6e804ed6c6367c235c7837869d824c28add29cf666c7927e9f0edaa2717257cd13e80e9c9237b25cf34dd112425c865dcccc5b179c33105e7")
ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f00000001c0)={r3, 0x0, 0x8000})
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x8)
ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000001180))
ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r4, 0xc0305616, &(0x7f0000000240)={0x0, {0x10000, 0x1}})
r5 = memfd_secret(0x0)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r5, 0x40046210, &(0x7f0000000200))
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_DEV_REPLACE(r6, 0xca289435, &(0x7f00000003c0)={0x0, 0x6ef4, @status={[0x100000001, 0x2, 0x9, 0x54d3000, 0x7, 0x8]}, [0x8, 0xc7cc, 0xffffffffffff8000, 0x101, 0x0, 0x7ff, 0x7ff, 0x5, 0x3, 0x1, 0x9, 0x7, 0x1, 0xfff, 0x0, 0x0, 0x7fff, 0x44, 0x8, 0x0, 0x8, 0xffffffffffffffff, 0xffff, 0x90, 0x4, 0x3, 0x7fffffffffffffff, 0x40, 0x8, 0x4, 0x8000000000000001, 0x0, 0x5, 0x4, 0x1ff, 0x1f, 0x3, 0x8, 0x1, 0x81, 0x5, 0x4, 0x0, 0x4, 0x0, 0x2, 0x523, 0x4c7, 0xa4, 0x7, 0x2, 0x7, 0x3, 0x4, 0xc02, 0x800, 0x94, 0x8, 0x8, 0x9, 0x8, 0x5, 0xe99, 0xbf5]})

23:15:41 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:42 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x3})
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {&(0x7f0000000200), 0xffffffffffffffff, 0x2}}, 0x18)

23:15:42 executing program 5:
pselect6(0x40, &(0x7f0000000000)={0x7, 0x7, 0x7, 0x327, 0x8, 0x3f, 0xffffffffffff2e20, 0x2c2}, &(0x7f0000000080)={0xfff, 0x9, 0x100000000, 0x9, 0x2f, 0x3, 0xfff}, &(0x7f00000000c0)={0x8000, 0x6, 0xffffffffffff8000, 0x6, 0x874a, 0x5, 0x592e, 0xffffffff}, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={[0xfd4]}, 0x8})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@bridge_getvlan={0x38, 0x72, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x8800)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x5421, &(0x7f0000000380)={0xfffffffffffffea0, 0x0, 0x0, 0x54, 0x0, 0x0})

23:15:42 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = pidfd_getfd(r1, r1, 0x0)
r3 = syz_clone(0x200800, &(0x7f0000000080)="8a691ba056f7c2fe31e4bf3f194c5e0103a7b89af5c5fec85c1635", 0x1b, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="942e5e3a1bc8b6eab795ad3d95d877e96e54009cfca3ad7c131772c6e804ed6c6367c235c7837869d824c28add29cf666c7927e9f0edaa2717257cd13e80e9c9237b25cf34dd112425c865dcccc5b179c33105e7")
ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f00000001c0)={r3, 0x0, 0x8000})
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x8)
ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000001180))
ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r4, 0xc0305616, &(0x7f0000000240)={0x0, {0x10000, 0x1}})
r5 = memfd_secret(0x0)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r5, 0x40046210, &(0x7f0000000200))
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_DEV_REPLACE(r6, 0xca289435, &(0x7f00000003c0)={0x0, 0x6ef4, @status={[0x100000001, 0x2, 0x9, 0x54d3000, 0x7, 0x8]}, [0x8, 0xc7cc, 0xffffffffffff8000, 0x101, 0x0, 0x7ff, 0x7ff, 0x5, 0x3, 0x1, 0x9, 0x7, 0x1, 0xfff, 0x0, 0x0, 0x7fff, 0x44, 0x8, 0x0, 0x8, 0xffffffffffffffff, 0xffff, 0x90, 0x4, 0x3, 0x7fffffffffffffff, 0x40, 0x8, 0x4, 0x8000000000000001, 0x0, 0x5, 0x4, 0x1ff, 0x1f, 0x3, 0x8, 0x1, 0x81, 0x5, 0x4, 0x0, 0x4, 0x0, 0x2, 0x523, 0x4c7, 0xa4, 0x7, 0x2, 0x7, 0x3, 0x4, 0xc02, 0x800, 0x94, 0x8, 0x8, 0x9, 0x8, 0x5, 0xe99, 0xbf5]})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async)
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
pidfd_getfd(r1, r1, 0x0) (async)
syz_clone(0x200800, &(0x7f0000000080)="8a691ba056f7c2fe31e4bf3f194c5e0103a7b89af5c5fec85c1635", 0x1b, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="942e5e3a1bc8b6eab795ad3d95d877e96e54009cfca3ad7c131772c6e804ed6c6367c235c7837869d824c28add29cf666c7927e9f0edaa2717257cd13e80e9c9237b25cf34dd112425c865dcccc5b179c33105e7") (async)
ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f00000001c0)={r3, 0x0, 0x8000}) (async)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x8) (async)
ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2) (async)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000001180)) (async)
ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r4, 0xc0305616, &(0x7f0000000240)={0x0, {0x10000, 0x1}}) (async)
memfd_secret(0x0) (async)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r5, 0x40046210, &(0x7f0000000200)) (async)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
ioctl$BTRFS_IOC_DEV_REPLACE(r6, 0xca289435, &(0x7f00000003c0)={0x0, 0x6ef4, @status={[0x100000001, 0x2, 0x9, 0x54d3000, 0x7, 0x8]}, [0x8, 0xc7cc, 0xffffffffffff8000, 0x101, 0x0, 0x7ff, 0x7ff, 0x5, 0x3, 0x1, 0x9, 0x7, 0x1, 0xfff, 0x0, 0x0, 0x7fff, 0x44, 0x8, 0x0, 0x8, 0xffffffffffffffff, 0xffff, 0x90, 0x4, 0x3, 0x7fffffffffffffff, 0x40, 0x8, 0x4, 0x8000000000000001, 0x0, 0x5, 0x4, 0x1ff, 0x1f, 0x3, 0x8, 0x1, 0x81, 0x5, 0x4, 0x0, 0x4, 0x0, 0x2, 0x523, 0x4c7, 0xa4, 0x7, 0x2, 0x7, 0x3, 0x4, 0xc02, 0x800, 0x94, 0x8, 0x8, 0x9, 0x8, 0x5, 0xe99, 0xbf5]}) (async)

23:15:42 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:42 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0), 0x9d, 0x0, &(0x7f0000000400)="3ef811a4856b61e328959935df150802f3f3ac7ffe80e6e1451f2fc9e59553873fc78f58f4fb200d8d73822a0a03aebeb91a53fa6e34e50905b8ef43a86c956e9140af1db935b0f41e12e07d53b203129b3e00da57177ebf813e5a46820ce9fbb65035cab23c60a4cfdd5d9e0b97c529d0e1daf43921f5777dcd50c1eb415a7aaa78a53c80b48f79151d07514f3b290dc1b7526f5f0438c3f328fe928f"})

23:15:42 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r1)
sendmsg$IEEE802154_LLSEC_LIST_KEY(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r2, 0x1}, 0x14}}, 0x0)
sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x80)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_TX_POWER(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r3)

23:15:42 executing program 4:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000000c0)={0x3})
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {&(0x7f0000000200), 0xffffffffffffffff, 0x2}}, 0x18)

23:15:42 executing program 5:
pselect6(0x40, &(0x7f0000000000)={0x7, 0x7, 0x7, 0x327, 0x8, 0x3f, 0xffffffffffff2e20, 0x2c2}, &(0x7f0000000080)={0xfff, 0x9, 0x100000000, 0x9, 0x2f, 0x3, 0xfff}, &(0x7f00000000c0)={0x8000, 0x6, 0xffffffffffff8000, 0x6, 0x874a, 0x5, 0x592e, 0xffffffff}, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={[0xfd4]}, 0x8})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@bridge_getvlan={0x38, 0x72, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x8800)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x5421, &(0x7f0000000380)={0xfffffffffffffea0, 0x0, 0x0, 0x54, 0x0, 0x0})

23:15:42 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0), 0x9d, 0x0, &(0x7f0000000400)="3ef811a4856b61e328959935df150802f3f3ac7ffe80e6e1451f2fc9e59553873fc78f58f4fb200d8d73822a0a03aebeb91a53fa6e34e50905b8ef43a86c956e9140af1db935b0f41e12e07d53b203129b3e00da57177ebf813e5a46820ce9fbb65035cab23c60a4cfdd5d9e0b97c529d0e1daf43921f5777dcd50c1eb415a7aaa78a53c80b48f79151d07514f3b290dc1b7526f5f0438c3f328fe928f"})

23:15:42 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2}], 0x0, 0x0, 0x0})

23:15:42 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0) (async, rerun: 32)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r1)
sendmsg$IEEE802154_LLSEC_LIST_KEY(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r2, 0x1}, 0x14}}, 0x0) (async, rerun: 64)
sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x80) (async, rerun: 64)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_TX_POWER(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r3)

23:15:42 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = pidfd_getfd(r1, r1, 0x0) (async)
r3 = syz_clone(0x200800, &(0x7f0000000080)="8a691ba056f7c2fe31e4bf3f194c5e0103a7b89af5c5fec85c1635", 0x1b, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="942e5e3a1bc8b6eab795ad3d95d877e96e54009cfca3ad7c131772c6e804ed6c6367c235c7837869d824c28add29cf666c7927e9f0edaa2717257cd13e80e9c9237b25cf34dd112425c865dcccc5b179c33105e7")
ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f00000001c0)={r3, 0x0, 0x8000}) (async)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x8) (async)
ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r4 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000001180))
ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r4, 0xc0305616, &(0x7f0000000240)={0x0, {0x10000, 0x1}}) (async)
r5 = memfd_secret(0x0)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r5, 0x40046210, &(0x7f0000000200)) (async)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_DEV_REPLACE(r6, 0xca289435, &(0x7f00000003c0)={0x0, 0x6ef4, @status={[0x100000001, 0x2, 0x9, 0x54d3000, 0x7, 0x8]}, [0x8, 0xc7cc, 0xffffffffffff8000, 0x101, 0x0, 0x7ff, 0x7ff, 0x5, 0x3, 0x1, 0x9, 0x7, 0x1, 0xfff, 0x0, 0x0, 0x7fff, 0x44, 0x8, 0x0, 0x8, 0xffffffffffffffff, 0xffff, 0x90, 0x4, 0x3, 0x7fffffffffffffff, 0x40, 0x8, 0x4, 0x8000000000000001, 0x0, 0x5, 0x4, 0x1ff, 0x1f, 0x3, 0x8, 0x1, 0x81, 0x5, 0x4, 0x0, 0x4, 0x0, 0x2, 0x523, 0x4c7, 0xa4, 0x7, 0x2, 0x7, 0x3, 0x4, 0xc02, 0x800, 0x94, 0x8, 0x8, 0x9, 0x8, 0x5, 0xe99, 0xbf5]})

23:15:42 executing program 4:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {&(0x7f0000000200), 0xffffffffffffffff, 0x2}}, 0x18)

23:15:42 executing program 5:
pselect6(0x40, &(0x7f0000000000)={0x7, 0x7, 0x7, 0x327, 0x8, 0x3f, 0xffffffffffff2e20, 0x2c2}, &(0x7f0000000080)={0xfff, 0x9, 0x100000000, 0x9, 0x2f, 0x3, 0xfff}, &(0x7f00000000c0)={0x8000, 0x6, 0xffffffffffff8000, 0x6, 0x874a, 0x5, 0x592e, 0xffffffff}, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={[0xfd4]}, 0x8})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@bridge_getvlan={0x38, 0x72, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x8800)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x5421, &(0x7f0000000380)={0xfffffffffffffea0, 0x0, 0x0, 0x54, 0x0, 0x0})

23:15:42 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3}], 0x0, 0x0, 0x0})

23:15:42 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f00000002c0)=[@decrefs], 0x9d, 0x0, &(0x7f0000000400)="3ef811a4856b61e328959935df150802f3f3ac7ffe80e6e1451f2fc9e59553873fc78f58f4fb200d8d73822a0a03aebeb91a53fa6e34e50905b8ef43a86c956e9140af1db935b0f41e12e07d53b203129b3e00da57177ebf813e5a46820ce9fbb65035cab23c60a4cfdd5d9e0b97c529d0e1daf43921f5777dcd50c1eb415a7aaa78a53c80b48f79151d07514f3b290dc1b7526f5f0438c3f328fe928f"})

23:15:42 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x0, 0x0)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}, 0x300}, 0x0)
ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000140)={0x6, 0xce, "38748c7e1e324a9547c95e2512fb73629d9d70952d338e535dc1eebebf2c4b627f71461b46276a2e3780d19a8653616a079c6ce1b22fd532583efbbb05ae9463b8b8823fecf6bd719de2fec55513d2ad8eeccc6f8e9ed35af141961640579793ce047f3a8968c738c57351ca5a39aae556992eb2f7d0f5704031451ac808d8f5d640c5286210c26cf3173316d325d0ca5c3463e3b9f6b704b6db04f6b98060604d8514a19f632cc678d4e78a2be93e8ea610b16a39ce7ce58c09f0fe7ed60d1d61a38454a803e0b8cdec25724740"})
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f0000000000))

23:15:42 executing program 4:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
memfd_secret(0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {&(0x7f0000000200), 0xffffffffffffffff, 0x2}}, 0x18)

23:15:42 executing program 5:
pselect6(0x40, &(0x7f0000000000)={0x7, 0x7, 0x7, 0x327, 0x8, 0x3f, 0xffffffffffff2e20, 0x2c2}, &(0x7f0000000080)={0xfff, 0x9, 0x100000000, 0x9, 0x2f, 0x3, 0xfff}, &(0x7f00000000c0)={0x8000, 0x6, 0xffffffffffff8000, 0x6, 0x874a, 0x5, 0x592e, 0xffffffff}, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={[0xfd4]}, 0x8})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = memfd_secret(0x80000)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0xfffffffffffffea0, 0x0, 0x0, 0x54, 0x0, 0x0})

23:15:42 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f00000002c0)=[@decrefs], 0x0, 0x0, 0x0})

23:15:42 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x0, 0x0)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}, 0x300}, 0x0)
ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000140)={0x6, 0xce, "38748c7e1e324a9547c95e2512fb73629d9d70952d338e535dc1eebebf2c4b627f71461b46276a2e3780d19a8653616a079c6ce1b22fd532583efbbb05ae9463b8b8823fecf6bd719de2fec55513d2ad8eeccc6f8e9ed35af141961640579793ce047f3a8968c738c57351ca5a39aae556992eb2f7d0f5704031451ac808d8f5d640c5286210c26cf3173316d325d0ca5c3463e3b9f6b704b6db04f6b98060604d8514a19f632cc678d4e78a2be93e8ea610b16a39ce7ce58c09f0fe7ed60d1d61a38454a803e0b8cdec25724740"})
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f0000000000))
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x0, 0x0) (async)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) (async)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}, 0x300}, 0x0) (async)
ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000140)={0x6, 0xce, "38748c7e1e324a9547c95e2512fb73629d9d70952d338e535dc1eebebf2c4b627f71461b46276a2e3780d19a8653616a079c6ce1b22fd532583efbbb05ae9463b8b8823fecf6bd719de2fec55513d2ad8eeccc6f8e9ed35af141961640579793ce047f3a8968c738c57351ca5a39aae556992eb2f7d0f5704031451ac808d8f5d640c5286210c26cf3173316d325d0ca5c3463e3b9f6b704b6db04f6b98060604d8514a19f632cc678d4e78a2be93e8ea610b16a39ce7ce58c09f0fe7ed60d1d61a38454a803e0b8cdec25724740"}) (async)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f0000000000)) (async)

23:15:42 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4}], 0x0, 0x0, 0x0})

23:15:42 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0) (async, rerun: 32)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r1)
sendmsg$IEEE802154_LLSEC_LIST_KEY(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r2, 0x1}, 0x14}}, 0x0) (async)
sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x80) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_TX_POWER(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r3)

23:15:42 executing program 4:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {&(0x7f0000000200), 0xffffffffffffffff, 0x2}}, 0x18)

23:15:42 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0), 0x9d, 0x0, &(0x7f0000000400)="3ef811a4856b61e328959935df150802f3f3ac7ffe80e6e1451f2fc9e59553873fc78f58f4fb200d8d73822a0a03aebeb91a53fa6e34e50905b8ef43a86c956e9140af1db935b0f41e12e07d53b203129b3e00da57177ebf813e5a46820ce9fbb65035cab23c60a4cfdd5d9e0b97c529d0e1daf43921f5777dcd50c1eb415a7aaa78a53c80b48f79151d07514f3b290dc1b7526f5f0438c3f328fe928f"})

23:15:42 executing program 5:
pselect6(0x40, &(0x7f0000000000)={0x7, 0x7, 0x7, 0x327, 0x8, 0x3f, 0xffffffffffff2e20, 0x2c2}, &(0x7f0000000080)={0xfff, 0x9, 0x100000000, 0x9, 0x2f, 0x3, 0xfff}, &(0x7f00000000c0)={0x8000, 0x6, 0xffffffffffff8000, 0x6, 0x874a, 0x5, 0x592e, 0xffffffff}, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={[0xfd4]}, 0x8})
r0 = memfd_secret(0x80000)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0xfffffffffffffea0, 0x0, 0x0, 0x54, 0x0, 0x0})

23:15:42 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x0, 0x0)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}, 0x300}, 0x0)
ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000140)={0x6, 0xce, "38748c7e1e324a9547c95e2512fb73629d9d70952d338e535dc1eebebf2c4b627f71461b46276a2e3780d19a8653616a079c6ce1b22fd532583efbbb05ae9463b8b8823fecf6bd719de2fec55513d2ad8eeccc6f8e9ed35af141961640579793ce047f3a8968c738c57351ca5a39aae556992eb2f7d0f5704031451ac808d8f5d640c5286210c26cf3173316d325d0ca5c3463e3b9f6b704b6db04f6b98060604d8514a19f632cc678d4e78a2be93e8ea610b16a39ce7ce58c09f0fe7ed60d1d61a38454a803e0b8cdec25724740"})
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f0000000000))
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x0, 0x0) (async)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) (async)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}, 0x300}, 0x0) (async)
ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000140)={0x6, 0xce, "38748c7e1e324a9547c95e2512fb73629d9d70952d338e535dc1eebebf2c4b627f71461b46276a2e3780d19a8653616a079c6ce1b22fd532583efbbb05ae9463b8b8823fecf6bd719de2fec55513d2ad8eeccc6f8e9ed35af141961640579793ce047f3a8968c738c57351ca5a39aae556992eb2f7d0f5704031451ac808d8f5d640c5286210c26cf3173316d325d0ca5c3463e3b9f6b704b6db04f6b98060604d8514a19f632cc678d4e78a2be93e8ea610b16a39ce7ce58c09f0fe7ed60d1d61a38454a803e0b8cdec25724740"}) (async)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f0000000000)) (async)

23:15:42 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x5}], 0x0, 0x0, 0x0})

23:15:42 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {&(0x7f0000000200), 0xffffffffffffffff, 0x2}}, 0x18)

23:15:42 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x3})
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)
pidfd_getfd(0xffffffffffffffff, r0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {&(0x7f0000000200), 0xffffffffffffffff, 0x2}}, 0x18)

23:15:42 executing program 5:
r0 = memfd_secret(0x80000)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0xfffffffffffffea0, 0x0, 0x0, 0x54, 0x0, 0x0})

23:15:42 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6}], 0x0, 0x0, 0x0})

23:15:42 executing program 3:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000100)={0xfffffffffffffccb, 0x0, 0x0, 0xffffffffffffff91, 0x0, 0x0})

23:15:42 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)
r1 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180))
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f00000000c0)={0x0, @bt={0x80000001, 0x7fffffff, 0x1, 0x1, 0x8, 0x26c2, 0x6, 0x6, 0x10000, 0x4, 0x1, 0x76bc8b50, 0x0, 0x8, 0x8, 0x2, {0x6, 0x7fff}, 0x9, 0x9}})
r2 = memfd_secret(0x0)
r3 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0)
r4 = syz_open_procfs$userns(0x0, &(0x7f0000000080))
ioctl$NS_GET_USERNS(r4, 0xb701, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000000)=0x3800000)

23:15:42 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {&(0x7f0000000200), 0xffffffffffffffff, 0x2}}, 0x18)

23:15:42 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x7}], 0x0, 0x0, 0x0})

23:15:42 executing program 5:
r0 = memfd_secret(0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0xfffffffffffffea0, 0x0, 0x0, 0x54, 0x0, 0x0})

23:15:42 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x10, 0x0, &(0x7f00000002c0)=[@decrefs={0x40046307, 0x2}, @decrefs={0x40046307, 0x2}], 0x9d, 0x0, &(0x7f0000000400)="3ef811a4856b61e328959935df150802f3f3ac7ffe80e6e1451f2fc9e59553873fc78f58f4fb200d8d73822a0a03aebeb91a53fa6e34e50905b8ef43a86c956e9140af1db935b0f41e12e07d53b203129b3e00da57177ebf813e5a46820ce9fbb65035cab23c60a4cfdd5d9e0b97c529d0e1daf43921f5777dcd50c1eb415a7aaa78a53c80b48f79151d07514f3b290dc1b7526f5f0438c3f328fe928f"})

23:15:42 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {&(0x7f0000000200), 0xffffffffffffffff, 0x2}}, 0x18)

23:15:42 executing program 3:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000100)={0xfffffffffffffccb, 0x0, 0x0, 0xffffffffffffff91, 0x0, 0x0})

23:15:42 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x300}], 0x0, 0x0, 0x0})

23:15:42 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)
r1 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180))
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f00000000c0)={0x0, @bt={0x80000001, 0x7fffffff, 0x1, 0x1, 0x8, 0x26c2, 0x6, 0x6, 0x10000, 0x4, 0x1, 0x76bc8b50, 0x0, 0x8, 0x8, 0x2, {0x6, 0x7fff}, 0x9, 0x9}})
r2 = memfd_secret(0x0)
r3 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0)
r4 = syz_open_procfs$userns(0x0, &(0x7f0000000080))
ioctl$NS_GET_USERNS(r4, 0xb701, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000000)=0x3800000)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0) (async)
syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2) (async)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180)) (async)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f00000000c0)={0x0, @bt={0x80000001, 0x7fffffff, 0x1, 0x1, 0x8, 0x26c2, 0x6, 0x6, 0x10000, 0x4, 0x1, 0x76bc8b50, 0x0, 0x8, 0x8, 0x2, {0x6, 0x7fff}, 0x9, 0x9}}) (async)
memfd_secret(0x0) (async)
memfd_secret(0x0) (async)
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) (async)
syz_open_procfs$userns(0x0, &(0x7f0000000080)) (async)
ioctl$NS_GET_USERNS(r4, 0xb701, 0x0) (async)
ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000000)=0x3800000) (async)

23:15:42 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x10, 0x0, &(0x7f00000002c0)=[@decrefs={0x40046307, 0x2}, @decrefs={0x40046307, 0x2}], 0x9d, 0x0, &(0x7f0000000400)="3ef811a4856b61e328959935df150802f3f3ac7ffe80e6e1451f2fc9e59553873fc78f58f4fb200d8d73822a0a03aebeb91a53fa6e34e50905b8ef43a86c956e9140af1db935b0f41e12e07d53b203129b3e00da57177ebf813e5a46820ce9fbb65035cab23c60a4cfdd5d9e0b97c529d0e1daf43921f5777dcd50c1eb415a7aaa78a53c80b48f79151d07514f3b290dc1b7526f5f0438c3f328fe928f"})

23:15:42 executing program 5:
memfd_secret(0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x5421, &(0x7f0000000380)={0xfffffffffffffea0, 0x0, 0x0, 0x54, 0x0, 0x0})

23:15:42 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {&(0x7f0000000200), 0xffffffffffffffff, 0x2}}, 0x18)

23:15:42 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x500}], 0x0, 0x0, 0x0})

23:15:42 executing program 3:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000100)={0xfffffffffffffccb, 0x0, 0x0, 0xffffffffffffff91, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) (async)
ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000100)={0xfffffffffffffccb, 0x0, 0x0, 0xffffffffffffff91, 0x0, 0x0}) (async)

23:15:42 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x10, 0x0, &(0x7f00000002c0)=[@decrefs={0x40046307, 0x2}, @decrefs={0x40046307, 0x2}], 0x9d, 0x0, &(0x7f0000000400)="3ef811a4856b61e328959935df150802f3f3ac7ffe80e6e1451f2fc9e59553873fc78f58f4fb200d8d73822a0a03aebeb91a53fa6e34e50905b8ef43a86c956e9140af1db935b0f41e12e07d53b203129b3e00da57177ebf813e5a46820ce9fbb65035cab23c60a4cfdd5d9e0b97c529d0e1daf43921f5777dcd50c1eb415a7aaa78a53c80b48f79151d07514f3b290dc1b7526f5f0438c3f328fe928f"})

23:15:42 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)
r1 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180))
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f00000000c0)={0x0, @bt={0x80000001, 0x7fffffff, 0x1, 0x1, 0x8, 0x26c2, 0x6, 0x6, 0x10000, 0x4, 0x1, 0x76bc8b50, 0x0, 0x8, 0x8, 0x2, {0x6, 0x7fff}, 0x9, 0x9}})
r2 = memfd_secret(0x0) (async)
r3 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0)
r4 = syz_open_procfs$userns(0x0, &(0x7f0000000080))
ioctl$NS_GET_USERNS(r4, 0xb701, 0x0) (async)
ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000000)=0x3800000)

23:15:42 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = syz_clone(0x400, &(0x7f0000000000)="ba5fafddbfd80b9f20b40fdf15a6ba0a1416ed376aafc0384d7ab9f51239d2f7941924c9883b158c9d534b048696c0bbcddb70daae32", 0x36, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="15b1ccd42cfc6017e5b789fc341bd89b81944794bf07373631149d4f2b2be81899e34059edf63750a6e45f44a2b118999c267ffb5c9afd5b7ed2e3e32c3aa5dcbc4bd23112d5aa81fc4b5db72c0727f38802c240a419b71b3aa2")
ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000200)={r2, 0x0, 0x4e})
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f00000003c0)={0x20, 0x1, {0xbd, @struct={0x1a, 0x4}, 0x0, 0x8000000000000000, 0x6, 0x6, 0x7fff, 0x8, 0x485, @usage=0xffffffffffffffff, 0xfffffffc, 0x1, [0x8, 0x9, 0xbc2, 0x9d, 0x7, 0x8]}, {0x8000000000000001, @struct={0x4, 0x1}, <r3=>0x0, 0x6, 0x3, 0x58, 0x0, 0x6b9, 0x1, @usage=0x5cd, 0x81, 0x8, [0x100000000, 0x5, 0x800, 0x9, 0x1, 0x8]}, {0x748, @struct={0x7, 0x80000000}, 0x0, 0x7e, 0x0, 0xffff, 0x9, 0x54d, 0x410, @usage=0x4, 0xfffffffc, 0x6, [0xeba, 0x1, 0x2, 0x8, 0x5d360, 0x9]}, {0x40, 0xb28a, 0x6}})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f00000007c0)={{r0}, 0x0, 0x14, @inherit={0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000000700000000000000000000204c050000915e0000000000001000000000000000a00c000000000000ba2225bb95e910d4ef3dc7a10c000000000000010000000100000006000000000000000600000000000000ffff000000000000d4a4000000000000020000000000000009000000000000000180000000"]}, @devid=r3})

23:15:42 executing program 5:
memfd_secret(0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x5421, &(0x7f0000000380)={0xfffffffffffffea0, 0x0, 0x0, 0x54, 0x0, 0x0})

23:15:42 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x600}], 0x0, 0x0, 0x0})

23:15:42 executing program 4:
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {&(0x7f0000000200), 0xffffffffffffffff, 0x2}}, 0x18)

23:15:42 executing program 2:
ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f0000000000)={0x80000001, 0x8})
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)

23:15:42 executing program 0:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x10, 0x0, &(0x7f00000002c0)=[@decrefs={0x40046307, 0x2}, @decrefs={0x40046307, 0x2}], 0x9d, 0x0, &(0x7f0000000400)="3ef811a4856b61e328959935df150802f3f3ac7ffe80e6e1451f2fc9e59553873fc78f58f4fb200d8d73822a0a03aebeb91a53fa6e34e50905b8ef43a86c956e9140af1db935b0f41e12e07d53b203129b3e00da57177ebf813e5a46820ce9fbb65035cab23c60a4cfdd5d9e0b97c529d0e1daf43921f5777dcd50c1eb415a7aaa78a53c80b48f79151d07514f3b290dc1b7526f5f0438c3f328fe928f"})

23:15:42 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x700}], 0x0, 0x0, 0x0})

23:15:42 executing program 5:
memfd_secret(0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x5421, &(0x7f0000000380)={0xfffffffffffffea0, 0x0, 0x0, 0x54, 0x0, 0x0})

23:15:42 executing program 0:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x10, 0x0, &(0x7f00000002c0)=[@decrefs={0x40046307, 0x2}, @decrefs={0x40046307, 0x2}], 0x9d, 0x0, &(0x7f0000000400)="3ef811a4856b61e328959935df150802f3f3ac7ffe80e6e1451f2fc9e59553873fc78f58f4fb200d8d73822a0a03aebeb91a53fa6e34e50905b8ef43a86c956e9140af1db935b0f41e12e07d53b203129b3e00da57177ebf813e5a46820ce9fbb65035cab23c60a4cfdd5d9e0b97c529d0e1daf43921f5777dcd50c1eb415a7aaa78a53c80b48f79151d07514f3b290dc1b7526f5f0438c3f328fe928f"})

23:15:42 executing program 4:
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {&(0x7f0000000200), 0xffffffffffffffff, 0x2}}, 0x18)

23:15:42 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xff00}], 0x0, 0x0, 0x0})

23:15:42 executing program 2:
ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f0000000000)={0x80000001, 0x8}) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)

23:15:42 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) (async)
r2 = syz_clone(0x400, &(0x7f0000000000)="ba5fafddbfd80b9f20b40fdf15a6ba0a1416ed376aafc0384d7ab9f51239d2f7941924c9883b158c9d534b048696c0bbcddb70daae32", 0x36, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="15b1ccd42cfc6017e5b789fc341bd89b81944794bf07373631149d4f2b2be81899e34059edf63750a6e45f44a2b118999c267ffb5c9afd5b7ed2e3e32c3aa5dcbc4bd23112d5aa81fc4b5db72c0727f38802c240a419b71b3aa2")
ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000200)={r2, 0x0, 0x4e}) (async)
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f00000003c0)={0x20, 0x1, {0xbd, @struct={0x1a, 0x4}, 0x0, 0x8000000000000000, 0x6, 0x6, 0x7fff, 0x8, 0x485, @usage=0xffffffffffffffff, 0xfffffffc, 0x1, [0x8, 0x9, 0xbc2, 0x9d, 0x7, 0x8]}, {0x8000000000000001, @struct={0x4, 0x1}, <r3=>0x0, 0x6, 0x3, 0x58, 0x0, 0x6b9, 0x1, @usage=0x5cd, 0x81, 0x8, [0x100000000, 0x5, 0x800, 0x9, 0x1, 0x8]}, {0x748, @struct={0x7, 0x80000000}, 0x0, 0x7e, 0x0, 0xffff, 0x9, 0x54d, 0x410, @usage=0x4, 0xfffffffc, 0x6, [0xeba, 0x1, 0x2, 0x8, 0x5d360, 0x9]}, {0x40, 0xb28a, 0x6}})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f00000007c0)={{r0}, 0x0, 0x14, @inherit={0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000000700000000000000000000204c050000915e0000000000001000000000000000a00c000000000000ba2225bb95e910d4ef3dc7a10c000000000000010000000100000006000000000000000600000000000000ffff000000000000d4a4000000000000020000000000000009000000000000000180000000"]}, @devid=r3})

23:15:42 executing program 5:
r0 = memfd_secret(0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, 0x0)

23:15:42 executing program 4:
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {&(0x7f0000000200), 0xffffffffffffffff, 0x2}}, 0x18)

23:15:42 executing program 0:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x10, 0x0, &(0x7f00000002c0)=[@decrefs={0x40046307, 0x2}, @decrefs={0x40046307, 0x2}], 0x9d, 0x0, &(0x7f0000000400)="3ef811a4856b61e328959935df150802f3f3ac7ffe80e6e1451f2fc9e59553873fc78f58f4fb200d8d73822a0a03aebeb91a53fa6e34e50905b8ef43a86c956e9140af1db935b0f41e12e07d53b203129b3e00da57177ebf813e5a46820ce9fbb65035cab23c60a4cfdd5d9e0b97c529d0e1daf43921f5777dcd50c1eb415a7aaa78a53c80b48f79151d07514f3b290dc1b7526f5f0438c3f328fe928f"})

[  828.080014][ T7006] binder: 7004:7006 ioctl c4009420 200003c0 returned -22
[  828.114776][ T7006] binder: 7004:7006 ioctl 5000943f 200007c0 returned -22
23:15:42 executing program 2:
ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f0000000000)={0x80000001, 0x8}) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)

23:15:42 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000000}], 0x0, 0x0, 0x0})

23:15:42 executing program 5:
r0 = memfd_secret(0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, 0x0)

23:15:42 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x10, 0x0, &(0x7f00000002c0)=[@decrefs={0x40046307, 0x2}, @decrefs={0x40046307, 0x2}], 0x9d, 0x0, &(0x7f0000000400)="3ef811a4856b61e328959935df150802f3f3ac7ffe80e6e1451f2fc9e59553873fc78f58f4fb200d8d73822a0a03aebeb91a53fa6e34e50905b8ef43a86c956e9140af1db935b0f41e12e07d53b203129b3e00da57177ebf813e5a46820ce9fbb65035cab23c60a4cfdd5d9e0b97c529d0e1daf43921f5777dcd50c1eb415a7aaa78a53c80b48f79151d07514f3b290dc1b7526f5f0438c3f328fe928f"})

23:15:42 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, 0x0, 0x0)

23:15:42 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000000}], 0x0, 0x0, 0x0})

23:15:42 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x10, 0x0, &(0x7f00000002c0)=[@decrefs={0x40046307, 0x2}, @decrefs={0x40046307, 0x2}], 0x9d, 0x0, &(0x7f0000000400)="3ef811a4856b61e328959935df150802f3f3ac7ffe80e6e1451f2fc9e59553873fc78f58f4fb200d8d73822a0a03aebeb91a53fa6e34e50905b8ef43a86c956e9140af1db935b0f41e12e07d53b203129b3e00da57177ebf813e5a46820ce9fbb65035cab23c60a4cfdd5d9e0b97c529d0e1daf43921f5777dcd50c1eb415a7aaa78a53c80b48f79151d07514f3b290dc1b7526f5f0438c3f328fe928f"})

23:15:42 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = memfd_secret(0x0)
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x110b, 0x2})
r2 = memfd_secret(0x0)
r3 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0)
r4 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r4, 0xb701, 0x0)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000080))
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840c797fcb6e4cb2de41caa8cfb606e158fb70a83a20de0b38503f49c2c5db70ffd0e3635fa0cd038b9c0035c6a6bf0597fd769797c1c0323ccde2c98836f8047f89a94e538b5ed31988b0eaad8e8ebc6613205fad854d2807706857495c04c829ac7340cc8db32df9fd96e5451c729fbd2e9a07dca846d8bea3d9ed95e0f85a18c616f042006916cff943ac0ca09e491ef33d168b647413de0a082564689e27abe812b80a4674e710624c77066596306b8c56ebe3696", @ANYRES64=0x0], 0x8e, 0x0, &(0x7f00000000c0)="52e8d69ae5ba38bf2d03b0b8c2a5966bc68434d4398277ed5c10d58a27d4500d82ecee79accd44a47c58c4b1095af0862c1ff83c31412408004eea389f358a6b21fcfae6e4b00eec7b5cb564d3551f1af99149b834725d6bafcbbd8c319110b5be51505f962601a193524d0e941a86393e01edbb90b1fbf7c745e92e903f6b4afb9f9b09c2c47afef752b45f3b19"})
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)

23:15:42 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) (async)
r2 = syz_clone(0x400, &(0x7f0000000000)="ba5fafddbfd80b9f20b40fdf15a6ba0a1416ed376aafc0384d7ab9f51239d2f7941924c9883b158c9d534b048696c0bbcddb70daae32", 0x36, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="15b1ccd42cfc6017e5b789fc341bd89b81944794bf07373631149d4f2b2be81899e34059edf63750a6e45f44a2b118999c267ffb5c9afd5b7ed2e3e32c3aa5dcbc4bd23112d5aa81fc4b5db72c0727f38802c240a419b71b3aa2")
ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000200)={r2, 0x0, 0x4e}) (async)
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f00000003c0)={0x20, 0x1, {0xbd, @struct={0x1a, 0x4}, 0x0, 0x8000000000000000, 0x6, 0x6, 0x7fff, 0x8, 0x485, @usage=0xffffffffffffffff, 0xfffffffc, 0x1, [0x8, 0x9, 0xbc2, 0x9d, 0x7, 0x8]}, {0x8000000000000001, @struct={0x4, 0x1}, <r3=>0x0, 0x6, 0x3, 0x58, 0x0, 0x6b9, 0x1, @usage=0x5cd, 0x81, 0x8, [0x100000000, 0x5, 0x800, 0x9, 0x1, 0x8]}, {0x748, @struct={0x7, 0x80000000}, 0x0, 0x7e, 0x0, 0xffff, 0x9, 0x54d, 0x410, @usage=0x4, 0xfffffffc, 0x6, [0xeba, 0x1, 0x2, 0x8, 0x5d360, 0x9]}, {0x40, 0xb28a, 0x6}})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f00000007c0)={{r0}, 0x0, 0x14, @inherit={0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000000700000000000000000000204c050000915e0000000000001000000000000000a00c000000000000ba2225bb95e910d4ef3dc7a10c000000000000010000000100000006000000000000000600000000000000ffff000000000000d4a4000000000000020000000000000009000000000000000180000000"]}, @devid=r3})

23:15:42 executing program 5:
r0 = memfd_secret(0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, 0x0)

[  828.176868][ T7036] binder: 7033:7036 ioctl c4009420 200003c0 returned -22
[  828.196027][ T7035] binder: 7033:7035 ioctl 5000943f 200007c0 returned -22
23:15:42 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, 0x0, 0x0)

23:15:42 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x10, 0x0, &(0x7f00000002c0)=[@decrefs={0x40046307, 0x2}, @decrefs={0x40046307, 0x2}], 0x9d, 0x0, &(0x7f0000000400)="3ef811a4856b61e328959935df150802f3f3ac7ffe80e6e1451f2fc9e59553873fc78f58f4fb200d8d73822a0a03aebeb91a53fa6e34e50905b8ef43a86c956e9140af1db935b0f41e12e07d53b203129b3e00da57177ebf813e5a46820ce9fbb65035cab23c60a4cfdd5d9e0b97c529d0e1daf43921f5777dcd50c1eb415a7aaa78a53c80b48f79151d07514f3b290dc1b7526f5f0438c3f328fe928f"})

23:15:42 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3000000}], 0x0, 0x0, 0x0})

23:15:42 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = memfd_secret(0x0)
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x110b, 0x2})
r2 = memfd_secret(0x0)
r3 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0)
r4 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r4, 0xb701, 0x0)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000080))
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840c797fcb6e4cb2de41caa8cfb606e158fb70a83a20de0b38503f49c2c5db70ffd0e3635fa0cd038b9c0035c6a6bf0597fd769797c1c0323ccde2c98836f8047f89a94e538b5ed31988b0eaad8e8ebc6613205fad854d2807706857495c04c829ac7340cc8db32df9fd96e5451c729fbd2e9a07dca846d8bea3d9ed95e0f85a18c616f042006916cff943ac0ca09e491ef33d168b647413de0a082564689e27abe812b80a4674e710624c77066596306b8c56ebe3696", @ANYRES64=0x0], 0x8e, 0x0, &(0x7f00000000c0)="52e8d69ae5ba38bf2d03b0b8c2a5966bc68434d4398277ed5c10d58a27d4500d82ecee79accd44a47c58c4b1095af0862c1ff83c31412408004eea389f358a6b21fcfae6e4b00eec7b5cb564d3551f1af99149b834725d6bafcbbd8c319110b5be51505f962601a193524d0e941a86393e01edbb90b1fbf7c745e92e903f6b4afb9f9b09c2c47afef752b45f3b19"})
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async)
memfd_secret(0x0) (async)
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) (async)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x110b, 0x2}) (async)
memfd_secret(0x0) (async)
memfd_secret(0x0) (async)
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) (async)
memfd_secret(0x0) (async)
ioctl$NS_GET_USERNS(r4, 0xb701, 0x0) (async)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000080)) (async)
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) (async)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840c797fcb6e4cb2de41caa8cfb606e158fb70a83a20de0b38503f49c2c5db70ffd0e3635fa0cd038b9c0035c6a6bf0597fd769797c1c0323ccde2c98836f8047f89a94e538b5ed31988b0eaad8e8ebc6613205fad854d2807706857495c04c829ac7340cc8db32df9fd96e5451c729fbd2e9a07dca846d8bea3d9ed95e0f85a18c616f042006916cff943ac0ca09e491ef33d168b647413de0a082564689e27abe812b80a4674e710624c77066596306b8c56ebe3696", @ANYRES64=0x0], 0x8e, 0x0, &(0x7f00000000c0)="52e8d69ae5ba38bf2d03b0b8c2a5966bc68434d4398277ed5c10d58a27d4500d82ecee79accd44a47c58c4b1095af0862c1ff83c31412408004eea389f358a6b21fcfae6e4b00eec7b5cb564d3551f1af99149b834725d6bafcbbd8c319110b5be51505f962601a193524d0e941a86393e01edbb90b1fbf7c745e92e903f6b4afb9f9b09c2c47afef752b45f3b19"}) (async)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0) (async)

23:15:42 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x10, 0x0, &(0x7f00000002c0)=[@decrefs={0x40046307, 0x2}, @decrefs={0x40046307, 0x2}], 0x9d, 0x0, &(0x7f0000000400)="3ef811a4856b61e328959935df150802f3f3ac7ffe80e6e1451f2fc9e59553873fc78f58f4fb200d8d73822a0a03aebeb91a53fa6e34e50905b8ef43a86c956e9140af1db935b0f41e12e07d53b203129b3e00da57177ebf813e5a46820ce9fbb65035cab23c60a4cfdd5d9e0b97c529d0e1daf43921f5777dcd50c1eb415a7aaa78a53c80b48f79151d07514f3b290dc1b7526f5f0438c3f328fe928f"})

23:15:42 executing program 0:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x10, 0x0, &(0x7f00000002c0)=[@decrefs={0x40046307, 0x2}, @decrefs={0x40046307, 0x2}], 0x9d, 0x0, &(0x7f0000000400)="3ef811a4856b61e328959935df150802f3f3ac7ffe80e6e1451f2fc9e59553873fc78f58f4fb200d8d73822a0a03aebeb91a53fa6e34e50905b8ef43a86c956e9140af1db935b0f41e12e07d53b203129b3e00da57177ebf813e5a46820ce9fbb65035cab23c60a4cfdd5d9e0b97c529d0e1daf43921f5777dcd50c1eb415a7aaa78a53c80b48f79151d07514f3b290dc1b7526f5f0438c3f328fe928f"})

23:15:42 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, 0x0, 0x0)

23:15:42 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000000}], 0x0, 0x0, 0x0})

23:15:42 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x3})
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)
pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0, r4}}, 0x18)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r5, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {&(0x7f0000000200), r4, 0x2}}, 0x18)

23:15:42 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x5000000}], 0x0, 0x0, 0x0})

23:15:42 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0xc00, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x0, 0x0)

23:15:42 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18)

23:15:42 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = memfd_secret(0x0)
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x110b, 0x2})
r2 = memfd_secret(0x0)
r3 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0)
r4 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r4, 0xb701, 0x0)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000080))
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840c797fcb6e4cb2de41caa8cfb606e158fb70a83a20de0b38503f49c2c5db70ffd0e3635fa0cd038b9c0035c6a6bf0597fd769797c1c0323ccde2c98836f8047f89a94e538b5ed31988b0eaad8e8ebc6613205fad854d2807706857495c04c829ac7340cc8db32df9fd96e5451c729fbd2e9a07dca846d8bea3d9ed95e0f85a18c616f042006916cff943ac0ca09e491ef33d168b647413de0a082564689e27abe812b80a4674e710624c77066596306b8c56ebe3696", @ANYRES64=0x0], 0x8e, 0x0, &(0x7f00000000c0)="52e8d69ae5ba38bf2d03b0b8c2a5966bc68434d4398277ed5c10d58a27d4500d82ecee79accd44a47c58c4b1095af0862c1ff83c31412408004eea389f358a6b21fcfae6e4b00eec7b5cb564d3551f1af99149b834725d6bafcbbd8c319110b5be51505f962601a193524d0e941a86393e01edbb90b1fbf7c745e92e903f6b4afb9f9b09c2c47afef752b45f3b19"})
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async)
memfd_secret(0x0) (async)
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) (async)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x110b, 0x2}) (async)
memfd_secret(0x0) (async)
memfd_secret(0x0) (async)
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) (async)
memfd_secret(0x0) (async)
ioctl$NS_GET_USERNS(r4, 0xb701, 0x0) (async)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000080)) (async)
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) (async)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840c797fcb6e4cb2de41caa8cfb606e158fb70a83a20de0b38503f49c2c5db70ffd0e3635fa0cd038b9c0035c6a6bf0597fd769797c1c0323ccde2c98836f8047f89a94e538b5ed31988b0eaad8e8ebc6613205fad854d2807706857495c04c829ac7340cc8db32df9fd96e5451c729fbd2e9a07dca846d8bea3d9ed95e0f85a18c616f042006916cff943ac0ca09e491ef33d168b647413de0a082564689e27abe812b80a4674e710624c77066596306b8c56ebe3696", @ANYRES64=0x0], 0x8e, 0x0, &(0x7f00000000c0)="52e8d69ae5ba38bf2d03b0b8c2a5966bc68434d4398277ed5c10d58a27d4500d82ecee79accd44a47c58c4b1095af0862c1ff83c31412408004eea389f358a6b21fcfae6e4b00eec7b5cb564d3551f1af99149b834725d6bafcbbd8c319110b5be51505f962601a193524d0e941a86393e01edbb90b1fbf7c745e92e903f6b4afb9f9b09c2c47afef752b45f3b19"}) (async)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0) (async)

23:15:42 executing program 0:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x10, 0x0, &(0x7f00000002c0)=[@decrefs={0x40046307, 0x2}, @decrefs={0x40046307, 0x2}], 0x9d, 0x0, &(0x7f0000000400)="3ef811a4856b61e328959935df150802f3f3ac7ffe80e6e1451f2fc9e59553873fc78f58f4fb200d8d73822a0a03aebeb91a53fa6e34e50905b8ef43a86c956e9140af1db935b0f41e12e07d53b203129b3e00da57177ebf813e5a46820ce9fbb65035cab23c60a4cfdd5d9e0b97c529d0e1daf43921f5777dcd50c1eb415a7aaa78a53c80b48f79151d07514f3b290dc1b7526f5f0438c3f328fe928f"})

[  828.317115][ T7063] binder: 7053:7063 ioctl c4009420 200003c0 returned -22
[  828.341868][ T7062] binder: 7053:7062 ioctl 5000943f 200007c0 returned -22
23:15:42 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000000}], 0x0, 0x0, 0x0})

23:15:42 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0xc4, 0x0, &(0x7f00000002c0)=[@decrefs={0x40046307, 0x2}, @decrefs={0x40046307, 0x2}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000500)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32, @ANYBLOB="0000000000000000000000008561646600000000030000000000000001000000000000003e00000000000000852a646600000000", @ANYRES32, @ANYBLOB="000000000000000000200000000000000004179090b9b9ef4c5060254d98b6e457156d99a203dcfd628d631377eb0b12651a252696abf6bea910c4f677d9d2e9acf33802003d8bba45edd5489012bbd8dc"], &(0x7f0000000000)={0x0, 0x18, 0x38}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1100, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/33, 0x21, 0x2, 0x27}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}}, @free_buffer, @dead_binder_done, @free_buffer], 0x9d, 0x0, &(0x7f0000000400)="3ef811a4856b61e328959935df150802f3f3ac7ffe80e6e1451f2fc9e59553873fc78f58f4fb200d8d73822a0a03aebeb91a53fa6e34e50905b8ef43a86c956e9140af1db935b0f41e12e07d53b203129b3e00da57177ebf813e5a46820ce9fbb65035cab23c60a4cfdd5d9e0b97c529d0e1daf43921f5777dcd50c1eb415a7aaa78a53c80b48f79151d07514f3b290dc1b7526f5f0438c3f328fe928f"})

23:15:42 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)

23:15:42 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0xc00, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x0, 0x0)

23:15:42 executing program 0:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x10, 0x0, &(0x7f00000002c0)=[@decrefs={0x40046307, 0x2}, @decrefs={0x40046307, 0x2}], 0x9d, 0x0, &(0x7f0000000400)="3ef811a4856b61e328959935df150802f3f3ac7ffe80e6e1451f2fc9e59553873fc78f58f4fb200d8d73822a0a03aebeb91a53fa6e34e50905b8ef43a86c956e9140af1db935b0f41e12e07d53b203129b3e00da57177ebf813e5a46820ce9fbb65035cab23c60a4cfdd5d9e0b97c529d0e1daf43921f5777dcd50c1eb415a7aaa78a53c80b48f79151d07514f3b290dc1b7526f5f0438c3f328fe928f"})

23:15:42 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:42 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)

23:15:42 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40046304, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:42 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0xc00, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x0, 0x0)

23:15:42 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x7000000}], 0x0, 0x0, 0x0})

23:15:42 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0) (async)

23:15:43 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

23:15:43 executing program 5:
r0 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000001180))
r1 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180))
r2 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000001180))
ioctl$VIDIOC_S_TUNER(r2, 0x4054561e, &(0x7f0000000040)={0xd8, "c2d5124c132b46d108d6681eb2a3db019577f5cc48f2c7b48a281c22d9c6e698", 0x5, 0x120, 0x732, 0x5, 0x4, 0x5, 0x6, 0x658})
ioctl$VIDIOC_DBG_G_REGISTER(r1, 0xc0385650, &(0x7f0000000000)={{0x2, @name="a78f2c2970500080000000000000ce4b9da33b1f0faf1529df006b20d87c2b30"}, 0x8, 0x41, 0x2})
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r3, 0x0, 0x0)

23:15:43 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)

23:15:43 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfdfdffff}], 0x0, 0x0, 0x0})

23:15:43 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:43 executing program 5:
r0 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000001180))
r1 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180))
r2 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000001180))
ioctl$VIDIOC_S_TUNER(r2, 0x4054561e, &(0x7f0000000040)={0xd8, "c2d5124c132b46d108d6681eb2a3db019577f5cc48f2c7b48a281c22d9c6e698", 0x5, 0x120, 0x732, 0x5, 0x4, 0x5, 0x6, 0x658})
ioctl$VIDIOC_DBG_G_REGISTER(r1, 0xc0385650, &(0x7f0000000000)={{0x2, @name="a78f2c2970500080000000000000ce4b9da33b1f0faf1529df006b20d87c2b30"}, 0x8, 0x41, 0x2})
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r3, 0x0, 0x0)

[  828.532137][ T7138] binder: 7133:7138 ioctl 4018620d 0 returned -22
[  828.552405][ T7138] binder: 7133:7138 unknown command 0
[  828.563238][ T7143] binder: 7137:7143 ioctl c0306201 0 returned -14
23:15:43 executing program 2:
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x0, 0x0)
r0 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0)
r1 = memfd_secret(0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc800}, 0x20000000)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
r3 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000001180))
ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, &(0x7f0000000080)={0xc, 0x3, 0x5, {0x2, 0x7fffffff, 0x1, 0xfffffffa}})
r4 = memfd_secret(0x80000)
ioctl$NS_GET_USERNS(r4, 0xb701, 0x0)
ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)

23:15:43 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:43 executing program 4:
r0 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000001180))
r1 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180))
r2 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000001180))
ioctl$VIDIOC_S_TUNER(r2, 0x4054561e, &(0x7f0000000040)={0xd8, "c2d5124c132b46d108d6681eb2a3db019577f5cc48f2c7b48a281c22d9c6e698", 0x5, 0x120, 0x732, 0x5, 0x4, 0x5, 0x6, 0x658})
ioctl$VIDIOC_DBG_G_REGISTER(r1, 0xc0385650, &(0x7f0000000000)={{0x2, @name="a78f2c2970500080000000000000ce4b9da33b1f0faf1529df006b20d87c2b30"}, 0x8, 0x41, 0x2})
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r3, 0x0, 0x0)

23:15:43 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xff000000}], 0x0, 0x0, 0x0})

[  828.577643][ T7138] binder: 7133:7138 ioctl c0306201 20000380 returned -22
23:15:43 executing program 2:
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x0, 0x0) (async)
r0 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) (async)
r1 = memfd_secret(0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc800}, 0x20000000) (async)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) (async)
r3 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000001180))
ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, &(0x7f0000000080)={0xc, 0x3, 0x5, {0x2, 0x7fffffff, 0x1, 0xfffffffa}})
r4 = memfd_secret(0x80000)
ioctl$NS_GET_USERNS(r4, 0xb701, 0x0) (async)
ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000000)) (async)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)

23:15:43 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x800, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)

23:15:43 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

23:15:43 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffdfd}], 0x0, 0x0, 0x0})

23:15:43 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f00000003c0)={0x1ff, 0x1000, "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"})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000080)=0xfffc)
pidfd_getfd(0xffffffffffffffff, r2, 0x0)

23:15:43 executing program 2:
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x0, 0x0) (async)
r0 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0)
r1 = memfd_secret(0x0) (async, rerun: 32)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc800}, 0x20000000)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
r3 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000001180)) (async)
ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, &(0x7f0000000080)={0xc, 0x3, 0x5, {0x2, 0x7fffffff, 0x1, 0xfffffffa}})
r4 = memfd_secret(0x80000)
ioctl$NS_GET_USERNS(r4, 0xb701, 0x0) (async)
ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000000)) (async)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)

23:15:43 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0xffffff7f, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:43 executing program 3:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:43 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x5, 0x0})

23:15:43 executing program 4:
clock_gettime(0x5, &(0x7f0000000040))
clock_gettime(0x0, &(0x7f0000000000)={<r0=>0x0, <r1=>0x0})
ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000140)=@overlay={0x10001, 0x1, 0x4, 0x40, 0x6, {r0, r1/1000+60000}, {0x2, 0x2, 0x7, 0x7, 0x42, 0x5, "2b05b192"}, 0xffff0000, 0x3, {}, 0xc1})
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r2, 0x0, 0x0)
r3 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r4=>0x0})
bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r4, 0x0, {0x2, 0xf0}}, 0x18)

23:15:43 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffff7f}], 0x0, 0x0, 0x0})

23:15:43 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x387612da})
r2 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r2, 0xb701, 0x0)
ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f00000004c0)={0x0, 0x1})
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000080)={0x0, 0xfff, 0x0, [0x7, 0x3, 0x4, 0xed, 0x8bc], [0x6, 0x9, 0xffffffffffffff81, 0x2, 0x7, 0x7, 0x5, 0x1, 0x3, 0x22a54234, 0x80000000, 0x101, 0x0, 0x9, 0x100, 0x1, 0xfffffffffffffffb, 0x0, 0x7fffffff, 0x40, 0x31885082, 0x9, 0x1, 0x5, 0x20, 0xddbc, 0xf8, 0x0, 0x7, 0x0, 0x4a2b4f1a, 0x3, 0xffffffffffffffd7, 0x400, 0x4, 0x401, 0x3, 0x8001, 0x20, 0xb9, 0x5, 0x81, 0x1, 0x9, 0x400, 0x9, 0x5, 0x4, 0xb13, 0xa819, 0x1c2c, 0x4, 0x5, 0x3f, 0x3, 0x7fff, 0x9, 0x60, 0x3ff, 0x5, 0x2000000000, 0x9214, 0x0, 0x1, 0x9, 0x1, 0x6, 0x4, 0xfa75, 0x44, 0x3, 0x6, 0x5, 0x1f, 0x6, 0xd4, 0xdec, 0x52, 0x5, 0xff, 0xd5b, 0x8, 0x1, 0x10001, 0x2, 0xdf, 0x10000, 0x6, 0x4a3c, 0x5e5, 0x100000000, 0x10001, 0x8000000000000001, 0x2, 0x8, 0x6, 0x800, 0x1ff, 0x0, 0x0, 0xcf, 0xfffffffffffffc01, 0x7, 0x2, 0x280000000000, 0x6, 0x3f, 0x1cf, 0x17, 0x0, 0x80000001, 0x6, 0x9, 0x9, 0x200, 0x6, 0x5, 0x2, 0x0, 0x1, 0x6]})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000))

23:15:43 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[  828.699620][ T7175] binder: 7170:7175 ioctl c0306201 0 returned -14
23:15:43 executing program 3:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)

23:15:43 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100000000000000}], 0x0, 0x0, 0x0})

23:15:43 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x5, 0x0})

23:15:43 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x387612da})
r2 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r2, 0xb701, 0x0)
ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f00000004c0)={0x0, 0x1})
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000080)={0x0, 0xfff, 0x0, [0x7, 0x3, 0x4, 0xed, 0x8bc], [0x6, 0x9, 0xffffffffffffff81, 0x2, 0x7, 0x7, 0x5, 0x1, 0x3, 0x22a54234, 0x80000000, 0x101, 0x0, 0x9, 0x100, 0x1, 0xfffffffffffffffb, 0x0, 0x7fffffff, 0x40, 0x31885082, 0x9, 0x1, 0x5, 0x20, 0xddbc, 0xf8, 0x0, 0x7, 0x0, 0x4a2b4f1a, 0x3, 0xffffffffffffffd7, 0x400, 0x4, 0x401, 0x3, 0x8001, 0x20, 0xb9, 0x5, 0x81, 0x1, 0x9, 0x400, 0x9, 0x5, 0x4, 0xb13, 0xa819, 0x1c2c, 0x4, 0x5, 0x3f, 0x3, 0x7fff, 0x9, 0x60, 0x3ff, 0x5, 0x2000000000, 0x9214, 0x0, 0x1, 0x9, 0x1, 0x6, 0x4, 0xfa75, 0x44, 0x3, 0x6, 0x5, 0x1f, 0x6, 0xd4, 0xdec, 0x52, 0x5, 0xff, 0xd5b, 0x8, 0x1, 0x10001, 0x2, 0xdf, 0x10000, 0x6, 0x4a3c, 0x5e5, 0x100000000, 0x10001, 0x8000000000000001, 0x2, 0x8, 0x6, 0x800, 0x1ff, 0x0, 0x0, 0xcf, 0xfffffffffffffc01, 0x7, 0x2, 0x280000000000, 0x6, 0x3f, 0x1cf, 0x17, 0x0, 0x80000001, 0x6, 0x9, 0x9, 0x200, 0x6, 0x5, 0x2, 0x0, 0x1, 0x6]})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000))
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
memfd_secret(0x0) (async)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) (async)
ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x387612da}) (async)
memfd_secret(0x0) (async)
ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) (async)
ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f00000004c0)={0x0, 0x1}) (async)
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000080)={0x0, 0xfff, 0x0, [0x7, 0x3, 0x4, 0xed, 0x8bc], [0x6, 0x9, 0xffffffffffffff81, 0x2, 0x7, 0x7, 0x5, 0x1, 0x3, 0x22a54234, 0x80000000, 0x101, 0x0, 0x9, 0x100, 0x1, 0xfffffffffffffffb, 0x0, 0x7fffffff, 0x40, 0x31885082, 0x9, 0x1, 0x5, 0x20, 0xddbc, 0xf8, 0x0, 0x7, 0x0, 0x4a2b4f1a, 0x3, 0xffffffffffffffd7, 0x400, 0x4, 0x401, 0x3, 0x8001, 0x20, 0xb9, 0x5, 0x81, 0x1, 0x9, 0x400, 0x9, 0x5, 0x4, 0xb13, 0xa819, 0x1c2c, 0x4, 0x5, 0x3f, 0x3, 0x7fff, 0x9, 0x60, 0x3ff, 0x5, 0x2000000000, 0x9214, 0x0, 0x1, 0x9, 0x1, 0x6, 0x4, 0xfa75, 0x44, 0x3, 0x6, 0x5, 0x1f, 0x6, 0xd4, 0xdec, 0x52, 0x5, 0xff, 0xd5b, 0x8, 0x1, 0x10001, 0x2, 0xdf, 0x10000, 0x6, 0x4a3c, 0x5e5, 0x100000000, 0x10001, 0x8000000000000001, 0x2, 0x8, 0x6, 0x800, 0x1ff, 0x0, 0x0, 0xcf, 0xfffffffffffffc01, 0x7, 0x2, 0x280000000000, 0x6, 0x3f, 0x1cf, 0x17, 0x0, 0x80000001, 0x6, 0x9, 0x9, 0x200, 0x6, 0x5, 0x2, 0x0, 0x1, 0x6]}) (async)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)) (async)

23:15:43 executing program 4:
clock_gettime(0x5, &(0x7f0000000040))
clock_gettime(0x0, &(0x7f0000000000)={<r0=>0x0, <r1=>0x0})
ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000140)=@overlay={0x10001, 0x1, 0x4, 0x40, 0x6, {r0, r1/1000+60000}, {0x2, 0x2, 0x7, 0x7, 0x42, 0x5, "2b05b192"}, 0xffff0000, 0x3, {}, 0xc1})
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r2, 0x0, 0x0)
r3 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r4=>0x0})
bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r4, 0x0, {0x2, 0xf0}}, 0x18)

23:15:43 executing program 3:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:43 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x9d, 0x0, &(0x7f0000000400)="3ef811a4856b61e328959935df150802f3f3ac7ffe80e6e1451f2fc9e59553873fc78f58f4fb200d8d73822a0a03aebeb91a53fa6e34e50905b8ef43a86c956e9140af1db935b0f41e12e07d53b203129b3e00da57177ebf813e5a46820ce9fbb65035cab23c60a4cfdd5d9e0b97c529d0e1daf43921f5777dcd50c1eb415a7aaa78a53c80b48f79151d07514f3b290dc1b7526f5f0438c3f328fe928f"})

23:15:43 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x387612da})
r2 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r2, 0xb701, 0x0)
ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f00000004c0)={0x0, 0x1})
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000080)={0x0, 0xfff, 0x0, [0x7, 0x3, 0x4, 0xed, 0x8bc], [0x6, 0x9, 0xffffffffffffff81, 0x2, 0x7, 0x7, 0x5, 0x1, 0x3, 0x22a54234, 0x80000000, 0x101, 0x0, 0x9, 0x100, 0x1, 0xfffffffffffffffb, 0x0, 0x7fffffff, 0x40, 0x31885082, 0x9, 0x1, 0x5, 0x20, 0xddbc, 0xf8, 0x0, 0x7, 0x0, 0x4a2b4f1a, 0x3, 0xffffffffffffffd7, 0x400, 0x4, 0x401, 0x3, 0x8001, 0x20, 0xb9, 0x5, 0x81, 0x1, 0x9, 0x400, 0x9, 0x5, 0x4, 0xb13, 0xa819, 0x1c2c, 0x4, 0x5, 0x3f, 0x3, 0x7fff, 0x9, 0x60, 0x3ff, 0x5, 0x2000000000, 0x9214, 0x0, 0x1, 0x9, 0x1, 0x6, 0x4, 0xfa75, 0x44, 0x3, 0x6, 0x5, 0x1f, 0x6, 0xd4, 0xdec, 0x52, 0x5, 0xff, 0xd5b, 0x8, 0x1, 0x10001, 0x2, 0xdf, 0x10000, 0x6, 0x4a3c, 0x5e5, 0x100000000, 0x10001, 0x8000000000000001, 0x2, 0x8, 0x6, 0x800, 0x1ff, 0x0, 0x0, 0xcf, 0xfffffffffffffc01, 0x7, 0x2, 0x280000000000, 0x6, 0x3f, 0x1cf, 0x17, 0x0, 0x80000001, 0x6, 0x9, 0x9, 0x200, 0x6, 0x5, 0x2, 0x0, 0x1, 0x6]})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000))

[  828.770537][ T7188] binder: 7180:7188 ioctl c4089434 20000080 returned -22
[  828.790017][ T7189] binder: 7184:7189 ioctl c0306201 0 returned -14
23:15:43 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x200000000000000}], 0x0, 0x0, 0x0})

23:15:43 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180))
ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000000)={{r0}, {@void, @max}})

23:15:43 executing program 4:
clock_gettime(0x5, &(0x7f0000000040))
clock_gettime(0x0, &(0x7f0000000000)={<r0=>0x0, <r1=>0x0})
ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000140)=@overlay={0x10001, 0x1, 0x4, 0x40, 0x6, {r0, r1/1000+60000}, {0x2, 0x2, 0x7, 0x7, 0x42, 0x5, "2b05b192"}, 0xffff0000, 0x3, {}, 0xc1})
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r2, 0x0, 0x0)
r3 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r4=>0x0})
bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r4, 0x0, {0x2, 0xf0}}, 0x18)

23:15:43 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x9d, 0x0, &(0x7f0000000400)="3ef811a4856b61e328959935df150802f3f3ac7ffe80e6e1451f2fc9e59553873fc78f58f4fb200d8d73822a0a03aebeb91a53fa6e34e50905b8ef43a86c956e9140af1db935b0f41e12e07d53b203129b3e00da57177ebf813e5a46820ce9fbb65035cab23c60a4cfdd5d9e0b97c529d0e1daf43921f5777dcd50c1eb415a7aaa78a53c80b48f79151d07514f3b290dc1b7526f5f0438c3f328fe928f"})

[  828.835966][ T7200] binder: 7196:7200 ioctl c4089434 20000080 returned -22
23:15:43 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x300000000000000}], 0x0, 0x0, 0x0})

23:15:43 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x9d, 0x0, &(0x7f0000000400)="3ef811a4856b61e328959935df150802f3f3ac7ffe80e6e1451f2fc9e59553873fc78f58f4fb200d8d73822a0a03aebeb91a53fa6e34e50905b8ef43a86c956e9140af1db935b0f41e12e07d53b203129b3e00da57177ebf813e5a46820ce9fbb65035cab23c60a4cfdd5d9e0b97c529d0e1daf43921f5777dcd50c1eb415a7aaa78a53c80b48f79151d07514f3b290dc1b7526f5f0438c3f328fe928f"})

23:15:43 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180)) (async)
ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000000)={{r0}, {@void, @max}})

23:15:43 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) (async)
ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x387612da}) (async, rerun: 32)
r2 = memfd_secret(0x0) (rerun: 32)
ioctl$NS_GET_USERNS(r2, 0xb701, 0x0)
ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f00000004c0)={0x0, 0x1}) (async, rerun: 32)
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000080)={0x0, 0xfff, 0x0, [0x7, 0x3, 0x4, 0xed, 0x8bc], [0x6, 0x9, 0xffffffffffffff81, 0x2, 0x7, 0x7, 0x5, 0x1, 0x3, 0x22a54234, 0x80000000, 0x101, 0x0, 0x9, 0x100, 0x1, 0xfffffffffffffffb, 0x0, 0x7fffffff, 0x40, 0x31885082, 0x9, 0x1, 0x5, 0x20, 0xddbc, 0xf8, 0x0, 0x7, 0x0, 0x4a2b4f1a, 0x3, 0xffffffffffffffd7, 0x400, 0x4, 0x401, 0x3, 0x8001, 0x20, 0xb9, 0x5, 0x81, 0x1, 0x9, 0x400, 0x9, 0x5, 0x4, 0xb13, 0xa819, 0x1c2c, 0x4, 0x5, 0x3f, 0x3, 0x7fff, 0x9, 0x60, 0x3ff, 0x5, 0x2000000000, 0x9214, 0x0, 0x1, 0x9, 0x1, 0x6, 0x4, 0xfa75, 0x44, 0x3, 0x6, 0x5, 0x1f, 0x6, 0xd4, 0xdec, 0x52, 0x5, 0xff, 0xd5b, 0x8, 0x1, 0x10001, 0x2, 0xdf, 0x10000, 0x6, 0x4a3c, 0x5e5, 0x100000000, 0x10001, 0x8000000000000001, 0x2, 0x8, 0x6, 0x800, 0x1ff, 0x0, 0x0, 0xcf, 0xfffffffffffffc01, 0x7, 0x2, 0x280000000000, 0x6, 0x3f, 0x1cf, 0x17, 0x0, 0x80000001, 0x6, 0x9, 0x9, 0x200, 0x6, 0x5, 0x2, 0x0, 0x1, 0x6]}) (async, rerun: 32)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000))

23:15:43 executing program 4:
clock_gettime(0x5, &(0x7f0000000040))
clock_gettime(0x0, &(0x7f0000000000)={<r0=>0x0, <r1=>0x0})
ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000140)=@overlay={0x10001, 0x1, 0x4, 0x40, 0x6, {r0, r1/1000+60000}, {0x2, 0x2, 0x7, 0x7, 0x42, 0x5, "2b05b192"}, 0xffff0000, 0x3, {}, 0xc1})
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r2, 0x0, 0x0)
r3 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00'})

23:15:43 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f00000002c0)=[@decrefs={0x40046307, 0x2}], 0x9d, 0x0, &(0x7f0000000400)="3ef811a4856b61e328959935df150802f3f3ac7ffe80e6e1451f2fc9e59553873fc78f58f4fb200d8d73822a0a03aebeb91a53fa6e34e50905b8ef43a86c956e9140af1db935b0f41e12e07d53b203129b3e00da57177ebf813e5a46820ce9fbb65035cab23c60a4cfdd5d9e0b97c529d0e1daf43921f5777dcd50c1eb415a7aaa78a53c80b48f79151d07514f3b290dc1b7526f5f0438c3f328fe928f"})

23:15:43 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180)) (async)
ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000000)={{r0}, {@void, @max}})

[  828.883103][ T7208] binder: 7202:7208 ioctl c4089434 20000080 returned -22
23:15:43 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x387612da})
r2 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r2, 0xb701, 0x0)
ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f00000004c0)={0x0, 0x1})
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000080)={0x0, 0xfff, 0x0, [0x7, 0x3, 0x4, 0xed, 0x8bc], [0x6, 0x9, 0xffffffffffffff81, 0x2, 0x7, 0x7, 0x5, 0x1, 0x3, 0x22a54234, 0x80000000, 0x101, 0x0, 0x9, 0x100, 0x1, 0xfffffffffffffffb, 0x0, 0x7fffffff, 0x40, 0x31885082, 0x9, 0x1, 0x5, 0x20, 0xddbc, 0xf8, 0x0, 0x7, 0x0, 0x4a2b4f1a, 0x3, 0xffffffffffffffd7, 0x400, 0x4, 0x401, 0x3, 0x8001, 0x20, 0xb9, 0x5, 0x81, 0x1, 0x9, 0x400, 0x9, 0x5, 0x4, 0xb13, 0xa819, 0x1c2c, 0x4, 0x5, 0x3f, 0x3, 0x7fff, 0x9, 0x60, 0x3ff, 0x5, 0x2000000000, 0x9214, 0x0, 0x1, 0x9, 0x1, 0x6, 0x4, 0xfa75, 0x44, 0x3, 0x6, 0x5, 0x1f, 0x6, 0xd4, 0xdec, 0x52, 0x5, 0xff, 0xd5b, 0x8, 0x1, 0x10001, 0x2, 0xdf, 0x10000, 0x6, 0x4a3c, 0x5e5, 0x100000000, 0x10001, 0x8000000000000001, 0x2, 0x8, 0x6, 0x800, 0x1ff, 0x0, 0x0, 0xcf, 0xfffffffffffffc01, 0x7, 0x2, 0x280000000000, 0x6, 0x3f, 0x1cf, 0x17, 0x0, 0x80000001, 0x6, 0x9, 0x9, 0x200, 0x6, 0x5, 0x2, 0x0, 0x1, 0x6]})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000))

23:15:43 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400000000000000}], 0x0, 0x0, 0x0})

23:15:43 executing program 4:
clock_gettime(0x5, &(0x7f0000000040))
clock_gettime(0x0, &(0x7f0000000000)={<r0=>0x0, <r1=>0x0})
ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000140)=@overlay={0x10001, 0x1, 0x4, 0x40, 0x6, {r0, r1/1000+60000}, {0x2, 0x2, 0x7, 0x7, 0x42, 0x5, "2b05b192"}, 0xffff0000, 0x3, {}, 0xc1})
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r2, 0x0, 0x0)
r3 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)

23:15:43 executing program 2:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000000c0)={0x8, 0x2, 0x2, 0x2, 0x7, 0x0, 0x215ec1b5})
r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000000))

23:15:43 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0), 0x9d, 0x0, &(0x7f0000000400)="3ef811a4856b61e328959935df150802f3f3ac7ffe80e6e1451f2fc9e59553873fc78f58f4fb200d8d73822a0a03aebeb91a53fa6e34e50905b8ef43a86c956e9140af1db935b0f41e12e07d53b203129b3e00da57177ebf813e5a46820ce9fbb65035cab23c60a4cfdd5d9e0b97c529d0e1daf43921f5777dcd50c1eb415a7aaa78a53c80b48f79151d07514f3b290dc1b7526f5f0438c3f328fe928f"})

23:15:43 executing program 4:
clock_gettime(0x5, &(0x7f0000000040))
clock_gettime(0x0, &(0x7f0000000000)={<r0=>0x0, <r1=>0x0})
ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000140)=@overlay={0x10001, 0x1, 0x4, 0x40, 0x6, {r0, r1/1000+60000}, {0x2, 0x2, 0x7, 0x7, 0x42, 0x5, "2b05b192"}, 0xffff0000, 0x3, {}, 0xc1})
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r2, 0x0, 0x0)
r3 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0)

23:15:43 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x2})

23:15:43 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x500000000000000}], 0x0, 0x0, 0x0})

23:15:43 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x2})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x2}) (async)

23:15:43 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x387612da})
r2 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r2, 0xb701, 0x0)
ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f00000004c0)={0x0, 0x1})
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000080)={0x0, 0xfff, 0x0, [0x7, 0x3, 0x4, 0xed, 0x8bc], [0x6, 0x9, 0xffffffffffffff81, 0x2, 0x7, 0x7, 0x5, 0x1, 0x3, 0x22a54234, 0x80000000, 0x101, 0x0, 0x9, 0x100, 0x1, 0xfffffffffffffffb, 0x0, 0x7fffffff, 0x40, 0x31885082, 0x9, 0x1, 0x5, 0x20, 0xddbc, 0xf8, 0x0, 0x7, 0x0, 0x4a2b4f1a, 0x3, 0xffffffffffffffd7, 0x400, 0x4, 0x401, 0x3, 0x8001, 0x20, 0xb9, 0x5, 0x81, 0x1, 0x9, 0x400, 0x9, 0x5, 0x4, 0xb13, 0xa819, 0x1c2c, 0x4, 0x5, 0x3f, 0x3, 0x7fff, 0x9, 0x60, 0x3ff, 0x5, 0x2000000000, 0x9214, 0x0, 0x1, 0x9, 0x1, 0x6, 0x4, 0xfa75, 0x44, 0x3, 0x6, 0x5, 0x1f, 0x6, 0xd4, 0xdec, 0x52, 0x5, 0xff, 0xd5b, 0x8, 0x1, 0x10001, 0x2, 0xdf, 0x10000, 0x6, 0x4a3c, 0x5e5, 0x100000000, 0x10001, 0x8000000000000001, 0x2, 0x8, 0x6, 0x800, 0x1ff, 0x0, 0x0, 0xcf, 0xfffffffffffffc01, 0x7, 0x2, 0x280000000000, 0x6, 0x3f, 0x1cf, 0x17, 0x0, 0x80000001, 0x6, 0x9, 0x9, 0x200, 0x6, 0x5, 0x2, 0x0, 0x1, 0x6]})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000))

[  828.980569][ T7237] binder: 7236:7237 ioctl c4089434 20000080 returned -22
23:15:43 executing program 2:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0x2, 0x0) (async)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000000c0)={0x8, 0x2, 0x2, 0x2, 0x7, 0x0, 0x215ec1b5}) (async)
r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000000))

23:15:43 executing program 4:
clock_gettime(0x5, &(0x7f0000000040))
clock_gettime(0x0, &(0x7f0000000000)={<r0=>0x0, <r1=>0x0})
ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000140)=@overlay={0x10001, 0x1, 0x4, 0x40, 0x6, {r0, r1/1000+60000}, {0x2, 0x2, 0x7, 0x7, 0x42, 0x5, "2b05b192"}, 0xffff0000, 0x3, {}, 0xc1})
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r2, 0x0, 0x0)
memfd_secret(0x0)

23:15:43 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0), 0x9d, 0x0, &(0x7f0000000400)="3ef811a4856b61e328959935df150802f3f3ac7ffe80e6e1451f2fc9e59553873fc78f58f4fb200d8d73822a0a03aebeb91a53fa6e34e50905b8ef43a86c956e9140af1db935b0f41e12e07d53b203129b3e00da57177ebf813e5a46820ce9fbb65035cab23c60a4cfdd5d9e0b97c529d0e1daf43921f5777dcd50c1eb415a7aaa78a53c80b48f79151d07514f3b290dc1b7526f5f0438c3f328fe928f"})

23:15:43 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x600000000000000}], 0x0, 0x0, 0x0})

23:15:43 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x387612da})
r2 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r2, 0xb701, 0x0)
ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f00000004c0)={0x0, 0x1})
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000080)={0x0, 0xfff, 0x0, [0x7, 0x3, 0x4, 0xed, 0x8bc], [0x6, 0x9, 0xffffffffffffff81, 0x2, 0x7, 0x7, 0x5, 0x1, 0x3, 0x22a54234, 0x80000000, 0x101, 0x0, 0x9, 0x100, 0x1, 0xfffffffffffffffb, 0x0, 0x7fffffff, 0x40, 0x31885082, 0x9, 0x1, 0x5, 0x20, 0xddbc, 0xf8, 0x0, 0x7, 0x0, 0x4a2b4f1a, 0x3, 0xffffffffffffffd7, 0x400, 0x4, 0x401, 0x3, 0x8001, 0x20, 0xb9, 0x5, 0x81, 0x1, 0x9, 0x400, 0x9, 0x5, 0x4, 0xb13, 0xa819, 0x1c2c, 0x4, 0x5, 0x3f, 0x3, 0x7fff, 0x9, 0x60, 0x3ff, 0x5, 0x2000000000, 0x9214, 0x0, 0x1, 0x9, 0x1, 0x6, 0x4, 0xfa75, 0x44, 0x3, 0x6, 0x5, 0x1f, 0x6, 0xd4, 0xdec, 0x52, 0x5, 0xff, 0xd5b, 0x8, 0x1, 0x10001, 0x2, 0xdf, 0x10000, 0x6, 0x4a3c, 0x5e5, 0x100000000, 0x10001, 0x8000000000000001, 0x2, 0x8, 0x6, 0x800, 0x1ff, 0x0, 0x0, 0xcf, 0xfffffffffffffc01, 0x7, 0x2, 0x280000000000, 0x6, 0x3f, 0x1cf, 0x17, 0x0, 0x80000001, 0x6, 0x9, 0x9, 0x200, 0x6, 0x5, 0x2, 0x0, 0x1, 0x6]})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000))

23:15:43 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0), 0x9d, 0x0, &(0x7f0000000400)="3ef811a4856b61e328959935df150802f3f3ac7ffe80e6e1451f2fc9e59553873fc78f58f4fb200d8d73822a0a03aebeb91a53fa6e34e50905b8ef43a86c956e9140af1db935b0f41e12e07d53b203129b3e00da57177ebf813e5a46820ce9fbb65035cab23c60a4cfdd5d9e0b97c529d0e1daf43921f5777dcd50c1eb415a7aaa78a53c80b48f79151d07514f3b290dc1b7526f5f0438c3f328fe928f"})

23:15:43 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x2})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x2}) (async)

23:15:43 executing program 2:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0x2, 0x0) (async)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000000c0)={0x8, 0x2, 0x2, 0x2, 0x7, 0x0, 0x215ec1b5}) (async)
r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000000))

23:15:43 executing program 4:
clock_gettime(0x5, &(0x7f0000000040))
clock_gettime(0x0, &(0x7f0000000000)={<r0=>0x0, <r1=>0x0})
ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000140)=@overlay={0x10001, 0x1, 0x4, 0x40, 0x6, {r0, r1/1000+60000}, {0x2, 0x2, 0x7, 0x7, 0x42, 0x5, "2b05b192"}, 0xffff0000, 0x3, {}, 0xc1})
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r2, 0x0, 0x0)

[  829.063751][ T7259] binder: 7257:7259 ioctl c4089434 20000080 returned -22
23:15:43 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x700000000000000}], 0x0, 0x0, 0x0})

23:15:43 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f00000002c0)=[@decrefs], 0x9d, 0x0, &(0x7f0000000400)="3ef811a4856b61e328959935df150802f3f3ac7ffe80e6e1451f2fc9e59553873fc78f58f4fb200d8d73822a0a03aebeb91a53fa6e34e50905b8ef43a86c956e9140af1db935b0f41e12e07d53b203129b3e00da57177ebf813e5a46820ce9fbb65035cab23c60a4cfdd5d9e0b97c529d0e1daf43921f5777dcd50c1eb415a7aaa78a53c80b48f79151d07514f3b290dc1b7526f5f0438c3f328fe928f"})

23:15:43 executing program 4:
clock_gettime(0x5, &(0x7f0000000040))
clock_gettime(0x0, &(0x7f0000000000)={<r0=>0x0, <r1=>0x0})
ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000140)=@overlay={0x10001, 0x1, 0x4, 0x40, 0x6, {r0, r1/1000+60000}, {0x2, 0x2, 0x7, 0x7, 0x42, 0x5, "2b05b192"}, 0xffff0000, 0x3, {}, 0xc1})
socket$can_j1939(0x1d, 0x2, 0x7)

23:15:43 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = memfd_secret(0x0)
ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x1})

23:15:43 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f00000002c0)=[@decrefs], 0x0, 0x0, 0x0})

23:15:43 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfdfdffff00000000}], 0x0, 0x0, 0x0})

23:15:43 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x700000000000000}], 0x0, 0x0, 0x0})

[  829.143996][ T7274] binder: 7272:7274 ioctl c4089434 20000080 returned -22
23:15:43 executing program 4:
clock_gettime(0x5, &(0x7f0000000040))
clock_gettime(0x0, &(0x7f0000000000)={<r0=>0x0, <r1=>0x0})
ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000140)=@overlay={0x10001, 0x1, 0x4, 0x40, 0x6, {r0, r1/1000+60000}, {0x2, 0x2, 0x7, 0x7, 0x42, 0x5, "2b05b192"}, 0xffff0000, 0x3, {}, 0xc1})

23:15:43 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x800, 0x0)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000040)=0x100001)
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000a00)={0x73622a85, 0x100a})
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)
r2 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
r3 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x79f)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000001180))
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)=<r4=>0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000180)={<r5=>0x0, 0x4c4, 0x0, [0x81, 0x7fff, 0x9, 0x7, 0x6], [0x9, 0x8, 0x1, 0x0, 0x81, 0x4, 0x4, 0x0, 0x7, 0x3, 0x33, 0x10001, 0x7, 0x7, 0x7, 0x9, 0x7ff, 0x9, 0x3, 0x320d, 0x7, 0x3, 0x9, 0x5, 0x3, 0x0, 0x6, 0x3, 0xf6, 0x7f, 0x5b5, 0xa0a3, 0x9, 0x3, 0x401, 0xffffffffffffffff, 0xffffffff, 0x9, 0x7, 0x101, 0x0, 0xa37, 0x1, 0x1, 0x8, 0x9e4, 0x1, 0x3, 0x2080f4fd, 0x9e, 0x7, 0x1, 0x100000000, 0x7fff, 0x7f, 0x7, 0x7, 0x0, 0x200, 0x3f, 0x6, 0x7, 0x7fff, 0x4, 0x5, 0x4, 0xfffffffffffffff9, 0x4, 0x6, 0x9, 0x100000000, 0x62d, 0x4, 0x4, 0x42, 0x800000, 0x20, 0x6, 0x4ea9, 0xe0, 0x6cc1, 0x7, 0x20af, 0x7fffffff, 0x3, 0xab, 0x8, 0x1, 0x800, 0x0, 0xffffffffffffff80, 0x3f, 0x2, 0xa04, 0xffffffff, 0xebb7, 0x8000, 0x6, 0x4, 0x0, 0x8, 0x6, 0x6, 0x30c5, 0x6c24c884, 0x18, 0x9, 0x8, 0x9, 0xffffffffffffffff, 0xfff, 0xfff, 0x101, 0x81, 0x4, 0xfff, 0x1, 0x4, 0x7, 0x1, 0x732]})
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f00000005c0)={r5, 0x67fb07f7, 0x0, [0x7fff, 0x8000, 0x0, 0x7, 0x1], [0x7fffffffffffffff, 0x8, 0x6457, 0x0, 0x8000000000000000, 0x2, 0x5, 0x7, 0x80, 0x3f, 0x6, 0x1, 0x8000, 0x6, 0x2, 0x80000001, 0x0, 0x3ff, 0x1, 0x4, 0xffffffffffffffff, 0x6, 0x21497d7f, 0x2, 0x100, 0x46e, 0x8a, 0x5, 0x1, 0xdad1, 0x3ff, 0x1, 0x2, 0x100000000, 0x2, 0x8000, 0xfaad, 0x8, 0x7, 0x0, 0x1f, 0x8, 0x3b05, 0x5, 0x6, 0x6c, 0x98, 0x5, 0x100, 0x1, 0x5, 0xf56, 0x3, 0x1, 0x7ff, 0x7, 0x7, 0x8, 0x740d59ba, 0x3f, 0x6b1, 0x1200, 0x5, 0xff, 0x3, 0x3ec, 0x0, 0x7, 0x3, 0x2, 0x2, 0x20, 0x8, 0x8001, 0xf8b, 0x9fc0, 0x8, 0x93ae, 0x9, 0x6, 0xc2d9, 0x1, 0x100, 0x2, 0x8000000000000000, 0x9, 0x8001, 0x7fff, 0x40, 0x9d0000000000000, 0x8000000000000, 0x5, 0x9, 0x8, 0x2, 0xfffffffffffffff9, 0x7fffffffffffffff, 0x7, 0x7, 0x0, 0x1, 0x80, 0x3ff, 0x5, 0x0, 0x3, 0x401, 0xc2, 0x3, 0x4, 0x1, 0x5, 0x8, 0x4, 0x7, 0x30, 0xff, 0x7fff, 0x7f, 0x300, 0x8001]})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r6=>0xffffffffffffffff})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f00000011c0)={{r6}, r4, 0xc, @inherit={0x50, &(0x7f00000000c0)={0x1, 0x1, 0x5, 0x6, {0x10, 0x1, 0x17bb0315, 0x10000, 0x9}, [0x8]}}, @name="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"})

23:15:43 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = memfd_secret(0x0)
ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x1})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
memfd_secret(0x0) (async)
ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x1}) (async)

23:15:43 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xff00000000000000}], 0x0, 0x0, 0x0})

23:15:43 executing program 5:
clock_gettime(0x5, &(0x7f0000000040))
clock_gettime(0x0, &(0x7f0000000000)={<r0=>0x0, <r1=>0x0})
ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000140)=@overlay={0x10001, 0x1, 0x4, 0x40, 0x6, {r0, r1/1000+60000}, {0x2, 0x2, 0x7, 0x7, 0x42, 0x5, "2b05b192"}, 0xffff0000, 0x3, {}, 0xc1})
socket$can_j1939(0x1d, 0x2, 0x7)

23:15:43 executing program 4:
clock_gettime(0x5, &(0x7f0000000040))
clock_gettime(0x0, &(0x7f0000000000))

23:15:43 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x800, 0x0)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000040)=0x100001)
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000a00)={0x73622a85, 0x100a})
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)
r2 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
r3 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x79f)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000001180))
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)=<r4=>0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000180)={<r5=>0x0, 0x4c4, 0x0, [0x81, 0x7fff, 0x9, 0x7, 0x6], [0x9, 0x8, 0x1, 0x0, 0x81, 0x4, 0x4, 0x0, 0x7, 0x3, 0x33, 0x10001, 0x7, 0x7, 0x7, 0x9, 0x7ff, 0x9, 0x3, 0x320d, 0x7, 0x3, 0x9, 0x5, 0x3, 0x0, 0x6, 0x3, 0xf6, 0x7f, 0x5b5, 0xa0a3, 0x9, 0x3, 0x401, 0xffffffffffffffff, 0xffffffff, 0x9, 0x7, 0x101, 0x0, 0xa37, 0x1, 0x1, 0x8, 0x9e4, 0x1, 0x3, 0x2080f4fd, 0x9e, 0x7, 0x1, 0x100000000, 0x7fff, 0x7f, 0x7, 0x7, 0x0, 0x200, 0x3f, 0x6, 0x7, 0x7fff, 0x4, 0x5, 0x4, 0xfffffffffffffff9, 0x4, 0x6, 0x9, 0x100000000, 0x62d, 0x4, 0x4, 0x42, 0x800000, 0x20, 0x6, 0x4ea9, 0xe0, 0x6cc1, 0x7, 0x20af, 0x7fffffff, 0x3, 0xab, 0x8, 0x1, 0x800, 0x0, 0xffffffffffffff80, 0x3f, 0x2, 0xa04, 0xffffffff, 0xebb7, 0x8000, 0x6, 0x4, 0x0, 0x8, 0x6, 0x6, 0x30c5, 0x6c24c884, 0x18, 0x9, 0x8, 0x9, 0xffffffffffffffff, 0xfff, 0xfff, 0x101, 0x81, 0x4, 0xfff, 0x1, 0x4, 0x7, 0x1, 0x732]})
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f00000005c0)={r5, 0x67fb07f7, 0x0, [0x7fff, 0x8000, 0x0, 0x7, 0x1], [0x7fffffffffffffff, 0x8, 0x6457, 0x0, 0x8000000000000000, 0x2, 0x5, 0x7, 0x80, 0x3f, 0x6, 0x1, 0x8000, 0x6, 0x2, 0x80000001, 0x0, 0x3ff, 0x1, 0x4, 0xffffffffffffffff, 0x6, 0x21497d7f, 0x2, 0x100, 0x46e, 0x8a, 0x5, 0x1, 0xdad1, 0x3ff, 0x1, 0x2, 0x100000000, 0x2, 0x8000, 0xfaad, 0x8, 0x7, 0x0, 0x1f, 0x8, 0x3b05, 0x5, 0x6, 0x6c, 0x98, 0x5, 0x100, 0x1, 0x5, 0xf56, 0x3, 0x1, 0x7ff, 0x7, 0x7, 0x8, 0x740d59ba, 0x3f, 0x6b1, 0x1200, 0x5, 0xff, 0x3, 0x3ec, 0x0, 0x7, 0x3, 0x2, 0x2, 0x20, 0x8, 0x8001, 0xf8b, 0x9fc0, 0x8, 0x93ae, 0x9, 0x6, 0xc2d9, 0x1, 0x100, 0x2, 0x8000000000000000, 0x9, 0x8001, 0x7fff, 0x40, 0x9d0000000000000, 0x8000000000000, 0x5, 0x9, 0x8, 0x2, 0xfffffffffffffff9, 0x7fffffffffffffff, 0x7, 0x7, 0x0, 0x1, 0x80, 0x3ff, 0x5, 0x0, 0x3, 0x401, 0xc2, 0x3, 0x4, 0x1, 0x5, 0x8, 0x4, 0x7, 0x30, 0xff, 0x7fff, 0x7f, 0x300, 0x8001]})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r6=>0xffffffffffffffff})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f00000011c0)={{r6}, r4, 0xc, @inherit={0x50, &(0x7f00000000c0)={0x1, 0x1, 0x5, 0x6, {0x10, 0x1, 0x17bb0315, 0x10000, 0x9}, [0x8]}}, @name="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"})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x800, 0x0) (async)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000040)=0x100001) (async)
memfd_secret(0x0) (async)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000a00)={0x73622a85, 0x100a}) (async)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0) (async)
syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2) (async)
memfd_secret(0x0) (async)
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) (async)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x79f) (async)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000001180)) (async)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) (async)
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000180)={0x0, 0x4c4, 0x0, [0x81, 0x7fff, 0x9, 0x7, 0x6], [0x9, 0x8, 0x1, 0x0, 0x81, 0x4, 0x4, 0x0, 0x7, 0x3, 0x33, 0x10001, 0x7, 0x7, 0x7, 0x9, 0x7ff, 0x9, 0x3, 0x320d, 0x7, 0x3, 0x9, 0x5, 0x3, 0x0, 0x6, 0x3, 0xf6, 0x7f, 0x5b5, 0xa0a3, 0x9, 0x3, 0x401, 0xffffffffffffffff, 0xffffffff, 0x9, 0x7, 0x101, 0x0, 0xa37, 0x1, 0x1, 0x8, 0x9e4, 0x1, 0x3, 0x2080f4fd, 0x9e, 0x7, 0x1, 0x100000000, 0x7fff, 0x7f, 0x7, 0x7, 0x0, 0x200, 0x3f, 0x6, 0x7, 0x7fff, 0x4, 0x5, 0x4, 0xfffffffffffffff9, 0x4, 0x6, 0x9, 0x100000000, 0x62d, 0x4, 0x4, 0x42, 0x800000, 0x20, 0x6, 0x4ea9, 0xe0, 0x6cc1, 0x7, 0x20af, 0x7fffffff, 0x3, 0xab, 0x8, 0x1, 0x800, 0x0, 0xffffffffffffff80, 0x3f, 0x2, 0xa04, 0xffffffff, 0xebb7, 0x8000, 0x6, 0x4, 0x0, 0x8, 0x6, 0x6, 0x30c5, 0x6c24c884, 0x18, 0x9, 0x8, 0x9, 0xffffffffffffffff, 0xfff, 0xfff, 0x101, 0x81, 0x4, 0xfff, 0x1, 0x4, 0x7, 0x1, 0x732]}) (async)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f00000005c0)={r5, 0x67fb07f7, 0x0, [0x7fff, 0x8000, 0x0, 0x7, 0x1], [0x7fffffffffffffff, 0x8, 0x6457, 0x0, 0x8000000000000000, 0x2, 0x5, 0x7, 0x80, 0x3f, 0x6, 0x1, 0x8000, 0x6, 0x2, 0x80000001, 0x0, 0x3ff, 0x1, 0x4, 0xffffffffffffffff, 0x6, 0x21497d7f, 0x2, 0x100, 0x46e, 0x8a, 0x5, 0x1, 0xdad1, 0x3ff, 0x1, 0x2, 0x100000000, 0x2, 0x8000, 0xfaad, 0x8, 0x7, 0x0, 0x1f, 0x8, 0x3b05, 0x5, 0x6, 0x6c, 0x98, 0x5, 0x100, 0x1, 0x5, 0xf56, 0x3, 0x1, 0x7ff, 0x7, 0x7, 0x8, 0x740d59ba, 0x3f, 0x6b1, 0x1200, 0x5, 0xff, 0x3, 0x3ec, 0x0, 0x7, 0x3, 0x2, 0x2, 0x20, 0x8, 0x8001, 0xf8b, 0x9fc0, 0x8, 0x93ae, 0x9, 0x6, 0xc2d9, 0x1, 0x100, 0x2, 0x8000000000000000, 0x9, 0x8001, 0x7fff, 0x40, 0x9d0000000000000, 0x8000000000000, 0x5, 0x9, 0x8, 0x2, 0xfffffffffffffff9, 0x7fffffffffffffff, 0x7, 0x7, 0x0, 0x1, 0x80, 0x3ff, 0x5, 0x0, 0x3, 0x401, 0xc2, 0x3, 0x4, 0x1, 0x5, 0x8, 0x4, 0x7, 0x30, 0xff, 0x7fff, 0x7f, 0x300, 0x8001]}) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) (async)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f00000011c0)={{r6}, r4, 0xc, @inherit={0x50, &(0x7f00000000c0)={0x1, 0x1, 0x5, 0x6, {0x10, 0x1, 0x17bb0315, 0x10000, 0x9}, [0x8]}}, @name="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"}) (async)

23:15:43 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x7, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:43 executing program 5:
clock_gettime(0x5, &(0x7f0000000040))
clock_gettime(0x0, &(0x7f0000000000)={<r0=>0x0, <r1=>0x0})
ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000140)=@overlay={0x10001, 0x1, 0x4, 0x40, 0x6, {r0, r1/1000+60000}, {0x2, 0x2, 0x7, 0x7, 0x42, 0x5, "2b05b192"}, 0xffff0000, 0x3, {}, 0xc1})
socket$can_j1939(0x1d, 0x2, 0x7)

23:15:43 executing program 4:
clock_gettime(0x5, &(0x7f0000000040))

23:15:43 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = memfd_secret(0x0)
ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x1})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
memfd_secret(0x0) (async)
ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x1}) (async)

23:15:43 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffff7f00000000}], 0x0, 0x0, 0x0})

23:15:43 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x800, 0x0)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000040)=0x100001)
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000a00)={0x73622a85, 0x100a}) (async)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0) (async)
r2 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
r3 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) (async)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x79f) (async)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000001180)) (async)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)=<r4=>0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000180)={<r5=>0x0, 0x4c4, 0x0, [0x81, 0x7fff, 0x9, 0x7, 0x6], [0x9, 0x8, 0x1, 0x0, 0x81, 0x4, 0x4, 0x0, 0x7, 0x3, 0x33, 0x10001, 0x7, 0x7, 0x7, 0x9, 0x7ff, 0x9, 0x3, 0x320d, 0x7, 0x3, 0x9, 0x5, 0x3, 0x0, 0x6, 0x3, 0xf6, 0x7f, 0x5b5, 0xa0a3, 0x9, 0x3, 0x401, 0xffffffffffffffff, 0xffffffff, 0x9, 0x7, 0x101, 0x0, 0xa37, 0x1, 0x1, 0x8, 0x9e4, 0x1, 0x3, 0x2080f4fd, 0x9e, 0x7, 0x1, 0x100000000, 0x7fff, 0x7f, 0x7, 0x7, 0x0, 0x200, 0x3f, 0x6, 0x7, 0x7fff, 0x4, 0x5, 0x4, 0xfffffffffffffff9, 0x4, 0x6, 0x9, 0x100000000, 0x62d, 0x4, 0x4, 0x42, 0x800000, 0x20, 0x6, 0x4ea9, 0xe0, 0x6cc1, 0x7, 0x20af, 0x7fffffff, 0x3, 0xab, 0x8, 0x1, 0x800, 0x0, 0xffffffffffffff80, 0x3f, 0x2, 0xa04, 0xffffffff, 0xebb7, 0x8000, 0x6, 0x4, 0x0, 0x8, 0x6, 0x6, 0x30c5, 0x6c24c884, 0x18, 0x9, 0x8, 0x9, 0xffffffffffffffff, 0xfff, 0xfff, 0x101, 0x81, 0x4, 0xfff, 0x1, 0x4, 0x7, 0x1, 0x732]})
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f00000005c0)={r5, 0x67fb07f7, 0x0, [0x7fff, 0x8000, 0x0, 0x7, 0x1], [0x7fffffffffffffff, 0x8, 0x6457, 0x0, 0x8000000000000000, 0x2, 0x5, 0x7, 0x80, 0x3f, 0x6, 0x1, 0x8000, 0x6, 0x2, 0x80000001, 0x0, 0x3ff, 0x1, 0x4, 0xffffffffffffffff, 0x6, 0x21497d7f, 0x2, 0x100, 0x46e, 0x8a, 0x5, 0x1, 0xdad1, 0x3ff, 0x1, 0x2, 0x100000000, 0x2, 0x8000, 0xfaad, 0x8, 0x7, 0x0, 0x1f, 0x8, 0x3b05, 0x5, 0x6, 0x6c, 0x98, 0x5, 0x100, 0x1, 0x5, 0xf56, 0x3, 0x1, 0x7ff, 0x7, 0x7, 0x8, 0x740d59ba, 0x3f, 0x6b1, 0x1200, 0x5, 0xff, 0x3, 0x3ec, 0x0, 0x7, 0x3, 0x2, 0x2, 0x20, 0x8, 0x8001, 0xf8b, 0x9fc0, 0x8, 0x93ae, 0x9, 0x6, 0xc2d9, 0x1, 0x100, 0x2, 0x8000000000000000, 0x9, 0x8001, 0x7fff, 0x40, 0x9d0000000000000, 0x8000000000000, 0x5, 0x9, 0x8, 0x2, 0xfffffffffffffff9, 0x7fffffffffffffff, 0x7, 0x7, 0x0, 0x1, 0x80, 0x3ff, 0x5, 0x0, 0x3, 0x401, 0xc2, 0x3, 0x4, 0x1, 0x5, 0x8, 0x4, 0x7, 0x30, 0xff, 0x7fff, 0x7f, 0x300, 0x8001]})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r6=>0xffffffffffffffff})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f00000011c0)={{r6}, r4, 0xc, @inherit={0x50, &(0x7f00000000c0)={0x1, 0x1, 0x5, 0x6, {0x10, 0x1, 0x17bb0315, 0x10000, 0x9}, [0x8]}}, @name="70cfaa5e2e1f6b17989ccb67247ff7605afec581bee462653940c9ab12621a0c4b41c4c3180ab5d68c5563b62e6cf9282aee87dcd796371739969e2310954d59cd0f5850d528cc90593cd2bd9c50bae52dfde0cc249e8facaa27f61c7f5a6adf9d497f0cd258339c86d5b05abe6a7694807ff63da519ca1a759ccd23af79b76369d16264ed4abd18a8a349b78216f00d11391986c75caa82725b0bb7a78ad8f5508eedf5a54a450fd3049aa77e4f4114fa1e0619fb67828b01796178b88b51d158a097b6752a6206d4c05f47cd8572805eac15503b2112b287c0ee589767bb4e4c52ffedcf304ac0d4455cd10ec330c5ded8576d111f78b0eb9209a20da213640d11257cab3ff9f0b6954d3db1c82a37ebe7f65d2f9021ab8bea85e6b11455177b8dcc6182f30a5773c0b82c3725103ca5daeef0a8a558e7cee7ba15fa17e48a319f7ebc2f3069de33c82241c20cbceb0f8bdbb15241268aacbf33f8cd993c6d33e18c47a15b0e5a32f19afa9e49228c463a49ff247586b184b2a3f0023161ca795f4ca30f3f2050c70f0a46b1d94696e58195ff91a90f87fc84d252b672e93472676b15fab642efe5a5022e773584a2ecc14cbfc614e01bbde9c5f10d9f60547b39b36f81cb8d9824cb74cc0a75281409c592c0294a7e99bff8be732c7ef8be47840774e65601bfca072ebb7263373660a75768e209d1263108f00eece9d42d58a3a97cbb00275f1a8493432b730f25d979b0dcfa93ff3abb22953251a1b19af0ab1f85b1411b71f228cab0f7e390fa635b43588b15a044f77f88ef67c920a73b8be5f6b64ec0f5702f3ad0078a57de0ed9784e8c85f66ca78a918055b1be2cbbb9ea0ad0bd58be2678275878c5fa966bf9634a2c04c1489bfc9cac5db8556dcd0bfe620ada4c1207e869d15cfc5a8bb9013c2339465759e766321bdcff3213a53dd26b275e3969c4ce426ea27158173253348fb48963ec16dcc18288e11522eb6ccd1f17fab167f06e44835b8334e1d3727759884be50235f2ee2446c2d991e56c2a800ae762273c08af408a1c8c0af8600acfd190d8741bd6bfd6464b5888c44d9cfdb22719a52acbaf6f5d2dfdcf4c5ebca4e33d8c29d87cfc4bcf7c4468c5713025075d9ad3fb1a6963b8c4220f4606fb5ba6c3f4a232e0816117b331dd4d63481389d6d57489545096b3978ffe7f93f9f6162effac8779d147731bef64ef3355248d8675ac01f5c842487fe8aa14b117199af268e4a9ac5ed86ccddc7524385ae53e365b34095328d3d26df5fb48bcfba70862c21af9c1fd64e941878b2b38bd6b53a2258a2209a8f42798eb419e80ef24ac4de9e628f8c70f08dfde8cf9be9ad6ebc3e495ddb1d65fcbaa6e5c5d356cf2959eab3619945f47b5bc4dad411f168699a99cad123f39a0fd8d58be137b6bbc291a6f5eac0f5a66b37351fe72637605851380bd191d04370bcbed4549110c63129343d78fefbdbc0fbe827909ffcd3d6f71d6b1f44d4907c1f7914e2e58325a6f86f659ccba8e96e1b18269944e7ae1b2a883bfaa609cf3c54fe99284a5cb2b1d5afc067d7a623c7f88c5e7a2280fb4f73e8e19311bbdfdba8340c8dea01050b88dc030cf972719e4f919d8563337c95bb5635b0c735d55bcfcc840d06791e5fade7a53b391438f9df21430872db2b1f5c958324a339205ee401f9664a48649f04a0ecd14b389fda5e6c5a6fb898bbfe1050c0f5e4f5040d402754a855c09c6daac0c7f92795e341821173b675c9876cce1b0b21f8366bc440f4807ae7d4350ccf0028314445a159f30a0fefce5e6931b6283342dee7efdd80b8b8351a6f32b8fe9ff9799dba08c1821eed8b21731245dc3fa3446d373183f43a055ec8059558955740ba3e2728fc99a8976ba58d93c41d2ae33617bfa18b26dbb7bca9f1e4b728a1d9e956936e23e1ed7aedf20a27e53360026d22ce9c06a7d5811455eccf3f2836766952e678c7affeb063a0ec618ad5261bc4b39fbe0de060960df518fde8d5057953c8dd47509edd915a3187a1abbd05304a80328f6272df194c48024c8e0f475e0ac1b7b0621dda50fcabac814cf65f610c2dcf6d27c8d90d95813a225b14aeab5bcbc28bc0eb1789982df4247fd36e015d3ba4d30a10d1c60f76203a0d98ffcaa741ce74ffdcb9a733f6ce896f2f17a258cbc3882ae8a723f7feb0993e10448ac2cf4fe86dcb6978442ec7cdeee737fdd48703a6b36877d4b0e1e09c7c208fa14c8a51b28d58df1e1740307f2fe2503864bdc83701c22599df225140257b1305a42bce2ad8c046c2ede41a4a35ff24836bc99a042ad2c6320c0ec83b511960e8f168fe9f87eecf76111139c3c65c8345bb4de3528830b4e1a5f6d69369ea4ab2d76d9cfdc9161709eae5a324187100f01f6d8819ac4f2805ebb6f449874b7d7d17e0b3fa87fec1493bcd4351b066e0da7fc6919368961a684afda0a81a19096c6a8eaf6dacc9666e70d8fdcfeda15a6f7281912e4b9d6f1480113c43d26788993a7174aeb23b63ea38eaa14f86932c146de0722d6901c61fe17c5b6d9e001bf8fd916b9de6873316ec80aabeb99ed13a7fb7c35d38952001de04bb2578bfbf31157a6a4528d4ec2e5a7a695d6a873bb19972f615f371d94a05eb753d4e201a817caa6f122a0bd205682d8b92f65dae55d49c0b9bab91788bed5d26c338d5e89e2115c26b9649b051638f111e1790cca54638aa8293c1e41e3e26a692692d9d4d73e266effc30c82087238aaaa084dd80da971f2824a4ddc3b3dcca5a5cca4afa46b2dbbc0b89ba05f7e5eed97cf75deaafd67cba925d7fe5af289c7279e6ed5a3d563f593357568e19376f3b8d3034de1ffa3cad4e1d6f745389d6e694e32abe284fd8e1bd293ec95617c2d800d7a7c3296cf0e7218154a0224b273f4ecdf136d625a0e44b4362c2bb8e0da853fd712816ccfe8366bf84d89816b2f5d3683a3d0632439438402ec83fc2393b08d6b10c7cca4d74660a9afba47aa466e65a51d30367f7f5f2ad291d40c474e46c65d2735d30328a0ac13fd9f418c6c9a33ae86115247479671519ccaaa52b05ba70c3cd2534cc85c40e2e7133441b9d3ea732093fa7eb37db62e00b6e6ea5c674c955f1fb4c1968b211caa742e873b015c39a71bc98c1f7e86b77bbb7de270049815da6b3e0b7069ec1cbc614c0213ff2ddd04f539e7604a951d390f6d8fc62cf0d3c989820a8b799e838fc84efcac915d7f30c4bbce805b355274a69f6bdef57a5d34a2ba0697530e52f1a704a514a238e54bfa3dd6788d5e2da807d659ce7a62fa860fd67b9098a55abadc06c3617c16d59dba6b63aab5cdd2e05b195d690a72dc7acce97608f31a764aed96c160b92817ffb8de168ffafd9f4c3d655ba3b0a126ecfc3859550f7b8cd1a999c2202f4785ed004b8de19014de81c5a9ed7805874755828e881ad1e8726e7d155ca93c569a1e9379f89f55ab03c78fbac9176247a68cb8c25cddeb9b4bce5e6d3abe3f69f4ac2ac6a6e4374941722c4ce7b7a1db4197f0db8247d9960e75508de915fe6321f7ecc864c4d505f232f4525de38c0cf832677fe1109d68d7001b7ad6b65806c4ab08b0f1094e86218c0201f8a6b5de358cd935ad50cba8128eb1734510ab9929029fcf76c750eeafb26f05f23de317178f496208809d645d879b919e816ce8389e5b72cc0ec60d0e3c4d52f97b357f64b79d5e36378c8bc41818f887c7b83d1ebeffc97892da86060cac69c4416e34a4499688ec88a80f48a171efd850908fb4944e56469d0946a8b7898974485f075a0659d034c44d8961670231d94aaf892b18b9a6c8cb9fd3d4f56ba0a90c37a76761ea37503effff5abe0f3a00387c0765d6c23842bb08bd2c1fdba5bc80849c902a802dee46914a46e1b4b9b882eb4f6253ea372318b82a32d91fa33e45bc0aa0f44a3991c105b7ec0566360c31cdff2c8c2de6325fc7cb688de706d63e02ee65e45fca477c2b6b3095bb893cf902ee86505666552cd68224cd0b93e44aa8c0749540ab40dfb46cab10fe7219f26bc11c0cc930c35215bb9d6cf52b57cb7140b2c12066fe45ad499dd68a4aff8bd9b4b028736bde916ddfff6bb784d77c421571c0790661cba12c77ae11527e677a53809f866d0079e7d5b85078cabd52b38a15c46bc9e6de43640184bd4debf05f35a51572bd7ae9921f69bd80609ae3bc8b03f70130aebbe5161ec18c2c0063354ea7203f00c74a3c9f4b97236addb0d9a3f3610f1b8d5137948ed5b99ec5ecc7098a91750e0f7e5a6fcc0c8aa132be0932a4e5e27252f4012a99afee7c4c7a9b5729336d42d8e66c087f7cbf304e6e78738ce54e89c41dfa139ac7fa21c415a8f79b8faa06ae7fc66cdd5de2a241ded54485762cd8ad2ec2e5f8745af5a9e2aecab7605ea57015e5a69ea0635b56a5fe63f4848cab4160bbecbcb9e6cce1b0d136ecba7211704dcbcfd69fd882f1b46a0e418a5e20bbaa3a7f6db1defd9582156c181190f0cdb2ba50dee7b4038f617e91e3c9028fed9ede445d53e1174b2a3beb28703737d8acec51a04fd7b7c9206fc3ec4273a8f40774573782b508285220db4a03c17ac28942ec23ca2b516e6f97da973ea82c8970598540bd87fcbb6d408e3841b755b99798df4c185f2de725f3220fe361aad25d08bcd6ce3d64ebe147344b5e8baa3df2c7d52004509889832203b8136bbd81d8e5c6c68eb6c068cb75dd4a4e1d9144ccdb2632766cb7a148b239211bbd984c3fca0c4e92169b242c2d379770ae4ff16558f5be1818983a65ed4ebf0299ef6675cdd2ac04d76f8d23a42bf0216bbf0a092c2479a3bfbd0ae49f371a4c84b98e9bb8fb649129157cf3a3f05f97f0b34d922d5e4c7844c2483e43890159bdd0d0821e6660dc5acdf6fa239b9dacfac5e202597cb1527f39e2bd6bedad49d6357d86f689282b99d642a2d41fec60ad523962e674c2ef068c846a68929bc40a224664b5b99b341ca9b8e8c217791eaba9a6714511d5b987454f6ef75553a30b9e34fcfc99640a654a1d465a983781a0dc93657c7179572fd847a86c4b2c4d8e3a662309e597ad3150fbbed2c923f8143308bd77315eeaf99371426e683e5a6aabe27b616afcec1432a369513cca9729cd17a7ae9618d83349592e5fd21c79e20144f390f2a5ad946512d6bd16822c4472d6d37d4d4e6c3525dd059730113faa2fdd041cc6ec74c584d3b2db3ac7c55232395408965847346af3513829678c6f9de2107825d2a76eeda5f609fbea60fe2de6b528bd07c338b073f55e171f2a573c269eef1535981e61eab4f457a71f5b47834855cd2900ad8a8bacb115a94b8169fd73e15325a0ed9b0f9ad680a42bb4d7d500b494a14f38ac0b3779a6e17cae984784b6a365b7d0d3708a5920c68adbe44b204e9de83bc12f6a8d0a47dbab2a95e408bcb4f42f5f572b6883b74fedc751c3a80f2cb0c3fe9fbf92996a08cc259ea36143b8eee5e7b400b1d1a7aaf6af23437b5bad825c19fb57978c61202c41fc2a1f648565563c1f2aa163aa30a8241ff30cc9b1f7f5451ee935da7529edeac64abc9944db042c9df052e3e27f2fd0effcb82b4f3c592c67cc85ecfd55845e9f72036156286fe258972089d09915db61023a05373deb3fa8539245c8fd845064a2b487d5c2de33c6d417204e388ae9614552c369b9f556294589eb0fa42cd9"})

23:15:43 executing program 5:
clock_gettime(0x5, &(0x7f0000000040))
clock_gettime(0x0, &(0x7f0000000000)={<r0=>0x0, <r1=>0x0})
ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000140)=@overlay={0x10001, 0x1, 0x4, 0x40, 0x6, {r0, r1/1000+60000}, {0x2, 0x2, 0x7, 0x7, 0x42, 0x5, "2b05b192"}, 0xffff0000, 0x3, {}, 0xc1})
socket$can_j1939(0x1d, 0x2, 0x7)

23:15:43 executing program 4:
clock_gettime(0x0, &(0x7f0000000040))

23:15:43 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0})

23:15:43 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x7, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  829.303420][ T7323] binder: 7318:7323 unknown command 0
[  829.328770][ T7323] binder: 7318:7323 ioctl c0306201 20000380 returned -22
23:15:43 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x1d, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0xfa8a, 0xd8, &(0x7f0000000140)=""/216, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180))
sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20008005}, 0x20000008)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000001180))
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000240)={0x9e0000, 0x1, 0xfffffff7, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xa2093e, 0xff, '\x00', @value=0x5}})
ioctl$BINDER_WRITE_READ(r2, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:43 executing program 5:
clock_gettime(0x5, &(0x7f0000000040))
clock_gettime(0x0, &(0x7f0000000000)={<r0=>0x0, <r1=>0x0})
ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000140)=@overlay={0x10001, 0x1, 0x4, 0x40, 0x6, {r0, r1/1000+60000}, {0x2, 0x2, 0x7, 0x7, 0x42, 0x5, "2b05b192"}, 0xffff0000, 0x3, {}, 0xc1})

23:15:43 executing program 4:
clock_gettime(0x0, &(0x7f0000000040))

23:15:43 executing program 2:
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x4800, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x2})
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)
getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000000c0)={@broadcast, @local, <r2=>0x0}, &(0x7f0000000100)=0xc)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}]}, 0x48}, 0x1, 0x0, 0x0, 0xc044}, 0x4000)

23:15:43 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0})

[  829.390006][ T7350] binder: 7349:7350 unknown command 0
[  829.398799][ T7347] binder: 7346:7347 ioctl c0306201 20000380 returned -14
[  829.401721][ T7350] binder: 7349:7350 ioctl c0306201 20000380 returned -22
23:15:43 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x1d, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0xfa8a, 0xd8, &(0x7f0000000140)=""/216, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async, rerun: 64)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180)) (async, rerun: 64)
sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20008005}, 0x20000008)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r3 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000001180))
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000240)={0x9e0000, 0x1, 0xfffffff7, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xa2093e, 0xff, '\x00', @value=0x5}})
ioctl$BINDER_WRITE_READ(r2, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:43 executing program 4:
clock_gettime(0x0, &(0x7f0000000040))

23:15:43 executing program 5:
clock_gettime(0x5, &(0x7f0000000040))
clock_gettime(0x0, &(0x7f0000000000))

23:15:43 executing program 0:
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r0, 0x0, 0x0)
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0xa, 0x3})
ioctl$NS_GET_NSTYPE(r1, 0xb703, 0x0)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid_for_children\x00')
ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000080))

23:15:43 executing program 2:
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x4800, 0x0) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) (async)
ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x2}) (async)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0) (async, rerun: 64)
getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000000c0)={@broadcast, @local, <r2=>0x0}, &(0x7f0000000100)=0xc) (rerun: 64)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}]}, 0x48}, 0x1, 0x0, 0x0, 0xc044}, 0x4000)

23:15:43 executing program 5:
clock_gettime(0x5, &(0x7f0000000040))

23:15:43 executing program 4:
clock_gettime(0x5, 0x0)

23:15:44 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x1d, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0xfa8a, 0xd8, &(0x7f0000000140)=""/216, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180))
sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20008005}, 0x20000008) (async)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r3 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000001180)) (async)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000240)={0x9e0000, 0x1, 0xfffffff7, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xa2093e, 0xff, '\x00', @value=0x5}}) (async)
ioctl$BINDER_WRITE_READ(r2, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:44 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:44 executing program 4:
clock_gettime(0x5, 0x0)

23:15:44 executing program 5:
clock_gettime(0x0, &(0x7f0000000040))

23:15:44 executing program 2:
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x4800, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x2})
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)
getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000000c0)={@broadcast, @local, <r2=>0x0}, &(0x7f0000000100)=0xc)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}]}, 0x48}, 0x1, 0x0, 0x0, 0xc044}, 0x4000)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x4800, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async)
memfd_secret(0x0) (async)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) (async)
ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x2}) (async)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0) (async)
getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000000c0)={@broadcast, @local}, &(0x7f0000000100)=0xc) (async)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}]}, 0x48}, 0x1, 0x0, 0x0, 0xc044}, 0x4000) (async)

23:15:44 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0})

[  829.497159][ T7363] binder: 7358:7363 ioctl c0306201 20000380 returned -14
23:15:44 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:44 executing program 4:
clock_gettime(0x5, 0x0)

23:15:44 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000000))
ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000080))

23:15:44 executing program 5:
clock_gettime(0x0, &(0x7f0000000040))

23:15:44 executing program 2:
ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f0000000080)={0xe0c, "abf5c034c821df521b2c6f0da56580e9d5eb56b3077a6222452357adb539548f", 0x3, 0x1cb2, 0x9, 0x5, 0x2, 0x2, 0x40, 0x6669})
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)

23:15:44 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0})

[  829.576427][ T7391] binder: 7390:7391 ioctl c0306201 20000380 returned -14
23:15:44 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000000))
ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000080))
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000000)) (async)
ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000080)) (async)

23:15:44 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:44 executing program 2:
ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f0000000080)={0xe0c, "abf5c034c821df521b2c6f0da56580e9d5eb56b3077a6222452357adb539548f", 0x3, 0x1cb2, 0x9, 0x5, 0x2, 0x2, 0x40, 0x6669})
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)
ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f0000000080)={0xe0c, "abf5c034c821df521b2c6f0da56580e9d5eb56b3077a6222452357adb539548f", 0x3, 0x1cb2, 0x9, 0x5, 0x2, 0x2, 0x40, 0x6669}) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0) (async)

23:15:44 executing program 5:
clock_gettime(0x0, &(0x7f0000000040))

23:15:44 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x6, @remote, 0x3}}}, 0x30)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0x2, 0x0)

23:15:44 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0})

23:15:44 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:44 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000000)) (async)
ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000080))

[  829.659982][ T7408] binder: 7407:7408 ioctl c0306201 20000380 returned -14
23:15:44 executing program 2:
ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f0000000080)={0xe0c, "abf5c034c821df521b2c6f0da56580e9d5eb56b3077a6222452357adb539548f", 0x3, 0x1cb2, 0x9, 0x5, 0x2, 0x2, 0x40, 0x6669})
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)
ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f0000000080)={0xe0c, "abf5c034c821df521b2c6f0da56580e9d5eb56b3077a6222452357adb539548f", 0x3, 0x1cb2, 0x9, 0x5, 0x2, 0x2, 0x40, 0x6669}) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0) (async)

23:15:44 executing program 5:
clock_gettime(0x5, 0x0)

23:15:44 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x6, @remote, 0x3}}}, 0x30)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0x2, 0x0)

23:15:44 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x18ee94ee28a0259a, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:44 executing program 5:
clock_gettime(0x5, 0x0)

23:15:44 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:44 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7, 0x0, 0x0})

[  829.728828][ T7423] binder: 7422:7423 ioctl c0306201 20000380 returned -14
23:15:44 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = memfd_secret(0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000280)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x6, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x401}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x132544de}, @generic={0x4, 0x2, 0x3, 0x9, 0x2}]}, &(0x7f0000000100)='syzkaller\x00', 0x5de1, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x1b, r1, 0x8, &(0x7f0000000140)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0x3, 0x8, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r1, 0xffffffffffffffff, r1]}, 0x80)
r3 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0)
r4 = pidfd_getfd(r1, r2, 0x0)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r4, 0x40046210, &(0x7f0000000000)=0x1)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)
write$cgroup_netprio_ifpriomap(r4, &(0x7f0000000080)={'ip6gre0', 0x32, 0x34}, 0xa)

23:15:44 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x6, @remote, 0x3}}}, 0x30)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0x2, 0x0)

23:15:44 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x18ee94ee28a0259a, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:44 executing program 5:
clock_gettime(0x5, 0x0)

23:15:44 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:44 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x6, @remote, 0x3}}}, 0x30)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0)

23:15:44 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0})

[  829.801242][ T7447] binder: 7444:7447 ioctl c0306201 20000380 returned -14
23:15:44 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = memfd_secret(0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000280)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) (async)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x6, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x401}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x132544de}, @generic={0x4, 0x2, 0x3, 0x9, 0x2}]}, &(0x7f0000000100)='syzkaller\x00', 0x5de1, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x1b, r1, 0x8, &(0x7f0000000140)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0x3, 0x8, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r1, 0xffffffffffffffff, r1]}, 0x80) (async)
r3 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) (async)
r4 = pidfd_getfd(r1, r2, 0x0)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r4, 0x40046210, &(0x7f0000000000)=0x1) (async)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)
write$cgroup_netprio_ifpriomap(r4, &(0x7f0000000080)={'ip6gre0', 0x32, 0x34}, 0xa)

23:15:44 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x18ee94ee28a0259a, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:44 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:44 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0x80086601, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:44 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x6, @remote, 0x3}}}, 0x30)

23:15:44 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x1400, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000000))

23:15:44 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x500, 0x0, 0x0})

23:15:44 executing program 0:
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620b, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:44 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = memfd_secret(0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000280)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x6, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x401}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x132544de}, @generic={0x4, 0x2, 0x3, 0x9, 0x2}]}, &(0x7f0000000100)='syzkaller\x00', 0x5de1, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x1b, r1, 0x8, &(0x7f0000000140)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0x3, 0x8, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r1, 0xffffffffffffffff, r1]}, 0x80)
r3 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0)
r4 = pidfd_getfd(r1, r2, 0x0)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r4, 0x40046210, &(0x7f0000000000)=0x1)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)
write$cgroup_netprio_ifpriomap(r4, &(0x7f0000000080)={'ip6gre0', 0x32, 0x34}, 0xa)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async)
memfd_secret(0x0) (async)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000280)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x6, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x401}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x132544de}, @generic={0x4, 0x2, 0x3, 0x9, 0x2}]}, &(0x7f0000000100)='syzkaller\x00', 0x5de1, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x1b, r1, 0x8, &(0x7f0000000140)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0x3, 0x8, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r1, 0xffffffffffffffff, r1]}, 0x80) (async)
memfd_secret(0x0) (async)
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) (async)
pidfd_getfd(r1, r2, 0x0) (async)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r4, 0x40046210, &(0x7f0000000000)=0x1) (async)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0) (async)
write$cgroup_netprio_ifpriomap(r4, &(0x7f0000000080)={'ip6gre0', 0x32, 0x34}, 0xa) (async)

23:15:44 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  829.879726][ T7462] binder: 7461:7462 ioctl c0306201 20000380 returned -14
[  829.903100][ T7469] binder: 7468:7469 ioctl 80086601 20000380 returned -22
23:15:44 executing program 4:
write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x6, @remote, 0x3}}}, 0x30)

23:15:44 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x1400, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000000))

23:15:44 executing program 0:
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620b, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:44 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x1400, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000000))

23:15:44 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x600, 0x0, 0x0})

[  829.964579][ T7483] binder: 7479:7483 ioctl c0306201 20000380 returned -14
[  829.981396][ T7489] binder: 7486:7489 ioctl 401c5820 20000380 returned -22
23:15:44 executing program 4:
write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x6, @remote, 0x3}}}, 0x30)

23:15:44 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x802, 0x0)
r1 = syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000080)={0x0, @reserved})
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)

23:15:44 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:44 executing program 0:
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620b, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:44 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x802, 0x0)
r1 = syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000080)={0x0, @reserved})
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)

23:15:44 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x700, 0x0, 0x0})

23:15:44 executing program 4:
write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x6, @remote, 0x3}}}, 0x30)

[  830.015643][ T7497] binder: 7495:7497 ioctl c0306201 20000380 returned -14
[  830.053418][ T7506] binder: BINDER_SET_CONTEXT_MGR already set
23:15:44 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x0, 0x0)

23:15:44 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x802, 0x0)
r1 = syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) (async)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)

23:15:44 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:44 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  830.078513][ T7506] binder: 7502:7506 ioctl 4018620d 20000380 returned -16
[  830.089576][ T7511] binder: 7508:7511 ioctl c0306201 20000380 returned -14
23:15:44 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x6, @remote, 0x3}}}, 0x30)

23:15:44 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x0, 0x0)

23:15:44 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x800)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)

23:15:44 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:44 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xff00, 0x0, 0x0})

23:15:44 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x0, 0x0)

[  830.129782][ T7520] binder: BINDER_SET_CONTEXT_MGR already set
[  830.140848][ T7520] binder: 7518:7520 ioctl 4018620d 20000380 returned -16
23:15:44 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x800) (async)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)

23:15:44 executing program 5:
syz_clone(0x0, &(0x7f0000000000)="3f5b5cc19a1f9033461f8119fdda4fe945761ead06f9275e9f650c823289c998944a93fa771bb00a9848a5772f1d11657109fe755921035d8e216d666ddddb3c726b722e1378a2d9f19372f80ec112acd6cdb2b06aab3ec8a9d045a5796fe3b7b45895af751e1de3f30c72828567a140396248354a05ad17f59a86815713b3b27dbceabfa910a83d19eb2f14020e19d65b832ba0db536590251efd406977a73ddcf4", 0xa2, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="92dc5b3d836a7a16563f25944a2e56761b0a")

23:15:44 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x6, @remote, 0x3}}}, 0x30)

23:15:44 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:44 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:44 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x800) (async)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)

23:15:44 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1000000, 0x0, 0x0})

23:15:44 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x6, @remote, 0x3}}}, 0x30)

[  830.198233][ T7535] binder: 7532:7535 ioctl c0306201 20000380 returned -14
23:15:44 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:44 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:44 executing program 5:
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
r1 = memfd_secret(0x0)
getsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000100)={0x0, 0x9, 0x1, [0x9, 0xff, 0xc4, 0xffffffffffffffb2, 0x1], [0x9, 0x100000001, 0xffff, 0x870e, 0x0, 0x9, 0xffff, 0x7, 0x9, 0x8000000000000000, 0x3, 0xb6, 0x4, 0x6, 0x4, 0x4b7c6b56, 0x8, 0x0, 0x0, 0x1, 0x4, 0x6, 0x0, 0x80000000, 0x7ff, 0x7, 0x167, 0x2, 0x8000000000000000, 0xc4, 0x7ff, 0xff, 0x100000001, 0x0, 0xb9c, 0x6, 0x9, 0x4f, 0x2, 0xa2d, 0x9, 0xe9fd, 0x1, 0x974b, 0x9b, 0xff, 0x6, 0x1, 0x2b, 0x8, 0x1, 0xcd, 0x8, 0x5, 0x5, 0x14, 0x9, 0x7, 0x0, 0x1, 0x6, 0xfffffffffffffff9, 0x7, 0x10000, 0x6, 0x1, 0x6, 0x1, 0x7, 0x46, 0xac, 0x40, 0x401, 0x5, 0x7, 0xfffffffffffff801, 0x0, 0x9, 0x100, 0x7, 0x7ff, 0x400, 0x40, 0x1, 0x0, 0x3, 0x9, 0x7, 0x827, 0x8, 0x1000, 0x8, 0x1ff, 0x400, 0x799c00000000, 0x9, 0x21f1, 0x0, 0x7, 0x2, 0x5, 0x20, 0xf9, 0x7, 0x0, 0x4, 0x80, 0x1000, 0x55149285, 0x1, 0x7fffffff, 0xffffffffffffffff, 0x4, 0x4, 0x0, 0x0, 0x9, 0x4, 0x0, 0x1, 0x2c89]})
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000000540), 0x4)
setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080)=0x7, 0x4)
bind$can_j1939(r0, 0x0, 0x0)

23:15:44 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)

23:15:44 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2000000, 0x0, 0x0})

23:15:44 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:44 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:44 executing program 4:
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x6, @remote, 0x3}}}, 0x30)

[  830.276840][ T7554] binder: 7553:7554 ioctl c0306201 20000380 returned -14
23:15:44 executing program 5:
r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x2)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000002c0)={<r1=>0xffffffffffffffff}, 0x111, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r1}}, 0x18)
ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000040)={0x1ff, "bc30b1a6245a491f5c71360850413ba21c06cedd2a8844de5c53dca4bc8825e7"})
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
bind$can_j1939(r2, 0x0, 0x0)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x6000, 0x0)

23:15:44 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0) (async)

23:15:44 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:44 executing program 4:
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x6, @remote, 0x3}}}, 0x30)

23:15:44 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(r1, 0x0)
pidfd_open(r1, 0x0)

23:15:44 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3000000, 0x0, 0x0})

23:15:44 executing program 5:
r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x2)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000002c0)={<r1=>0xffffffffffffffff}, 0x111, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r1}}, 0x18)
ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000040)={0x1ff, "bc30b1a6245a491f5c71360850413ba21c06cedd2a8844de5c53dca4bc8825e7"})
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
bind$can_j1939(r2, 0x0, 0x0)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x6000, 0x0)

[  830.350595][ T7570] binder: 7562:7570 ioctl c0306201 20000380 returned -14
23:15:44 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:44 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0) (async)

23:15:44 executing program 4:
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x6, @remote, 0x3}}}, 0x30)

23:15:44 executing program 5:
r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x2)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000002c0)={<r1=>0xffffffffffffffff}, 0x111, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r1}}, 0x18)
ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000040)={0x1ff, "bc30b1a6245a491f5c71360850413ba21c06cedd2a8844de5c53dca4bc8825e7"})
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
bind$can_j1939(r2, 0x0, 0x0)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x6000, 0x0)

23:15:44 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4000000, 0x0, 0x0})

23:15:44 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:44 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(r1, 0x0) (async)
pidfd_open(r1, 0x0)

23:15:44 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0)

23:15:44 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0})

[  830.428926][ T7582] binder: 7579:7582 ioctl c0306201 20000380 returned -14
[  830.447747][ T7593] binder: 7590:7593 ioctl 4018620d 0 returned -22
23:15:44 executing program 5:
r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x2)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000002c0)={<r1=>0xffffffffffffffff}, 0x111, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r1}}, 0x18)
ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000040)={0x1ff, "bc30b1a6245a491f5c71360850413ba21c06cedd2a8844de5c53dca4bc8825e7"})
socket$can_j1939(0x1d, 0x2, 0x7)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x6000, 0x0)

23:15:45 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:45 executing program 2:
clock_gettime(0x5, &(0x7f0000000040)) (fail_nth: 1)

23:15:45 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0)

23:15:45 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(r1, 0x0) (async)
pidfd_open(r1, 0x0)

[  830.507101][ T7600] binder: 7599:7600 ioctl 4018620d 0 returned -22
[  830.515428][ T7606] binder: 7602:7606 ioctl c0306201 20000380 returned -14
23:15:45 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x5000000, 0x0, 0x0})

[  830.552422][ T7614] binder: 7612:7614 ioctl 4018620d 0 returned -22
[  830.555521][ T7616] FAULT_INJECTION: forcing a failure.
[  830.555521][ T7616] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  830.578414][ T7616] CPU: 1 PID: 7616 Comm: syz-executor.2 Not tainted 6.0.0-rc3-next-20220901-syzkaller #0
[  830.588268][ T7616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
[  830.598346][ T7616] Call Trace:
23:15:45 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620b, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:45 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x6000000, 0x0, 0x0})

23:15:45 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620b, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  830.601639][ T7616]  <TASK>
[  830.602838][ T7621] binder: 7620:7621 ioctl c0306201 20000380 returned -14
[  830.604564][ T7616]  dump_stack_lvl+0xcd/0x134
[  830.604597][ T7616]  should_fail.cold+0x5/0xa
[  830.604637][ T7616]  _copy_to_user+0x2a/0x140
[  830.625239][ T7616]  put_timespec64+0xb2/0x120
[  830.629860][ T7616]  ? ns_to_timespec64+0xc0/0xc0
[  830.634745][ T7616]  __x64_sys_clock_gettime+0x1b6/0x260
[  830.640246][ T7616]  ? __ia32_sys_clock_settime+0x280/0x280
[  830.646011][ T7616]  ? trace_hardirqs_on+0x2d/0x120
[  830.651071][ T7616]  do_syscall_64+0x35/0xb0
[  830.655520][ T7616]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  830.661430][ T7616] RIP: 0033:0x7fcc1da89279
[  830.665847][ T7616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  830.685644][ T7616] RSP: 002b:00007fcc1ec6b168 EFLAGS: 00000246 ORIG_RAX: 00000000000000e4
[  830.694067][ T7616] RAX: ffffffffffffffda RBX: 00007fcc1db9bf80 RCX: 00007fcc1da89279
23:15:45 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0)

23:15:45 executing program 5:
r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x2)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000002c0)={<r1=>0xffffffffffffffff}, 0x111, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r1}}, 0x18)
ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000040)={0x1ff, "bc30b1a6245a491f5c71360850413ba21c06cedd2a8844de5c53dca4bc8825e7"})
socket$can_j1939(0x1d, 0x2, 0x7)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x6000, 0x0)

[  830.702214][ T7616] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005
[  830.710187][ T7616] RBP: 00007fcc1ec6b1d0 R08: 0000000000000000 R09: 0000000000000000
[  830.718158][ T7616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  830.726130][ T7616] R13: 00007ffff83a343f R14: 00007fcc1ec6b300 R15: 0000000000022000
[  830.734121][ T7616]  </TASK>
23:15:45 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000080)={0x5b, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:45 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620b, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:45 executing program 2:
clock_gettime(0x5, &(0x7f0000000040)) (fail_nth: 2)

23:15:45 executing program 5:
r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x2)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000002c0)={<r1=>0xffffffffffffffff}, 0x111, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r1}}, 0x18)
ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000040)={0x1ff, "bc30b1a6245a491f5c71360850413ba21c06cedd2a8844de5c53dca4bc8825e7"})
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x6000, 0x0)

23:15:45 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7000000, 0x0, 0x0})

23:15:45 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) (async)
ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000080)={0x5b, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:45 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x6, @remote, 0x3}}}, 0x30)

[  830.761134][ T7630] binder: 7626:7630 ioctl c0306201 20000380 returned -14
23:15:45 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) (async)
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) (async)
ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000080)={0x5b, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:45 executing program 5:
syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x2)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000002c0)={<r0=>0xffffffffffffffff}, 0x111, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r0}}, 0x18)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x6000, 0x0)

23:15:45 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0)

23:15:45 executing program 2:
clock_gettime(0x5, &(0x7f0000000040)) (fail_nth: 3)

23:15:45 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfdfdffff, 0x0, 0x0})

23:15:45 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote, 0x3}}}, 0x30)

[  830.821281][ T7642] binder: 7638:7642 ioctl c0306201 20000380 returned -14
23:15:45 executing program 5:
syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x2)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000002c0), 0x111, 0x8}}, 0x20)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x6000, 0x0)

23:15:45 executing program 5:
syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x2)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x6000, 0x0)

23:15:45 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:45 executing program 2:
clock_gettime(0x5, &(0x7f0000000040)) (fail_nth: 4)

23:15:45 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30)

23:15:45 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0)

[  830.890351][ T7658] binder: 7657:7658 ioctl c018620b 0 returned -14
[  830.898417][ T7660] binder: 7656:7660 ioctl c0306201 20000380 returned -14
23:15:45 executing program 5:
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x6000, 0x0)

23:15:45 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:45 executing program 2:
clock_gettime(0x5, &(0x7f0000000040)) (fail_nth: 5)

23:15:45 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xff000000, 0x0, 0x0})

23:15:45 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30)

23:15:45 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  830.958991][ T7674] binder: 7673:7674 ioctl c018620b 0 returned -14
23:15:45 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0)

23:15:45 executing program 5:
openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x6000, 0x0)

23:15:45 executing program 4:
syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x2)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x6000, 0x0)

23:15:45 executing program 2:
clock_gettime(0x5, &(0x7f0000000040)) (fail_nth: 6)

23:15:45 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620b, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:45 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffdfd, 0x0, 0x0})

23:15:45 executing program 3:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:45 executing program 5:
openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x6000, 0x0)

23:15:45 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  831.003024][ T7681] binder: 7678:7681 ioctl c0306201 20000380 returned -14
[  831.030744][ T7688] binder: 7686:7688 ioctl c018620b 0 returned -14
23:15:45 executing program 2:
clock_gettime(0x5, &(0x7f0000000040)) (fail_nth: 7)

23:15:45 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xffffff7f, 0x0, 0x0})

23:15:45 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 1)

23:15:45 executing program 5:
openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x6000, 0x0)

23:15:45 executing program 3:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:45 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30) (fail_nth: 1)

[  831.096937][ T7701] binder: 7696:7701 ioctl c0306201 20000380 returned -14
23:15:45 executing program 2:
clock_gettime(0x5, &(0x7f0000000040)) (fail_nth: 8)

23:15:45 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 2)

23:15:45 executing program 2:
clock_gettime(0x5, &(0x7f0000000040)) (fail_nth: 9)

23:15:45 executing program 3:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:45 executing program 5:
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)

23:15:45 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x100000000000000, 0x0, 0x0})

[  831.155801][ T7714] binder: 7712:7714 ioctl c0306201 20000380 returned -14
[  831.165543][ T7715] ERROR: Out of memory at tomoyo_realpath_from_path.
[  831.176464][ T7716] FAULT_INJECTION: forcing a failure.
[  831.176464][ T7716] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  831.225754][ T7728] FAULT_INJECTION: forcing a failure.
[  831.225754][ T7728] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  831.229772][ T7716] CPU: 0 PID: 7716 Comm: syz-executor.4 Not tainted 6.0.0-rc3-next-20220901-syzkaller #0
[  831.248640][ T7716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
[  831.258716][ T7716] Call Trace:
[  831.262005][ T7716]  <TASK>
[  831.264946][ T7716]  dump_stack_lvl+0xcd/0x134
[  831.269562][ T7716]  should_fail.cold+0x5/0xa
[  831.274101][ T7716]  _copy_from_user+0x2a/0x170
[  831.278800][ T7716]  ucma_write+0x120/0x340
[  831.283198][ T7716]  ? apparmor_file_permission+0x264/0x4e0
[  831.288982][ T7716]  ? ucma_query_addr+0x400/0x400
[  831.293944][ T7716]  ? bpf_lsm_file_permission+0x5/0x10
[  831.299340][ T7716]  ? security_file_permission+0xab/0xd0
[  831.304930][ T7716]  vfs_write+0x2d7/0xdd0
[  831.309200][ T7716]  ? ucma_query_addr+0x400/0x400
[  831.314153][ T7716]  ? vfs_read+0x930/0x930
[  831.318520][ T7716]  ? __fget_files+0x26a/0x440
23:15:45 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x804, 0x0)

23:15:45 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 3)

[  831.323233][ T7716]  ? __fget_light+0xe5/0x270
[  831.327852][ T7716]  ksys_write+0x1e8/0x250
[  831.332224][ T7716]  ? __ia32_sys_read+0xb0/0xb0
[  831.337045][ T7716]  ? trace_hardirqs_on+0x2d/0x120
[  831.342102][ T7716]  do_syscall_64+0x35/0xb0
[  831.346553][ T7716]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  831.352466][ T7716] RIP: 0033:0x7f9efe689279
[  831.356891][ T7716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  831.376510][ T7716] RSP: 002b:00007f9eff72b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  831.384938][ T7716] RAX: ffffffffffffffda RBX: 00007f9efe79bf80 RCX: 00007f9efe689279
[  831.392935][ T7716] RDX: 0000000000000030 RSI: 0000000020000080 RDI: 0000000000000003
[  831.400927][ T7716] RBP: 00007f9eff72b1d0 R08: 0000000000000000 R09: 0000000000000000
[  831.408998][ T7716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  831.416990][ T7716] R13: 00007ffd5babe05f R14: 00007f9eff72b300 R15: 0000000000022000
[  831.425002][ T7716]  </TASK>
[  831.428031][ T7728] CPU: 1 PID: 7728 Comm: syz-executor.2 Not tainted 6.0.0-rc3-next-20220901-syzkaller #0
[  831.437870][ T7728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
[  831.447946][ T7728] Call Trace:
[  831.451225][ T7728]  <TASK>
[  831.454243][ T7728]  dump_stack_lvl+0xcd/0x134
[  831.458842][ T7728]  should_fail.cold+0x5/0xa
[  831.463367][ T7728]  _copy_to_user+0x2a/0x140
[  831.467881][ T7728]  simple_read_from_buffer+0xcc/0x160
[  831.473276][ T7728]  proc_fail_nth_read+0x187/0x220
[  831.478319][ T7728]  ? proc_fault_inject_read+0x220/0x220
[  831.483880][ T7728]  ? security_file_permission+0xab/0xd0
[  831.489444][ T7728]  vfs_read+0x257/0x930
[  831.493614][ T7728]  ? proc_fault_inject_read+0x220/0x220
[  831.499176][ T7728]  ? kernel_read+0x1c0/0x1c0
[  831.503779][ T7728]  ? __fget_files+0x26a/0x440
[  831.508561][ T7728]  ksys_read+0x127/0x250
[  831.512814][ T7728]  ? vfs_write+0xdd0/0xdd0
[  831.517242][ T7728]  ? trace_hardirqs_on+0x2d/0x120
[  831.522271][ T7728]  do_syscall_64+0x35/0xb0
[  831.526696][ T7728]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  831.532595][ T7728] RIP: 0033:0x7fcc1da3be2c
[  831.537011][ T7728] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[  831.556631][ T7728] RSP: 002b:00007fcc1ec6b160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  831.565135][ T7728] RAX: ffffffffffffffda RBX: 00007fcc1db9bf80 RCX: 00007fcc1da3be2c
23:15:46 executing program 5:
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)

23:15:46 executing program 2:
clock_gettime(0x5, &(0x7f0000000040))

[  831.573107][ T7728] RDX: 000000000000000f RSI: 00007fcc1ec6b1e0 RDI: 0000000000000003
[  831.581076][ T7728] RBP: 00007fcc1ec6b1d0 R08: 0000000000000000 R09: 0000000000000000
[  831.589048][ T7728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  831.597030][ T7728] R13: 00007ffff83a343f R14: 00007fcc1ec6b300 R15: 0000000000022000
[  831.605011][ T7728]  </TASK>
[  831.619543][ T7732] binder: 7729:7732 ioctl c0306201 20000380 returned -14
23:15:46 executing program 5:
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)

23:15:46 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30) (fail_nth: 2)

23:15:46 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x804, 0x0)

23:15:46 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x200000000000000, 0x0, 0x0})

[  831.636210][ T7735] FAULT_INJECTION: forcing a failure.
[  831.636210][ T7735] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  831.668967][ T7743] FAULT_INJECTION: forcing a failure.
[  831.668967][ T7743] name fail_usercopy, interval 1, probability 0, space 0, times 0
23:15:46 executing program 2:
clock_gettime(0xb, &(0x7f0000000040))

[  831.693331][ T7735] CPU: 0 PID: 7735 Comm: syz-executor.0 Not tainted 6.0.0-rc3-next-20220901-syzkaller #0
[  831.703201][ T7735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
[  831.713276][ T7735] Call Trace:
[  831.716563][ T7735]  <TASK>
[  831.719501][ T7735]  dump_stack_lvl+0xcd/0x134
[  831.724111][ T7735]  should_fail.cold+0x5/0xa
[  831.728641][ T7735]  _copy_from_user+0x2a/0x170
[  831.733333][ T7735]  binder_ioctl+0x1675/0x6d00
[  831.738031][ T7735]  ? tomoyo_path_number_perm+0x162/0x550
[  831.743680][ T7735]  ? tomoyo_execute_permission+0x4a0/0x4a0
[  831.749511][ T7735]  ? ksys_write+0x127/0x250
[  831.754057][ T7735]  ? __sanitizer_cov_trace_switch+0x50/0x90
[  831.759985][ T7735]  ? binder_thread_write+0x3220/0x3220
[  831.765466][ T7735]  ? do_vfs_ioctl+0x132/0x15c0
[  831.770252][ T7735]  ? vfs_fileattr_set+0xbe0/0xbe0
[  831.775297][ T7735]  ? rcu_read_lock_sched_held+0xd/0x70
[  831.780766][ T7735]  ? __ct_user_exit+0xff/0x150
[  831.785556][ T7735]  ? lock_downgrade+0x6e0/0x6e0
[  831.790423][ T7735]  ? __fget_files+0x26a/0x440
[  831.795148][ T7735]  ? bpf_lsm_file_ioctl+0x5/0x10
[  831.800100][ T7735]  ? binder_thread_write+0x3220/0x3220
[  831.805568][ T7735]  __x64_sys_ioctl+0x193/0x200
[  831.810363][ T7735]  do_syscall_64+0x35/0xb0
[  831.814789][ T7735]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  831.820690][ T7735] RIP: 0033:0x7f64c9c89279
[  831.825107][ T7735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  831.844719][ T7735] RSP: 002b:00007f64cae8a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  831.853138][ T7735] RAX: ffffffffffffffda RBX: 00007f64c9d9bf80 RCX: 00007f64c9c89279
[  831.861127][ T7735] RDX: 0000000020000380 RSI: 00000000c018620b RDI: 0000000000000003
[  831.869097][ T7735] RBP: 00007f64cae8a1d0 R08: 0000000000000000 R09: 0000000000000000
[  831.877068][ T7735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  831.885050][ T7735] R13: 00007fffec453aef R14: 00007f64cae8a300 R15: 0000000000022000
[  831.893031][ T7735]  </TASK>
[  831.903359][ T7743] CPU: 0 PID: 7743 Comm: syz-executor.4 Not tainted 6.0.0-rc3-next-20220901-syzkaller #0
[  831.913218][ T7743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
[  831.923279][ T7743] Call Trace:
[  831.926555][ T7743]  <TASK>
[  831.929483][ T7743]  dump_stack_lvl+0xcd/0x134
[  831.934081][ T7743]  should_fail.cold+0x5/0xa
[  831.938614][ T7743]  _copy_from_user+0x2a/0x170
[  831.943305][ T7743]  ucma_bind_ip+0x87/0x1b0
[  831.947729][ T7743]  ? ucma_resolve_ip+0x200/0x200
[  831.952680][ T7743]  ? ucma_resolve_ip+0x200/0x200
[  831.957621][ T7743]  ucma_write+0x1fe/0x340
[  831.961951][ T7743]  ? ucma_query_addr+0x400/0x400
[  831.966893][ T7743]  ? bpf_lsm_file_permission+0x5/0x10
[  831.972275][ T7743]  ? security_file_permission+0xab/0xd0
[  831.977834][ T7743]  vfs_write+0x2d7/0xdd0
[  831.982095][ T7743]  ? ucma_query_addr+0x400/0x400
[  831.987036][ T7743]  ? vfs_read+0x930/0x930
[  831.991379][ T7743]  ? __fget_files+0x26a/0x440
[  831.996068][ T7743]  ? __fget_light+0xe5/0x270
[  832.000669][ T7743]  ksys_write+0x1e8/0x250
[  832.005012][ T7743]  ? __ia32_sys_read+0xb0/0xb0
[  832.009788][ T7743]  ? trace_hardirqs_on+0x2d/0x120
[  832.014818][ T7743]  do_syscall_64+0x35/0xb0
[  832.019248][ T7743]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  832.025146][ T7743] RIP: 0033:0x7f9efe689279
[  832.029562][ T7743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  832.049176][ T7743] RSP: 002b:00007f9eff72b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  832.057689][ T7743] RAX: ffffffffffffffda RBX: 00007f9efe79bf80 RCX: 00007f9efe689279
[  832.065660][ T7743] RDX: 0000000000000030 RSI: 0000000020000080 RDI: 0000000000000003
[  832.073631][ T7743] RBP: 00007f9eff72b1d0 R08: 0000000000000000 R09: 0000000000000000
[  832.081603][ T7743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
23:15:46 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x300000000000000, 0x0, 0x0})

23:15:46 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x804, 0x0)

23:15:46 executing program 2:
clock_gettime(0x5, &(0x7f0000000040))
pselect6(0x40, &(0x7f00000002c0)={0x6, 0x100000001, 0xfffffffffffffeff, 0x99, 0x2, 0x8, 0xffffffffffffffff, 0x691c}, &(0x7f0000000300)={0x1f, 0x3, 0x6, 0x8, 0x2, 0x4, 0x5, 0x1}, &(0x7f0000000340)={0xa5, 0x2, 0x4, 0x10000, 0x0, 0x618b0209, 0x20, 0x6}, &(0x7f0000000380)={0x77359400}, &(0x7f0000000400)={&(0x7f00000003c0)={[0xfffffffffffffffe]}, 0x8})
pselect6(0x40, &(0x7f0000000000)={0x1f0, 0x5, 0x3, 0x1, 0x2, 0xba, 0x9, 0x4}, &(0x7f0000000080)={0x5, 0x9, 0x9, 0x7, 0x7, 0x5, 0x3, 0xffffffff}, &(0x7f00000000c0)={0x7, 0xffffffffffffff81, 0x5, 0x7, 0x5, 0x81, 0x3f, 0x9}, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000180)={&(0x7f0000000140)={[0x100000001]}, 0x8})
select(0x40, &(0x7f00000001c0)={0x2, 0x6, 0x97, 0x10000, 0xfffffffffffffc01, 0xfffffffffffffffd, 0x1}, &(0x7f0000000200)={0xfffffffffffffffd, 0xf3ad, 0x8, 0x4, 0x32, 0x100000001, 0x4, 0x3}, &(0x7f0000000240)={0x1, 0x6, 0x7fffffff, 0xc874, 0xfffffffffffffffc, 0xfffe, 0x1, 0x201}, &(0x7f0000000280))

23:15:46 executing program 5:
clock_gettime(0xb, &(0x7f0000000040))

23:15:46 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 4)

23:15:46 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30) (fail_nth: 3)

23:15:46 executing program 2:
clock_gettime(0x5, &(0x7f0000000040))
pselect6(0x40, &(0x7f00000002c0)={0x6, 0x100000001, 0xfffffffffffffeff, 0x99, 0x2, 0x8, 0xffffffffffffffff, 0x691c}, &(0x7f0000000300)={0x1f, 0x3, 0x6, 0x8, 0x2, 0x4, 0x5, 0x1}, &(0x7f0000000340)={0xa5, 0x2, 0x4, 0x10000, 0x0, 0x618b0209, 0x20, 0x6}, &(0x7f0000000380)={0x77359400}, &(0x7f0000000400)={&(0x7f00000003c0)={[0xfffffffffffffffe]}, 0x8}) (async)
pselect6(0x40, &(0x7f0000000000)={0x1f0, 0x5, 0x3, 0x1, 0x2, 0xba, 0x9, 0x4}, &(0x7f0000000080)={0x5, 0x9, 0x9, 0x7, 0x7, 0x5, 0x3, 0xffffffff}, &(0x7f00000000c0)={0x7, 0xffffffffffffff81, 0x5, 0x7, 0x5, 0x81, 0x3f, 0x9}, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000180)={&(0x7f0000000140)={[0x100000001]}, 0x8}) (async, rerun: 32)
select(0x40, &(0x7f00000001c0)={0x2, 0x6, 0x97, 0x10000, 0xfffffffffffffc01, 0xfffffffffffffffd, 0x1}, &(0x7f0000000200)={0xfffffffffffffffd, 0xf3ad, 0x8, 0x4, 0x32, 0x100000001, 0x4, 0x3}, &(0x7f0000000240)={0x1, 0x6, 0x7fffffff, 0xc874, 0xfffffffffffffffc, 0xfffe, 0x1, 0x201}, &(0x7f0000000280)) (rerun: 32)

[  832.089583][ T7743] R13: 00007ffd5babe05f R14: 00007f9eff72b300 R15: 0000000000022000
[  832.097565][ T7743]  </TASK>
[  832.108594][ T7735] binder: 7731:7735 ioctl c018620b 20000380 returned -14
[  832.131217][ T7755] binder: 7754:7755 ioctl c0306201 20000380 returned -14
23:15:46 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f0000000080))

23:15:46 executing program 5:
clock_gettime(0xb, &(0x7f0000000040))

23:15:46 executing program 2:
clock_gettime(0x5, &(0x7f0000000040))
pselect6(0x40, &(0x7f00000002c0)={0x6, 0x100000001, 0xfffffffffffffeff, 0x99, 0x2, 0x8, 0xffffffffffffffff, 0x691c}, &(0x7f0000000300)={0x1f, 0x3, 0x6, 0x8, 0x2, 0x4, 0x5, 0x1}, &(0x7f0000000340)={0xa5, 0x2, 0x4, 0x10000, 0x0, 0x618b0209, 0x20, 0x6}, &(0x7f0000000380)={0x77359400}, &(0x7f0000000400)={&(0x7f00000003c0)={[0xfffffffffffffffe]}, 0x8})
pselect6(0x40, &(0x7f0000000000)={0x1f0, 0x5, 0x3, 0x1, 0x2, 0xba, 0x9, 0x4}, &(0x7f0000000080)={0x5, 0x9, 0x9, 0x7, 0x7, 0x5, 0x3, 0xffffffff}, &(0x7f00000000c0)={0x7, 0xffffffffffffff81, 0x5, 0x7, 0x5, 0x81, 0x3f, 0x9}, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000180)={&(0x7f0000000140)={[0x100000001]}, 0x8})
select(0x40, &(0x7f00000001c0)={0x2, 0x6, 0x97, 0x10000, 0xfffffffffffffc01, 0xfffffffffffffffd, 0x1}, &(0x7f0000000200)={0xfffffffffffffffd, 0xf3ad, 0x8, 0x4, 0x32, 0x100000001, 0x4, 0x3}, &(0x7f0000000240)={0x1, 0x6, 0x7fffffff, 0xc874, 0xfffffffffffffffc, 0xfffe, 0x1, 0x201}, &(0x7f0000000280))
clock_gettime(0x5, &(0x7f0000000040)) (async)
pselect6(0x40, &(0x7f00000002c0)={0x6, 0x100000001, 0xfffffffffffffeff, 0x99, 0x2, 0x8, 0xffffffffffffffff, 0x691c}, &(0x7f0000000300)={0x1f, 0x3, 0x6, 0x8, 0x2, 0x4, 0x5, 0x1}, &(0x7f0000000340)={0xa5, 0x2, 0x4, 0x10000, 0x0, 0x618b0209, 0x20, 0x6}, &(0x7f0000000380)={0x77359400}, &(0x7f0000000400)={&(0x7f00000003c0)={[0xfffffffffffffffe]}, 0x8}) (async)
pselect6(0x40, &(0x7f0000000000)={0x1f0, 0x5, 0x3, 0x1, 0x2, 0xba, 0x9, 0x4}, &(0x7f0000000080)={0x5, 0x9, 0x9, 0x7, 0x7, 0x5, 0x3, 0xffffffff}, &(0x7f00000000c0)={0x7, 0xffffffffffffff81, 0x5, 0x7, 0x5, 0x81, 0x3f, 0x9}, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000180)={&(0x7f0000000140)={[0x100000001]}, 0x8}) (async)
select(0x40, &(0x7f00000001c0)={0x2, 0x6, 0x97, 0x10000, 0xfffffffffffffc01, 0xfffffffffffffffd, 0x1}, &(0x7f0000000200)={0xfffffffffffffffd, 0xf3ad, 0x8, 0x4, 0x32, 0x100000001, 0x4, 0x3}, &(0x7f0000000240)={0x1, 0x6, 0x7fffffff, 0xc874, 0xfffffffffffffffc, 0xfffe, 0x1, 0x201}, &(0x7f0000000280)) (async)

[  832.174366][ T7764] FAULT_INJECTION: forcing a failure.
[  832.174366][ T7764] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  832.203652][ T7771] FAULT_INJECTION: forcing a failure.
[  832.203652][ T7771] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  832.213147][ T7764] CPU: 1 PID: 7764 Comm: syz-executor.4 Not tainted 6.0.0-rc3-next-20220901-syzkaller #0
[  832.228863][ T7764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
[  832.238920][ T7764] Call Trace:
[  832.242197][ T7764]  <TASK>
[  832.245151][ T7764]  dump_stack_lvl+0xcd/0x134
[  832.249756][ T7764]  should_fail.cold+0x5/0xa
[  832.254278][ T7764]  _copy_to_user+0x2a/0x140
[  832.258790][ T7764]  simple_read_from_buffer+0xcc/0x160
[  832.264185][ T7764]  proc_fail_nth_read+0x187/0x220
[  832.269400][ T7764]  ? proc_fault_inject_read+0x220/0x220
[  832.274970][ T7764]  ? security_file_permission+0xab/0xd0
[  832.280645][ T7764]  vfs_read+0x257/0x930
[  832.284813][ T7764]  ? proc_fault_inject_read+0x220/0x220
[  832.290381][ T7764]  ? kernel_read+0x1c0/0x1c0
[  832.294984][ T7764]  ? __fget_files+0x26a/0x440
[  832.299677][ T7764]  ksys_read+0x127/0x250
[  832.303933][ T7764]  ? vfs_write+0xdd0/0xdd0
[  832.308360][ T7764]  ? trace_hardirqs_on+0x2d/0x120
[  832.313388][ T7764]  do_syscall_64+0x35/0xb0
[  832.317904][ T7764]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  832.323805][ T7764] RIP: 0033:0x7f9efe63be2c
[  832.328224][ T7764] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[  832.347840][ T7764] RSP: 002b:00007f9eff72b160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  832.356268][ T7764] RAX: ffffffffffffffda RBX: 00007f9efe79bf80 RCX: 00007f9efe63be2c
[  832.364258][ T7764] RDX: 000000000000000f RSI: 00007f9eff72b1e0 RDI: 0000000000000004
23:15:46 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x400000000000000, 0x0, 0x0})

[  832.372237][ T7764] RBP: 00007f9eff72b1d0 R08: 0000000000000000 R09: 0000000000000000
[  832.380214][ T7764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  832.388185][ T7764] R13: 00007ffd5babe05f R14: 00007f9eff72b300 R15: 0000000000022000
[  832.396168][ T7764]  </TASK>
[  832.404684][ T7771] CPU: 1 PID: 7771 Comm: syz-executor.0 Not tainted 6.0.0-rc3-next-20220901-syzkaller #0
[  832.414535][ T7771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
[  832.424593][ T7771] Call Trace:
[  832.427869][ T7771]  <TASK>
[  832.430797][ T7771]  dump_stack_lvl+0xcd/0x134
[  832.435404][ T7771]  should_fail.cold+0x5/0xa
[  832.439929][ T7771]  _copy_to_user+0x2a/0x140
[  832.444442][ T7771]  binder_ioctl+0x197a/0x6d00
[  832.449134][ T7771]  ? tomoyo_path_number_perm+0x162/0x550
[  832.454776][ T7771]  ? tomoyo_execute_permission+0x4a0/0x4a0
[  832.460590][ T7771]  ? ksys_write+0x127/0x250
[  832.465110][ T7771]  ? __sanitizer_cov_trace_switch+0x50/0x90
[  832.471023][ T7771]  ? binder_thread_write+0x3220/0x3220
[  832.476575][ T7771]  ? do_vfs_ioctl+0x132/0x15c0
[  832.481380][ T7771]  ? vfs_fileattr_set+0xbe0/0xbe0
[  832.486432][ T7771]  ? rcu_read_lock_sched_held+0xd/0x70
[  832.491897][ T7771]  ? __ct_user_exit+0xff/0x150
[  832.496679][ T7771]  ? lock_downgrade+0x6e0/0x6e0
[  832.501539][ T7771]  ? __fget_files+0x26a/0x440
[  832.506232][ T7771]  ? bpf_lsm_file_ioctl+0x5/0x10
[  832.511195][ T7771]  ? binder_thread_write+0x3220/0x3220
[  832.516664][ T7771]  __x64_sys_ioctl+0x193/0x200
[  832.521440][ T7771]  do_syscall_64+0x35/0xb0
[  832.525865][ T7771]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  832.531767][ T7771] RIP: 0033:0x7f64c9c89279
[  832.536184][ T7771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  832.555796][ T7771] RSP: 002b:00007f64cae8a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  832.564231][ T7771] RAX: ffffffffffffffda RBX: 00007f64c9d9bf80 RCX: 00007f64c9c89279
23:15:47 executing program 5:
clock_gettime(0xb, &(0x7f0000000040))

[  832.572205][ T7771] RDX: 0000000020000380 RSI: 00000000c018620b RDI: 0000000000000003
[  832.580176][ T7771] RBP: 00007f64cae8a1d0 R08: 0000000000000000 R09: 0000000000000000
[  832.588163][ T7771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  832.596135][ T7771] R13: 00007fffec453aef R14: 00007f64cae8a300 R15: 0000000000022000
[  832.604119][ T7771]  </TASK>
23:15:47 executing program 5:
clock_gettime(0x0, &(0x7f0000000040))

23:15:47 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f0000000080))

23:15:47 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30)

23:15:47 executing program 5:
clock_gettime(0x0, &(0x7f0000000040))

[  832.629439][ T7778] binder: 7776:7778 ioctl c0306201 20000380 returned -14
23:15:47 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 5)

23:15:47 executing program 2:
r0 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0)
r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', <r2=>0x0})
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x0, {0x2}}, 0x18)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r6=>0x0})
bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6, 0x0, {0x2}}, 0x18)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x10c, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}]}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x1}, 0x800)

23:15:47 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x500000000000000, 0x0, 0x0})

23:15:47 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x16, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30)

23:15:47 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f0000000080))

23:15:47 executing program 5:
clock_gettime(0x0, &(0x7f0000000040))

23:15:47 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa02, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30)

23:15:47 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0)
r1 = memfd_secret(0x0)
r2 = memfd_secret(0x0)
mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x5)
ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x7fffffff)

23:15:47 executing program 2:
r0 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) (async)
r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', <r2=>0x0}) (async)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x0, {0x2}}, 0x18)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r6=>0x0})
bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6, 0x0, {0x2}}, 0x18) (async)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x10c, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}]}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x1}, 0x800)

23:15:47 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x600000000000000, 0x0, 0x0})

[  832.696602][ T7771] binder: 7769:7771 ioctl c018620b 20000380 returned -14
[  832.721454][ T7795] binder: 7794:7795 ioctl c0306201 20000380 returned -14
23:15:47 executing program 5:
clock_gettime(0xb, 0x0)

23:15:47 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa07, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30)

[  832.768340][ T7805] FAULT_INJECTION: forcing a failure.
[  832.768340][ T7805] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  832.776256][ T7807] binder: 7806:7807 ioctl c0306201 20000380 returned -14
[  832.803455][ T7805] CPU: 1 PID: 7805 Comm: syz-executor.0 Not tainted 6.0.0-rc3-next-20220901-syzkaller #0
[  832.813321][ T7805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
[  832.823399][ T7805] Call Trace:
[  832.826697][ T7805]  <TASK>
[  832.829645][ T7805]  dump_stack_lvl+0xcd/0x134
[  832.834265][ T7805]  should_fail.cold+0x5/0xa
[  832.838820][ T7805]  _copy_to_user+0x2a/0x140
[  832.843363][ T7805]  simple_read_from_buffer+0xcc/0x160
[  832.848784][ T7805]  proc_fail_nth_read+0x187/0x220
[  832.853860][ T7805]  ? proc_fault_inject_read+0x220/0x220
[  832.859457][ T7805]  ? security_file_permission+0xab/0xd0
[  832.865055][ T7805]  vfs_read+0x257/0x930
[  832.869213][ T7805]  ? proc_fault_inject_read+0x220/0x220
[  832.874759][ T7805]  ? kernel_read+0x1c0/0x1c0
[  832.879356][ T7805]  ? __fget_files+0x26a/0x440
[  832.884033][ T7805]  ksys_read+0x127/0x250
[  832.888293][ T7805]  ? vfs_write+0xdd0/0xdd0
[  832.892703][ T7805]  ? trace_hardirqs_on+0x2d/0x120
[  832.897716][ T7805]  do_syscall_64+0x35/0xb0
[  832.902132][ T7805]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  832.908023][ T7805] RIP: 0033:0x7f64c9c3be2c
[  832.912427][ T7805] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[  832.932042][ T7805] RSP: 002b:00007f64cae8a160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  832.940451][ T7805] RAX: ffffffffffffffda RBX: 00007f64c9d9bf80 RCX: 00007f64c9c3be2c
[  832.948425][ T7805] RDX: 000000000000000f RSI: 00007f64cae8a1e0 RDI: 0000000000000004
[  832.956402][ T7805] RBP: 00007f64cae8a1d0 R08: 0000000000000000 R09: 0000000000000000
23:15:47 executing program 5:
clock_gettime(0xb, 0x0)

23:15:47 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x2, {0xa, 0x0, 0x0, @remote}}}, 0x30)

23:15:47 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x700000000000000, 0x0, 0x0})

23:15:47 executing program 2:
r0 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) (async)
r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', <r2=>0x0})
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x0, {0x2}}, 0x18) (async)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r6=>0x0})
bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6, 0x0, {0x2}}, 0x18) (async)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x10c, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}]}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x1}, 0x800)

23:15:47 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0)
r1 = memfd_secret(0x0)
r2 = memfd_secret(0x0)
mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x5)
ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x7fffffff)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) (async)
memfd_secret(0x0) (async)
memfd_secret(0x0) (async)
mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x5) (async)
ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x7fffffff) (async)

23:15:47 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:47 executing program 2:
clock_gettime(0x7, &(0x7f0000000040))

23:15:47 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfdfdffff00000000, 0x0, 0x0})

23:15:47 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0x2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:47 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0)
r1 = memfd_secret(0x0) (async)
r2 = memfd_secret(0x0)
mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x5) (async)
ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x7fffffff)

23:15:47 executing program 5:
clock_gettime(0xb, 0x0)

[  832.964365][ T7805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  832.972324][ T7805] R13: 00007fffec453aef R14: 00007f64cae8a300 R15: 0000000000022000
[  832.980297][ T7805]  </TASK>
[  833.005869][ T7831] binder: 7821:7831 ioctl c0306201 20000380 returned -14
23:15:47 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x7, {0xa, 0x0, 0x0, @remote}}}, 0x30)

23:15:47 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0x10, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:47 executing program 2:
clock_gettime(0x7, &(0x7f0000000040))

23:15:47 executing program 5:
clock_gettime(0x7, &(0x7f0000000040))

23:15:47 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_procfs$userns(r2, 0x0)
ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000080)={r2, 0x1, 0x13a5})
syz_open_procfs$userns(r1, 0x0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(r4, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000180)=0x5)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01032dbd7000fedbdf253100000008000300", @ANYRESOCT=r4, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="ef41dfdd3e00167d23b104590b924fe4db078679890bba97", @ANYRES32=r3, @ANYBLOB="080001002900000008005200", @ANYRES32=r4, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYRES16=r4], 0x4c}, 0x1, 0x0, 0x0, 0x890}, 0x1)
r5 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x49c4c3)
ioctl$NBD_SET_SIZE(r5, 0xab02, 0x3)

[  833.077157][ T7849] binder: 7847:7849 ioctl c0306201 20000380 returned -14
23:15:47 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x700, {0xa, 0x0, 0x0, @remote}}}, 0x30)

23:15:47 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xff00000000000000, 0x0, 0x0})

23:15:47 executing program 2:
clock_gettime(0x7, &(0x7f0000000040))
clock_gettime(0x7, &(0x7f0000000040)) (async)

23:15:47 executing program 5:
clock_gettime(0x7, &(0x7f0000000040))

23:15:47 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0x541b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  833.126933][ T7856] binder: 7855:7856 ioctl 10 20000380 returned -22
[  833.167076][ T7867] binder: 7861:7867 ioctl c0306201 20000380 returned -14
23:15:47 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x2000000, {0xa, 0x0, 0x0, @remote}}}, 0x30)

23:15:47 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000ff0000000c00060000000000000000000a00010002000000"], 0x28}}, 0x0)
r2 = syz_clone(0x8c021800, &(0x7f0000000080)="f1cccfaafc4a21f3eb19279d6a93a0a2a5d99fe6813ef00908f6cd5a36390250df6e62670df552ed7ba4e262b4837a304d9e6802e82bd36aba8ef65d1e7c", 0x3e, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="8b7142338c245698ba2397ba07116db9a3db306d191f2deeca20e06d4cf1e24a98b18fc571630c1ed7da5a0de6af8b816678f9829ba2762ad57ddbbcc931972e5ba5d324986922f1560bb57d6adb222e20b18cae85cf76d79ef650472a1926a7b27b02bfddad4d589cf6bc6f51348b7361845007ff8583f058d522d2b08738d24f6ab6b45b533f04a9c206c4f54b5dd179b2083e25fee0be79e284ea97c89ac062c50da013a9413fc1849ade6c4174d8ea36d1fbbf4510225d9058e82a2e7fb63a01a530ffc6283a980fc699768580044bd67250aec543ccb6b6494effbea4732e895f")
r3 = syz_clone(0x201080, &(0x7f0000000240)="a3c9614c615436bacc9a6734826786c7977bad7930998da1f3a3c3113aa828e961a401b9a864a89a2464c3f97194c8088389062ea3817ebb4342695524ae550ef1afedde603b7d081ca7280f316d63e77c8076", 0x53, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="3a153c513320f0")
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, r1, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_PID={0x8, 0x1c, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r3}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000804}, 0x4000)
clock_gettime(0x4, &(0x7f0000000040))

23:15:47 executing program 5:
clock_gettime(0x7, &(0x7f0000000040))

23:15:47 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xffffff7f00000000, 0x0, 0x0})

23:15:47 executing program 5:
clock_gettime(0x0, &(0x7f0000000040))

23:15:47 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_procfs$userns(r2, 0x0) (async)
ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000080)={r2, 0x1, 0x13a5})
syz_open_procfs$userns(r1, 0x0) (async)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(r4, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000180)=0x5) (async)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01032dbd7000fedbdf253100000008000300", @ANYRESOCT=r4, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="ef41dfdd3e00167d23b104590b924fe4db078679890bba97", @ANYRES32=r3, @ANYBLOB="080001002900000008005200", @ANYRES32=r4, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYRES16=r4], 0x4c}, 0x1, 0x0, 0x0, 0x890}, 0x1)
r5 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x49c4c3)
ioctl$NBD_SET_SIZE(r5, 0xab02, 0x3)

23:15:47 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x7000000, {0xa, 0x0, 0x0, @remote}}}, 0x30)

23:15:47 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  833.176024][ T7859] binder: 7858:7859 ioctl 400c620e 20000080 returned -22
[  833.209431][ T7871] binder: 7870:7871 ioctl 541b 20000380 returned -22
23:15:47 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x200000000000000, {0xa, 0x0, 0x0, @remote}}}, 0x30)

23:15:47 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x2, 0x0})

23:15:47 executing program 5:
clock_gettime(0x0, &(0x7f0000000040))

23:15:47 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0x5450, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  833.253319][ T7884] binder: 7877:7884 ioctl c0306201 20000380 returned -14
[  833.259794][ T7880] binder: 7878:7880 ioctl 400c620e 20000080 returned -22
23:15:47 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x700000000000000, {0xa, 0x0, 0x0, @remote}}}, 0x30)

23:15:47 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000ff0000000c00060000000000000000000a00010002000000"], 0x28}}, 0x0)
r2 = syz_clone(0x8c021800, &(0x7f0000000080)="f1cccfaafc4a21f3eb19279d6a93a0a2a5d99fe6813ef00908f6cd5a36390250df6e62670df552ed7ba4e262b4837a304d9e6802e82bd36aba8ef65d1e7c", 0x3e, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="8b7142338c245698ba2397ba07116db9a3db306d191f2deeca20e06d4cf1e24a98b18fc571630c1ed7da5a0de6af8b816678f9829ba2762ad57ddbbcc931972e5ba5d324986922f1560bb57d6adb222e20b18cae85cf76d79ef650472a1926a7b27b02bfddad4d589cf6bc6f51348b7361845007ff8583f058d522d2b08738d24f6ab6b45b533f04a9c206c4f54b5dd179b2083e25fee0be79e284ea97c89ac062c50da013a9413fc1849ade6c4174d8ea36d1fbbf4510225d9058e82a2e7fb63a01a530ffc6283a980fc699768580044bd67250aec543ccb6b6494effbea4732e895f")
r3 = syz_clone(0x201080, &(0x7f0000000240)="a3c9614c615436bacc9a6734826786c7977bad7930998da1f3a3c3113aa828e961a401b9a864a89a2464c3f97194c8088389062ea3817ebb4342695524ae550ef1afedde603b7d081ca7280f316d63e77c8076", 0x53, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="3a153c513320f0")
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, r1, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_PID={0x8, 0x1c, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r3}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000804}, 0x4000)
clock_gettime(0x4, &(0x7f0000000040))
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async)
sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000ff0000000c00060000000000000000000a00010002000000"], 0x28}}, 0x0) (async)
syz_clone(0x8c021800, &(0x7f0000000080)="f1cccfaafc4a21f3eb19279d6a93a0a2a5d99fe6813ef00908f6cd5a36390250df6e62670df552ed7ba4e262b4837a304d9e6802e82bd36aba8ef65d1e7c", 0x3e, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="8b7142338c245698ba2397ba07116db9a3db306d191f2deeca20e06d4cf1e24a98b18fc571630c1ed7da5a0de6af8b816678f9829ba2762ad57ddbbcc931972e5ba5d324986922f1560bb57d6adb222e20b18cae85cf76d79ef650472a1926a7b27b02bfddad4d589cf6bc6f51348b7361845007ff8583f058d522d2b08738d24f6ab6b45b533f04a9c206c4f54b5dd179b2083e25fee0be79e284ea97c89ac062c50da013a9413fc1849ade6c4174d8ea36d1fbbf4510225d9058e82a2e7fb63a01a530ffc6283a980fc699768580044bd67250aec543ccb6b6494effbea4732e895f") (async)
syz_clone(0x201080, &(0x7f0000000240)="a3c9614c615436bacc9a6734826786c7977bad7930998da1f3a3c3113aa828e961a401b9a864a89a2464c3f97194c8088389062ea3817ebb4342695524ae550ef1afedde603b7d081ca7280f316d63e77c8076", 0x53, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="3a153c513320f0") (async)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, r1, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_PID={0x8, 0x1c, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r3}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000804}, 0x4000) (async)
clock_gettime(0x4, &(0x7f0000000040)) (async)

23:15:47 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x3, 0x0})

23:15:47 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0x2, 0x0, 0x0, @remote}}}, 0x30)

23:15:47 executing program 5:
clock_gettime(0x0, &(0x7f0000000040))

23:15:47 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32)
r3 = syz_open_procfs$userns(r2, 0x0)
ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000080)={r2, 0x1, 0x13a5}) (async)
syz_open_procfs$userns(r1, 0x0) (async)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(r4, 0x0) (async)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000180)=0x5)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01032dbd7000fedbdf253100000008000300", @ANYRESOCT=r4, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="ef41dfdd3e00167d23b104590b924fe4db078679890bba97", @ANYRES32=r3, @ANYBLOB="080001002900000008005200", @ANYRES32=r4, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYRES16=r4], 0x4c}, 0x1, 0x0, 0x0, 0x890}, 0x1)
r5 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x49c4c3)
ioctl$NBD_SET_SIZE(r5, 0xab02, 0x3)

23:15:47 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0x5451, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:47 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000ff0000000c00060000000000000000000a00010002000000"], 0x28}}, 0x0)
r2 = syz_clone(0x8c021800, &(0x7f0000000080)="f1cccfaafc4a21f3eb19279d6a93a0a2a5d99fe6813ef00908f6cd5a36390250df6e62670df552ed7ba4e262b4837a304d9e6802e82bd36aba8ef65d1e7c", 0x3e, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="8b7142338c245698ba2397ba07116db9a3db306d191f2deeca20e06d4cf1e24a98b18fc571630c1ed7da5a0de6af8b816678f9829ba2762ad57ddbbcc931972e5ba5d324986922f1560bb57d6adb222e20b18cae85cf76d79ef650472a1926a7b27b02bfddad4d589cf6bc6f51348b7361845007ff8583f058d522d2b08738d24f6ab6b45b533f04a9c206c4f54b5dd179b2083e25fee0be79e284ea97c89ac062c50da013a9413fc1849ade6c4174d8ea36d1fbbf4510225d9058e82a2e7fb63a01a530ffc6283a980fc699768580044bd67250aec543ccb6b6494effbea4732e895f") (async)
r3 = syz_clone(0x201080, &(0x7f0000000240)="a3c9614c615436bacc9a6734826786c7977bad7930998da1f3a3c3113aa828e961a401b9a864a89a2464c3f97194c8088389062ea3817ebb4342695524ae550ef1afedde603b7d081ca7280f316d63e77c8076", 0x53, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="3a153c513320f0")
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, r1, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_PID={0x8, 0x1c, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r3}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000804}, 0x4000)
clock_gettime(0x4, &(0x7f0000000040))

23:15:47 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x4, 0x0})

23:15:47 executing program 5:
clock_gettime(0x7, 0x0)

23:15:47 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30)

23:15:47 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0x5452, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:47 executing program 2:
getuid()
clock_gettime(0x5, &(0x7f0000000040))

23:15:47 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x5, 0x0})

23:15:47 executing program 5:
clock_gettime(0x7, 0x0)

23:15:47 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x2, 0x0, @remote}}}, 0x30)

23:15:47 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x6, 0x0})

23:15:47 executing program 3:
r0 = socket(0x11, 0x3, 0x8000)
sendmsg$can_j1939(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, 0x0, 0x3, {0x2, 0xf1, 0x4}}, 0x18, &(0x7f0000000180)={&(0x7f0000000080)="cfb8076ffac42bb0367f4468512a55f8986e81fe5e15b0e95c387a7df7db5f53ec3e96c6ab2ef8a291b88e0b73268f130341a3b215f461d380774521db344245cfe09e00582ae42ec57971c969decf90504750b21f325bfd4156ad4d1c5bbe27f0f5ec5e55482a9a29cf923d3e0da0b1985c9c4b09a482628d399456672e90888c00954f439c0f9f0ee07bd4bb0a774a91ebae49a95b1e7870303f032b59b5a166f676f072304457b9a33eb2891cb1a0c54c11ed85c15ffdbeaaa2eb9ef618c13bd9244699dd945d9521ecfaf807de0a4e43a2ce174ff54b2ee5fddbfed2eb5b9e73155e131dd7d225308285086e37aea975477db49199baaa7203", 0xfb}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:47 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0x5460, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:47 executing program 2:
getuid()
clock_gettime(0x5, &(0x7f0000000040))

23:15:47 executing program 5:
clock_gettime(0x7, 0x0)

23:15:48 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7, 0x0})

23:15:48 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x7, 0x0, @remote}}}, 0x30)

23:15:48 executing program 2:
getuid()
clock_gettime(0x5, &(0x7f0000000040))
getuid() (async)
clock_gettime(0x5, &(0x7f0000000040)) (async)

23:15:48 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0x8933, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:48 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000ff0000000c00060000000000000000000a00010002000000"], 0x28}}, 0x0)
r2 = syz_clone(0x8c021800, &(0x7f0000000080)="f1cccfaafc4a21f3eb19279d6a93a0a2a5d99fe6813ef00908f6cd5a36390250df6e62670df552ed7ba4e262b4837a304d9e6802e82bd36aba8ef65d1e7c", 0x3e, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="8b7142338c245698ba2397ba07116db9a3db306d191f2deeca20e06d4cf1e24a98b18fc571630c1ed7da5a0de6af8b816678f9829ba2762ad57ddbbcc931972e5ba5d324986922f1560bb57d6adb222e20b18cae85cf76d79ef650472a1926a7b27b02bfddad4d589cf6bc6f51348b7361845007ff8583f058d522d2b08738d24f6ab6b45b533f04a9c206c4f54b5dd179b2083e25fee0be79e284ea97c89ac062c50da013a9413fc1849ade6c4174d8ea36d1fbbf4510225d9058e82a2e7fb63a01a530ffc6283a980fc699768580044bd67250aec543ccb6b6494effbea4732e895f")
r3 = syz_clone(0x201080, &(0x7f0000000240)="a3c9614c615436bacc9a6734826786c7977bad7930998da1f3a3c3113aa828e961a401b9a864a89a2464c3f97194c8088389062ea3817ebb4342695524ae550ef1afedde603b7d081ca7280f316d63e77c8076", 0x53, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="3a153c513320f0")
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, r1, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_PID={0x8, 0x1c, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r3}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000804}, 0x4000)
clock_gettime(0x4, &(0x7f0000000040))

23:15:48 executing program 3:
r0 = socket(0x11, 0x3, 0x8000)
sendmsg$can_j1939(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, 0x0, 0x3, {0x2, 0xf1, 0x4}}, 0x18, &(0x7f0000000180)={&(0x7f0000000080)="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", 0xfb}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
socket(0x11, 0x3, 0x8000) (async)
sendmsg$can_j1939(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, 0x0, 0x3, {0x2, 0xf1, 0x4}}, 0x18, &(0x7f0000000180)={&(0x7f0000000080)="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", 0xfb}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)

23:15:48 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x300, 0x0})

23:15:48 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x700, 0x0, @remote}}}, 0x30)

23:15:48 executing program 2:
clock_gettime(0x5, &(0x7f0000000040))
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r1 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180))
ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000080)={0x7, @output={0x0, 0x1, {0x800}, 0xa, 0x2}})

23:15:48 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0x400448c9, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:48 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x500, 0x0})

[  833.571017][ T7967] binder: 7962:7967 ioctl 8933 20000380 returned -22
23:15:48 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30)

23:15:48 executing program 2:
clock_gettime(0x5, &(0x7f0000000040))
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r1 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180))
ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000080)={0x7, @output={0x0, 0x1, {0x800}, 0xa, 0x2}})
clock_gettime(0x5, &(0x7f0000000040)) (async)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) (async)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2) (async)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180)) (async)
ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000080)={0x7, @output={0x0, 0x1, {0x800}, 0xa, 0x2}}) (async)

23:15:48 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000ff0000000c00060000000000000000000a00010002000000"], 0x28}}, 0x0)
r2 = syz_clone(0x8c021800, &(0x7f0000000080)="f1cccfaafc4a21f3eb19279d6a93a0a2a5d99fe6813ef00908f6cd5a36390250df6e62670df552ed7ba4e262b4837a304d9e6802e82bd36aba8ef65d1e7c", 0x3e, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="8b7142338c245698ba2397ba07116db9a3db306d191f2deeca20e06d4cf1e24a98b18fc571630c1ed7da5a0de6af8b816678f9829ba2762ad57ddbbcc931972e5ba5d324986922f1560bb57d6adb222e20b18cae85cf76d79ef650472a1926a7b27b02bfddad4d589cf6bc6f51348b7361845007ff8583f058d522d2b08738d24f6ab6b45b533f04a9c206c4f54b5dd179b2083e25fee0be79e284ea97c89ac062c50da013a9413fc1849ade6c4174d8ea36d1fbbf4510225d9058e82a2e7fb63a01a530ffc6283a980fc699768580044bd67250aec543ccb6b6494effbea4732e895f")
r3 = syz_clone(0x201080, &(0x7f0000000240)="a3c9614c615436bacc9a6734826786c7977bad7930998da1f3a3c3113aa828e961a401b9a864a89a2464c3f97194c8088389062ea3817ebb4342695524ae550ef1afedde603b7d081ca7280f316d63e77c8076", 0x53, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="3a153c513320f0")
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, r1, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_PID={0x8, 0x1c, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r3}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000804}, 0x4000)
clock_gettime(0x4, &(0x7f0000000040))

23:15:48 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0x400448dd, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:48 executing program 3:
r0 = socket(0x11, 0x3, 0x8000)
sendmsg$can_j1939(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, 0x0, 0x3, {0x2, 0xf1, 0x4}}, 0x18, &(0x7f0000000180)={&(0x7f0000000080)="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", 0xfb}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) (async, rerun: 64)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 64)
ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:48 executing program 2:
clock_gettime(0x5, &(0x7f0000000040))
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
r1 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180)) (async)
ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000080)={0x7, @output={0x0, 0x1, {0x800}, 0xa, 0x2}})

23:15:48 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x2, @remote}}}, 0x30)

[  833.647349][ T7985] binder: 7983:7985 ioctl 400448c9 20000380 returned -22
23:15:48 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x600, 0x0})

23:15:48 executing program 2:
clock_gettime(0x5, &(0x7f0000000040))
pselect6(0x40, &(0x7f0000000000)={0x3ff, 0x8, 0x5, 0x5, 0x10001, 0x800, 0x5, 0x1f}, &(0x7f0000000080)={0x8000, 0x81, 0xfff, 0xfffffffffffff137, 0x4, 0x100000000, 0x9, 0x7}, &(0x7f00000000c0)={0x7f, 0x10000, 0x6, 0x6, 0x2, 0x40, 0xddec, 0x6000000000000}, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3]}, 0x8})
clock_gettime(0x0, &(0x7f0000000280)={<r0=>0x0, <r1=>0x0})
clock_getres(0x3, &(0x7f0000000540))
pselect6(0x40, &(0x7f00000003c0)={0xee9e, 0x9, 0x3, 0x2, 0x5, 0x8, 0x7ff, 0x8}, &(0x7f0000000400)={0x33e, 0x100000001, 0x8, 0x100000000, 0xbe2f, 0x1000, 0x7ff, 0x6}, &(0x7f0000000440)={0xb6, 0x3, 0x0, 0xfffffffffffffeff, 0x5, 0x7, 0x7, 0x7fff}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x8]}, 0x8})
clock_gettime(0x5, &(0x7f0000000380))
pselect6(0x40, &(0x7f00000001c0)={0x80000001, 0xf4cb, 0x0, 0xc14d, 0x6, 0x8, 0x401, 0x1ff}, &(0x7f0000000200)={0x9, 0x7f, 0x6, 0x7fffffffffffffff, 0x8001, 0x4, 0x1fa70721, 0xea}, &(0x7f0000000240)={0x4b06, 0x7fffffffffffffff, 0x7, 0x7, 0x0, 0x7, 0x400, 0xffffffffffff0000}, &(0x7f00000002c0)={r0, r1+10000000}, &(0x7f0000000340)={&(0x7f0000000300)={[0x3]}, 0x8})

23:15:48 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7, @remote}}}, 0x30)

23:15:48 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x700, 0x0})

23:15:48 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0x400454ca, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:48 executing program 2:
clock_gettime(0x5, &(0x7f0000000040))
pselect6(0x40, &(0x7f0000000000)={0x3ff, 0x8, 0x5, 0x5, 0x10001, 0x800, 0x5, 0x1f}, &(0x7f0000000080)={0x8000, 0x81, 0xfff, 0xfffffffffffff137, 0x4, 0x100000000, 0x9, 0x7}, &(0x7f00000000c0)={0x7f, 0x10000, 0x6, 0x6, 0x2, 0x40, 0xddec, 0x6000000000000}, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3]}, 0x8})
clock_gettime(0x0, &(0x7f0000000280)={<r0=>0x0, <r1=>0x0})
clock_getres(0x3, &(0x7f0000000540))
pselect6(0x40, &(0x7f00000003c0)={0xee9e, 0x9, 0x3, 0x2, 0x5, 0x8, 0x7ff, 0x8}, &(0x7f0000000400)={0x33e, 0x100000001, 0x8, 0x100000000, 0xbe2f, 0x1000, 0x7ff, 0x6}, &(0x7f0000000440)={0xb6, 0x3, 0x0, 0xfffffffffffffeff, 0x5, 0x7, 0x7, 0x7fff}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x8]}, 0x8})
clock_gettime(0x5, &(0x7f0000000380))
pselect6(0x40, &(0x7f00000001c0)={0x80000001, 0xf4cb, 0x0, 0xc14d, 0x6, 0x8, 0x401, 0x1ff}, &(0x7f0000000200)={0x9, 0x7f, 0x6, 0x7fffffffffffffff, 0x8001, 0x4, 0x1fa70721, 0xea}, &(0x7f0000000240)={0x4b06, 0x7fffffffffffffff, 0x7, 0x7, 0x0, 0x7, 0x400, 0xffffffffffff0000}, &(0x7f00000002c0)={r0, r1+10000000}, &(0x7f0000000340)={&(0x7f0000000300)={[0x3]}, 0x8})
clock_gettime(0x5, &(0x7f0000000040)) (async)
pselect6(0x40, &(0x7f0000000000)={0x3ff, 0x8, 0x5, 0x5, 0x10001, 0x800, 0x5, 0x1f}, &(0x7f0000000080)={0x8000, 0x81, 0xfff, 0xfffffffffffff137, 0x4, 0x100000000, 0x9, 0x7}, &(0x7f00000000c0)={0x7f, 0x10000, 0x6, 0x6, 0x2, 0x40, 0xddec, 0x6000000000000}, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3]}, 0x8}) (async)
clock_gettime(0x0, &(0x7f0000000280)) (async)
clock_getres(0x3, &(0x7f0000000540)) (async)
pselect6(0x40, &(0x7f00000003c0)={0xee9e, 0x9, 0x3, 0x2, 0x5, 0x8, 0x7ff, 0x8}, &(0x7f0000000400)={0x33e, 0x100000001, 0x8, 0x100000000, 0xbe2f, 0x1000, 0x7ff, 0x6}, &(0x7f0000000440)={0xb6, 0x3, 0x0, 0xfffffffffffffeff, 0x5, 0x7, 0x7, 0x7fff}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x8]}, 0x8}) (async)
clock_gettime(0x5, &(0x7f0000000380)) (async)
pselect6(0x40, &(0x7f00000001c0)={0x80000001, 0xf4cb, 0x0, 0xc14d, 0x6, 0x8, 0x401, 0x1ff}, &(0x7f0000000200)={0x9, 0x7f, 0x6, 0x7fffffffffffffff, 0x8001, 0x4, 0x1fa70721, 0xea}, &(0x7f0000000240)={0x4b06, 0x7fffffffffffffff, 0x7, 0x7, 0x0, 0x7, 0x400, 0xffffffffffff0000}, &(0x7f00000002c0)={r0, r1+10000000}, &(0x7f0000000340)={&(0x7f0000000300)={[0x3]}, 0x8}) (async)

23:15:48 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000003c0)={{r0}, 0x0, 0x1c, @inherit={0x58, &(0x7f0000000080)={0x1, 0x2, 0xffffffffffffffff, 0x1, {0x3, 0x9, 0x800, 0x3f9d7f2f, 0x3}, [0x8001, 0x6]}}, @subvolid=0xa439})
r1 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)=<r2=>0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x600202, 0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f00000013c0)={{r0}, r2, 0x14, @inherit={0x70, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000050000000000000002000000000000000100000000000000150000000000000006000000000000000100000000000000008000000000000001000000000000002a000000000000000300000000000000010000000000000002000000000000000500000000000000324b3aaa47eded18b3faf085aa1158724e7076e1de43a531af44c04aec52494f085ea51f4a3911121d5ae8ec384e7e61e1bf40eab2e6f8376a775bb240bf8fe0479903996191389ac9"]}, @name="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"})

[  833.751949][ T8001] binder: 8000:8001 ioctl 400448dd 20000380 returned -22
23:15:48 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000ff0000000c00060000000000000000000a00010002000000"], 0x28}}, 0x0)
r2 = syz_clone(0x8c021800, &(0x7f0000000080)="f1cccfaafc4a21f3eb19279d6a93a0a2a5d99fe6813ef00908f6cd5a36390250df6e62670df552ed7ba4e262b4837a304d9e6802e82bd36aba8ef65d1e7c", 0x3e, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="8b7142338c245698ba2397ba07116db9a3db306d191f2deeca20e06d4cf1e24a98b18fc571630c1ed7da5a0de6af8b816678f9829ba2762ad57ddbbcc931972e5ba5d324986922f1560bb57d6adb222e20b18cae85cf76d79ef650472a1926a7b27b02bfddad4d589cf6bc6f51348b7361845007ff8583f058d522d2b08738d24f6ab6b45b533f04a9c206c4f54b5dd179b2083e25fee0be79e284ea97c89ac062c50da013a9413fc1849ade6c4174d8ea36d1fbbf4510225d9058e82a2e7fb63a01a530ffc6283a980fc699768580044bd67250aec543ccb6b6494effbea4732e895f")
r3 = syz_clone(0x201080, &(0x7f0000000240)="a3c9614c615436bacc9a6734826786c7977bad7930998da1f3a3c3113aa828e961a401b9a864a89a2464c3f97194c8088389062ea3817ebb4342695524ae550ef1afedde603b7d081ca7280f316d63e77c8076", 0x53, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="3a153c513320f0")
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, r1, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_PID={0x8, 0x1c, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r3}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000804}, 0x4000)
clock_gettime(0x4, &(0x7f0000000040))

23:15:48 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x700, @remote}}}, 0x30)

23:15:48 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0xff00, 0x0})

23:15:48 executing program 2:
clock_gettime(0x5, &(0x7f0000000040)) (async)
pselect6(0x40, &(0x7f0000000000)={0x3ff, 0x8, 0x5, 0x5, 0x10001, 0x800, 0x5, 0x1f}, &(0x7f0000000080)={0x8000, 0x81, 0xfff, 0xfffffffffffff137, 0x4, 0x100000000, 0x9, 0x7}, &(0x7f00000000c0)={0x7f, 0x10000, 0x6, 0x6, 0x2, 0x40, 0xddec, 0x6000000000000}, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3]}, 0x8})
clock_gettime(0x0, &(0x7f0000000280)={<r0=>0x0, <r1=>0x0})
clock_getres(0x3, &(0x7f0000000540)) (async)
pselect6(0x40, &(0x7f00000003c0)={0xee9e, 0x9, 0x3, 0x2, 0x5, 0x8, 0x7ff, 0x8}, &(0x7f0000000400)={0x33e, 0x100000001, 0x8, 0x100000000, 0xbe2f, 0x1000, 0x7ff, 0x6}, &(0x7f0000000440)={0xb6, 0x3, 0x0, 0xfffffffffffffeff, 0x5, 0x7, 0x7, 0x7fff}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x8]}, 0x8}) (async)
clock_gettime(0x5, &(0x7f0000000380)) (async)
pselect6(0x40, &(0x7f00000001c0)={0x80000001, 0xf4cb, 0x0, 0xc14d, 0x6, 0x8, 0x401, 0x1ff}, &(0x7f0000000200)={0x9, 0x7f, 0x6, 0x7fffffffffffffff, 0x8001, 0x4, 0x1fa70721, 0xea}, &(0x7f0000000240)={0x4b06, 0x7fffffffffffffff, 0x7, 0x7, 0x0, 0x7, 0x400, 0xffffffffffff0000}, &(0x7f00000002c0)={r0, r1+10000000}, &(0x7f0000000340)={&(0x7f0000000300)={[0x3]}, 0x8})

23:15:48 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0})

23:15:48 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x2000000, @remote}}}, 0x30)

23:15:48 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000003c0)={{r0}, 0x0, 0x1c, @inherit={0x58, &(0x7f0000000080)={0x1, 0x2, 0xffffffffffffffff, 0x1, {0x3, 0x9, 0x800, 0x3f9d7f2f, 0x3}, [0x8001, 0x6]}}, @subvolid=0xa439})
r1 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)=<r2=>0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x600202, 0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f00000013c0)={{r0}, r2, 0x14, @inherit={0x70, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000050000000000000002000000000000000100000000000000150000000000000006000000000000000100000000000000008000000000000001000000000000002a000000000000000300000000000000010000000000000002000000000000000500000000000000324b3aaa47eded18b3faf085aa1158724e7076e1de43a531af44c04aec52494f085ea51f4a3911121d5ae8ec384e7e61e1bf40eab2e6f8376a775bb240bf8fe0479903996191389ac9"]}, @name="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"})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000003c0)={{r0}, 0x0, 0x1c, @inherit={0x58, &(0x7f0000000080)={0x1, 0x2, 0xffffffffffffffff, 0x1, {0x3, 0x9, 0x800, 0x3f9d7f2f, 0x3}, [0x8001, 0x6]}}, @subvolid=0xa439}) (async)
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) (async)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)) (async)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x600202, 0x0) (async)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f00000013c0)={{r0}, r2, 0x14, @inherit={0x70, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000050000000000000002000000000000000100000000000000150000000000000006000000000000000100000000000000008000000000000001000000000000002a000000000000000300000000000000010000000000000002000000000000000500000000000000324b3aaa47eded18b3faf085aa1158724e7076e1de43a531af44c04aec52494f085ea51f4a3911121d5ae8ec384e7e61e1bf40eab2e6f8376a775bb240bf8fe0479903996191389ac9"]}, @name="0ae7d385bdc9796f560cd647abf690742c353f2d7e89ca279dc57140f7f944f7b1d35a489f270b5ff98cf21cb2fbe0bed2c8c12b5b672e4786fae325d729f6841f6004ea938cf37d6cfb99779fc738c4110faaf6470c55d29ede22a31af411cd26030efaca85a9743f3e28eb602c9e398bf839aff56fcf3377128e05538eff1015d20ba10ab642471ce13285b526e746ebbc361f05baaeb46f378ef7b99f4732c472a938316137ff8bda867553cced4edb279850ba86788a4d131a6341e60f5e0cbcc79c19b2a5a06e23ed1f67edc50ee2b9ba101df2d0b4873da96ce1885d394b842b8dd1d1db52704b38f8f98399414a798c9a89fa418f1785414fb3cfee4a6545e8d084c883013a67d56cff54f531f066054cf5ee097c9bb0c178ada16c81e75c7a97e622c77cb1b9771105430a327d7332570749c9f7fdf0a5b4588b1f2757b05c1fc17d54293f8ed9ee731acbc59c6e554f19798ace7c3fe7f51513dc97d72ee77d1b788fdada0c16d04c8f3b8e81b89dc9a53d8822ffd6787b963b541fc309617915feffb97bb4c82c8bae234a5ec90ba7afd42b0e7eeb67e43bab9315aa88fbf2a980699d2ad60d54312c7580a3c50d28f2b1e30f9a4c9544bfce046655ce3e9e092b94789a5698f05be3011d3ffd90ff9af97c5d7dfb40a484ae7a6c9417613c44546a2ce32b0b0a1c4da1a1eae125d436c5e98f4ad39bc4429549cc77c6b39acdf26b206634f747bf1082802dd29921045ccdc91fc87e7be15b177b900342a16e5c59eb68dfa155e88997a982da047cdffb540514f81a9e0ffb84df3cb46ff30440f920a8c316740d52adc80189264427effcb28762fc41355b62d6ac70f4131992e9e1db528792eba68709cc175c6506e5a02c9f4b4c0dc99187ed61db003cf0b19c82aff1f32a7676f927e78535bde1444585b35fd99f56823343aa63b39e34a252980a186307ab746fa425557e43fffe52077c4c79284842f99b84b2bfd8ad9c25234dc237f6715e08905e8f7d340ed85e0b8a285bec7e5af316f04a9e9ab6dd40993faf80f6ca6bf56529cb3666f7f208da637223c4aa647f6513931956356dc57469d149ee9130e424f40f166e20467cb8348197392dcf6f8f3cf56eb3d3aafd3cec0de8e669a769fa354a135f933f11e129124b83de45c2e22eae68d54dbb4ec4504df01422a93cce58c84ff9ed45cf10a6e913c943fb9d120de959ab0caaf137195dcffc952a8c533cb2bcea01230e84919dca343358286e6547ae4287ce6251e5175d5250d4c4056094330886baa8997254a64bb5969e51d744a4f63a356e84138c4d4cb92247cfb200b3cc18be71ced7f10d791b880b47d30cd29abb8ed92d14921cc6b884d17b53227b651636be25f9c53ecd32c57dcb99c00892320e92dabf5355e79aa2a452e0fbf24d6fe1ecbe85a694bca25d819fed24bee0e7619033b071c654f11fe4222a21bc0c08197c5fc0ff1508bd969639f333ae2099b5be170fcc71f21c2eecae8cccf409ac50077a372db16c94e314fe11968757b3fe6bf50d341c68d07fe6adc353839e9a364a9897eb1232aa6b76b4950c631dec596636459d30d3dac57bcae5a70b5e08da73100098d8b157ada61c567e532b465b0f776433f2b2bdcb01ab4969c38d3edcd3764900b56c4dd4b300b9d088384880db505d89c8b39e635e9fdafe88cbe536e8f6e710ce82a81cf9f440a614cd5e019f4c205e83f920a391d85e2f71d97f5cbb7978609fe65840713257545f6b16b2b86d16ecf0b5442bec6551ce7dead77793453999f2ac69cde64fb5939a26f0c17af7d6e8ae3f311202a6f56b68bedf3a680c7f2a990f97eaba69d4eafa6aa82d3dca22f8f68767c526f5c97067bdf9f8c049406ab8f04d0f45dcf92b67aae6ede94629b8247bd88a483dca48fd7f4abcd8ce6730f9c6cc50e5fa41dda9b90c60abb369e0daa3638e906ac4ac7a846369129ab7ddd75ea24a55b8bf535bdf090516601ee87e4258c1a7dc676adee76a573c3889b0b6d0f880ad2f5ab13e10488ca024c43a14d7168aa30cc809ca757d1891813a70530baf3b756c8934a99576d66d0153b60c64ad356f35a7fc9016f06d8531e9eb93b7524912f7200c72f9a7e2ada090d6b2f0ba1c45d2c78a5ce526be4b2bc2bd38a54be37dc4a9f6c5b72045fca7d286e5acceb19d98506960b2e4628f52e8e462c9c83c59d6b2c806234db8677c9e9cf1519368660e8b4f4f10a06652369060c5284ce591bfb6d20299cb8bd2809c95515393f26225d8eb78d68cd3ab6fedbd75c6d9592a36618829e5e0daf0893f2e84eae6b172101cfde9b1d288bf6bb27fe99739f9c8839e73cc13392180216629d0f38d8ef8e184b45c0830107f4e8dcf5413266cbfb972eec192e5d54c496da6188750df2e7183dd4fd94793253810d66cbf438c3f38182c26b6cee34ed61f6b432dd12b055a149593b26feae76d9a2c6764115452c5b4fa27d771ffe4ea64dc9e518354f45b60e39ab0d57b58f7a1454300c56e1cffa24fc2a565010fa9b48a70d609aa8257c232c1aaee083be3b8a1098ec8c7a6dd3e6536beb384aeb0b16cdd826c5a15b80523a186800831e0dd3e824991059abd62eabb65c359d4692380160a53394ae28e33bcda115fd10b198f42bb20794218b87212699806ca81579cfda6d8dbff1fa2c946082048e76fb4d93d1bd5a11b47fa176891df0f53e264a806515d60ef92f30630c60bfa6bc08c1e191d03d26bf10cec5e43f51a57a907b14b2d9d6fa98902706e0c4fbea4b479666de5d735d96f4e2d965b3af2468f19ea7acf4ed4f704e492b08920e07d05b4f6c9e57826e3c5ae6f749cb7864a0556186ebf25b830b92f93e1912eae386e9a1bac96d230844f0c9ff4e33d769f1d31b61d598a687ae5086dc540bdf783491908961f117e160b8c6cc838815c098e99c505b7c338fd4dd9cf7b272c39b5989b44242fcb7e5135c5781d49682ea9c2b78f2e3c66d7d86247bfd0e1240f8596265c2662edd0fdf4d853ebdc1f0d06a392ff3c106cbe1192811925f6cb2858b266ba66c6e232b1b1e7a8ed93c088c5860ba52bd1833bafa7964a2809f83246e4432ad15336ee1fa564f6a0fc51dd7a0756de71ad1065f844dd85c3ea16a08945677c782487c7a50b122b564ee73f47e4e2fe5153974a45f66d38de69e4fa5ef90e0382b3c916589577b1a6eaaba102e42f84e95774700868790b77a4ad37d5d8d5ab2b942ce472a3a8f125c7667bf7a614b2a2fc7500a1072d5c793b7662aeaff39e7561e6caa093112e2494240bcda2b45d35674a17d92ba1201e382268caa4ba0129170c15fdb24701a6ec26112319743996a783c0dab2186028f2c4c0254a08fa90f3ab82d67ab20a6436e333b83a2197322f0c7028c0269afedae45bf1bf459b8d04d8129b50f7b7d7d97b7ad8091f433cd320f8ebb7d5892e6d9cf268a2c48eefbdd71ef8129151b0eb63cd9c6a655934258d80d1aed921d1b15b22e9949698999226527db1b7efee5bf1e022e1e26522500086e748d559337697ceaefbbd201a26f4b291400ed5cabe7938dcc2a21554e013b9a84c9ca877b2e416628e0348a2ed2ae0621554d74e6dbe05e0dc8a20d8c903d56e741416fe74850b2f710c81987a314f70f034c4b8b32ebdf1c89a6e6ec435dece8526c2b74475a21181987e43ae8e2ddc879a15bcd5be6d6e20bc29c14ed03ccf2d452992d59a5f7fbe3521d069d80810e7510d43656863de570125541a5b2568dee7774b212d667cd242b7b644ae237cb52cefd37f37eeea8a844a52513dd65f752073de04133013744e43730851712db02ff2d2969b45b41f32f2ca5594af8140d16233d4fae863c3c68bbb21f58b75aa01c5fdf1be61c67b93d2a9065038e5fecadce6ba844a93889b482b0583b238cff0c3ecf4fe5c54baa1e8f29e61a359278a36dfc2f1c01d1fec73698bce335f0d433ca4c98f5f1eb86c74f6b25222243f9a18c2640d474b485803455f91a9e1809f6a64e5b4cdef12705dd42fc47745dd28132d9dad8cb600cb1d2138da8e734536cdac63e57786400682d5b71e9795559312ba6a0c934643cbe8beed3342e0781f6bf0f95092059371d71e456a790f3d43cb49bac81713d2f676873ae5fcb9790d0b0b6f2dfb08312f781f015b884e1dd54b27f6e80193a58cad625f673a89a776c65f0515374a88ade5ebf7c92c24461058e59657c190bc1ac2e575d86a2a334a36981607b323855bf9bbc7921e4b9c45ff9fe24caf210c1621d78218ec89dcb6a2b561345c53b2ccd71b4bfd6e6a0e581f3088e667ff184890a5c9bd5ab6eb793a2242908e2a82782098f60ca0e1382e14edffeb79f3b45106071d04d0d3db2f8974b34530282dad7a5346e678f1b6d9d3e0fbb363c8ac328a84c9e255b754b3f2d2a7d58a4e591520fd35f183da10eead7f907948068989a86fff9881acea2de17f796fed6fd164a4b2c1c3a1b6f48e1de076048004121409514f94da6a4301fc7f7777b9dfad40643abd18b381df3bc45081113f7ca1b07226ae2f3710e9329220e56457224fce4dfc329c3668ced0099cfa6594f57fa97d4ec3ffd913765353be4efa351991e26edd419b404912aa9558c57c8485653c123d6aeb0ed4788b187fd6d1373aa557697314587862a95094a6c99147d0a2f540e06dbd2a1e9a012bb5ccce9b87310b13e53a793e9a874dad0e1d2af452f10e34428e81814ae3fd2c05ac61b2f48787fb0c5855e9ce9db71543f8fdd8b9c476d980d7f91f47e179c6c7de58081d6a952529e66c3c7c428b92b5c367f3a93bcc7fabcc6950911d4c92760fef970173fe7f5ac222bcc04602f0468dc1ba36c8d4aa03436ba422565ef3039443f4927470e93915c7dab893572f992c042ebaabca629d154b8cf9b7ace72836f9987f8223862a4545c58da3fbedfc2d79aa9bee388c3a2f747cae883ac103ec8d6b276656c7c3b83c0f1657419d0e86650d070f086aa9c23d55ba561eb60585c085b6b4dd5b1399f23a2baac3b20e68d864dcc652b9c8da4fe120d970af9abb00dccf7e88e138a999e2702ff3e6c10d8e5e58a1f4f189bea4a371e5bde6c316d04e79adeacafcd4adcc1d8fe39d0f525c82bf0ba95f7d2544dfc6853f6d777854518a869b91257d45642da000aa4fad45572166fa3befe6402327f67cadd546529175225c6575b86c4b89bf3239916288e34c5279059d5e92f597f0d076a38bbeeae8e34328f0eabb5c5bfb293eefb7f70ca0c5fff4b21c6b7f2f6b8529d66fb75387d0cbc7988e99269ce7652c78a17eff22092a9386c2c6f1afbb847b666c1be97cff92ea4efdd12b713da61a38086d917d3c6fa8175793a7531853c014854045ba48744327c176bf34f61b6e3817c43d266627040a42d102235d3ce49872bffab4ab144fec6511b8b0f1e30caaff4ff55b79fbd6a43782ac58c483b135bb42a8ef3a10d13225feeeb51c7b16ac409b56b3b5bf2834e7e28245a9a86373e189972716741c74d69ea788161ae63608c025f480c67bffe2a864fe2ecbb6771d48cc892d7ae0756825daaa75a38bcbff3aa48383569ff3f639b72f87ec38e6f2157c6ad44e865df34861934f06146ea16477ae5ebdc3ffe909033ed4c2f01d48bf157636ea28da1f58e7c1bafe3bed3d62618e544f779401df2a43e979dc3b68397f7220"}) (async)

23:15:48 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  833.822273][ T8020] binder: 8019:8020 ioctl 400454ca 20000380 returned -22
[  833.837688][ T8022] binder: 8018:8022 ioctl 5000943a 200003c0 returned -22
[  833.859356][ T8022] binder: 8018:8022 ioctl 80089418 20000000 returned -22
23:15:48 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7000000, @remote}}}, 0x30)

23:15:48 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000ff0000000c00060000000000000000000a00010002000000"], 0x28}}, 0x0)
syz_clone(0x8c021800, &(0x7f0000000080)="f1cccfaafc4a21f3eb19279d6a93a0a2a5d99fe6813ef00908f6cd5a36390250df6e62670df552ed7ba4e262b4837a304d9e6802e82bd36aba8ef65d1e7c", 0x3e, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="8b7142338c245698ba2397ba07116db9a3db306d191f2deeca20e06d4cf1e24a98b18fc571630c1ed7da5a0de6af8b816678f9829ba2762ad57ddbbcc931972e5ba5d324986922f1560bb57d6adb222e20b18cae85cf76d79ef650472a1926a7b27b02bfddad4d589cf6bc6f51348b7361845007ff8583f058d522d2b08738d24f6ab6b45b533f04a9c206c4f54b5dd179b2083e25fee0be79e284ea97c89ac062c50da013a9413fc1849ade6c4174d8ea36d1fbbf4510225d9058e82a2e7fb63a01a530ffc6283a980fc699768580044bd67250aec543ccb6b6494effbea4732e895f")
syz_clone(0x201080, &(0x7f0000000240)="a3c9614c615436bacc9a6734826786c7977bad7930998da1f3a3c3113aa828e961a401b9a864a89a2464c3f97194c8088389062ea3817ebb4342695524ae550ef1afedde603b7d081ca7280f316d63e77c8076", 0x53, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="3a153c513320f0")
clock_gettime(0x4, &(0x7f0000000040))

23:15:48 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x2000000, 0x0})

23:15:48 executing program 2:
clock_gettime(0x5, &(0x7f0000000040))
ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000080)={0x3, 0x2, @status={[0x0, 0xfffffffffffffffd, 0x9, 0x0, 0x8, 0x5]}, [0x7, 0x400, 0x81, 0x80000001, 0x7, 0x7, 0x1ff, 0x2, 0x9, 0x6eb2a9a3, 0x7, 0x0, 0x3f, 0x8, 0x8001, 0x400, 0x3fff8, 0x7, 0xfffffffffffffffb, 0x1f, 0x8001, 0x13a, 0x80000000, 0x0, 0x100, 0x8, 0x57, 0x0, 0x9, 0xef44, 0x2, 0x7fff, 0x1f4c, 0x3, 0x400, 0x8000000000000000, 0x100000, 0x7, 0x6, 0x8, 0x1, 0x35, 0x1, 0x6, 0x80, 0x8, 0xb53, 0x9, 0x80, 0x7, 0x6bcee9ee, 0x81, 0x6, 0x3, 0x4, 0x8, 0x6, 0xcf, 0xfffffffffffffff8, 0x4, 0x7fffffffffffffff, 0x8, 0x6, 0x6]})

23:15:48 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:48 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x3000000, 0x0})

23:15:48 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30)

[  833.926082][ T8047] binder: 8046:8047 ioctl 5000943a 200003c0 returned -22
[  833.957920][ T8047] binder: 8046:8047 ioctl 80089418 20000000 returned -22
23:15:48 executing program 2:
clock_gettime(0x5, &(0x7f0000000040)) (async)
ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000080)={0x3, 0x2, @status={[0x0, 0xfffffffffffffffd, 0x9, 0x0, 0x8, 0x5]}, [0x7, 0x400, 0x81, 0x80000001, 0x7, 0x7, 0x1ff, 0x2, 0x9, 0x6eb2a9a3, 0x7, 0x0, 0x3f, 0x8, 0x8001, 0x400, 0x3fff8, 0x7, 0xfffffffffffffffb, 0x1f, 0x8001, 0x13a, 0x80000000, 0x0, 0x100, 0x8, 0x57, 0x0, 0x9, 0xef44, 0x2, 0x7fff, 0x1f4c, 0x3, 0x400, 0x8000000000000000, 0x100000, 0x7, 0x6, 0x8, 0x1, 0x35, 0x1, 0x6, 0x80, 0x8, 0xb53, 0x9, 0x80, 0x7, 0x6bcee9ee, 0x81, 0x6, 0x3, 0x4, 0x8, 0x6, 0xcf, 0xfffffffffffffff8, 0x4, 0x7fffffffffffffff, 0x8, 0x6, 0x6]})

23:15:48 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000ff0000000c00060000000000000000000a00010002000000"], 0x28}}, 0x0)
syz_clone(0x8c021800, &(0x7f0000000080)="f1cccfaafc4a21f3eb19279d6a93a0a2a5d99fe6813ef00908f6cd5a36390250df6e62670df552ed7ba4e262b4837a304d9e6802e82bd36aba8ef65d1e7c", 0x3e, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="8b7142338c245698ba2397ba07116db9a3db306d191f2deeca20e06d4cf1e24a98b18fc571630c1ed7da5a0de6af8b816678f9829ba2762ad57ddbbcc931972e5ba5d324986922f1560bb57d6adb222e20b18cae85cf76d79ef650472a1926a7b27b02bfddad4d589cf6bc6f51348b7361845007ff8583f058d522d2b08738d24f6ab6b45b533f04a9c206c4f54b5dd179b2083e25fee0be79e284ea97c89ac062c50da013a9413fc1849ade6c4174d8ea36d1fbbf4510225d9058e82a2e7fb63a01a530ffc6283a980fc699768580044bd67250aec543ccb6b6494effbea4732e895f")
clock_gettime(0x4, &(0x7f0000000040))

23:15:48 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x4000000, 0x0})

23:15:48 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000003c0)={{r0}, 0x0, 0x1c, @inherit={0x58, &(0x7f0000000080)={0x1, 0x2, 0xffffffffffffffff, 0x1, {0x3, 0x9, 0x800, 0x3f9d7f2f, 0x3}, [0x8001, 0x6]}}, @subvolid=0xa439}) (async)
r1 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) (async)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)=<r2=>0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x600202, 0x0) (async)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f00000013c0)={{r0}, r2, 0x14, @inherit={0x70, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000050000000000000002000000000000000100000000000000150000000000000006000000000000000100000000000000008000000000000001000000000000002a000000000000000300000000000000010000000000000002000000000000000500000000000000324b3aaa47eded18b3faf085aa1158724e7076e1de43a531af44c04aec52494f085ea51f4a3911121d5ae8ec384e7e61e1bf40eab2e6f8376a775bb240bf8fe0479903996191389ac9"]}, @name="0ae7d385bdc9796f560cd647abf690742c353f2d7e89ca279dc57140f7f944f7b1d35a489f270b5ff98cf21cb2fbe0bed2c8c12b5b672e4786fae325d729f6841f6004ea938cf37d6cfb99779fc738c4110faaf6470c55d29ede22a31af411cd26030efaca85a9743f3e28eb602c9e398bf839aff56fcf3377128e05538eff1015d20ba10ab642471ce13285b526e746ebbc361f05baaeb46f378ef7b99f4732c472a938316137ff8bda867553cced4edb279850ba86788a4d131a6341e60f5e0cbcc79c19b2a5a06e23ed1f67edc50ee2b9ba101df2d0b4873da96ce1885d394b842b8dd1d1db52704b38f8f98399414a798c9a89fa418f1785414fb3cfee4a6545e8d084c883013a67d56cff54f531f066054cf5ee097c9bb0c178ada16c81e75c7a97e622c77cb1b9771105430a327d7332570749c9f7fdf0a5b4588b1f2757b05c1fc17d54293f8ed9ee731acbc59c6e554f19798ace7c3fe7f51513dc97d72ee77d1b788fdada0c16d04c8f3b8e81b89dc9a53d8822ffd6787b963b541fc309617915feffb97bb4c82c8bae234a5ec90ba7afd42b0e7eeb67e43bab9315aa88fbf2a980699d2ad60d54312c7580a3c50d28f2b1e30f9a4c9544bfce046655ce3e9e092b94789a5698f05be3011d3ffd90ff9af97c5d7dfb40a484ae7a6c9417613c44546a2ce32b0b0a1c4da1a1eae125d436c5e98f4ad39bc4429549cc77c6b39acdf26b206634f747bf1082802dd29921045ccdc91fc87e7be15b177b900342a16e5c59eb68dfa155e88997a982da047cdffb540514f81a9e0ffb84df3cb46ff30440f920a8c316740d52adc80189264427effcb28762fc41355b62d6ac70f4131992e9e1db528792eba68709cc175c6506e5a02c9f4b4c0dc99187ed61db003cf0b19c82aff1f32a7676f927e78535bde1444585b35fd99f56823343aa63b39e34a252980a186307ab746fa425557e43fffe52077c4c79284842f99b84b2bfd8ad9c25234dc237f6715e08905e8f7d340ed85e0b8a285bec7e5af316f04a9e9ab6dd40993faf80f6ca6bf56529cb3666f7f208da637223c4aa647f6513931956356dc57469d149ee9130e424f40f166e20467cb8348197392dcf6f8f3cf56eb3d3aafd3cec0de8e669a769fa354a135f933f11e129124b83de45c2e22eae68d54dbb4ec4504df01422a93cce58c84ff9ed45cf10a6e913c943fb9d120de959ab0caaf137195dcffc952a8c533cb2bcea01230e84919dca343358286e6547ae4287ce6251e5175d5250d4c4056094330886baa8997254a64bb5969e51d744a4f63a356e84138c4d4cb92247cfb200b3cc18be71ced7f10d791b880b47d30cd29abb8ed92d14921cc6b884d17b53227b651636be25f9c53ecd32c57dcb99c00892320e92dabf5355e79aa2a452e0fbf24d6fe1ecbe85a694bca25d819fed24bee0e7619033b071c654f11fe4222a21bc0c08197c5fc0ff1508bd969639f333ae2099b5be170fcc71f21c2eecae8cccf409ac50077a372db16c94e314fe11968757b3fe6bf50d341c68d07fe6adc353839e9a364a9897eb1232aa6b76b4950c631dec596636459d30d3dac57bcae5a70b5e08da73100098d8b157ada61c567e532b465b0f776433f2b2bdcb01ab4969c38d3edcd3764900b56c4dd4b300b9d088384880db505d89c8b39e635e9fdafe88cbe536e8f6e710ce82a81cf9f440a614cd5e019f4c205e83f920a391d85e2f71d97f5cbb7978609fe65840713257545f6b16b2b86d16ecf0b5442bec6551ce7dead77793453999f2ac69cde64fb5939a26f0c17af7d6e8ae3f311202a6f56b68bedf3a680c7f2a990f97eaba69d4eafa6aa82d3dca22f8f68767c526f5c97067bdf9f8c049406ab8f04d0f45dcf92b67aae6ede94629b8247bd88a483dca48fd7f4abcd8ce6730f9c6cc50e5fa41dda9b90c60abb369e0daa3638e906ac4ac7a846369129ab7ddd75ea24a55b8bf535bdf090516601ee87e4258c1a7dc676adee76a573c3889b0b6d0f880ad2f5ab13e10488ca024c43a14d7168aa30cc809ca757d1891813a70530baf3b756c8934a99576d66d0153b60c64ad356f35a7fc9016f06d8531e9eb93b7524912f7200c72f9a7e2ada090d6b2f0ba1c45d2c78a5ce526be4b2bc2bd38a54be37dc4a9f6c5b72045fca7d286e5acceb19d98506960b2e4628f52e8e462c9c83c59d6b2c806234db8677c9e9cf1519368660e8b4f4f10a06652369060c5284ce591bfb6d20299cb8bd2809c95515393f26225d8eb78d68cd3ab6fedbd75c6d9592a36618829e5e0daf0893f2e84eae6b172101cfde9b1d288bf6bb27fe99739f9c8839e73cc13392180216629d0f38d8ef8e184b45c0830107f4e8dcf5413266cbfb972eec192e5d54c496da6188750df2e7183dd4fd94793253810d66cbf438c3f38182c26b6cee34ed61f6b432dd12b055a149593b26feae76d9a2c6764115452c5b4fa27d771ffe4ea64dc9e518354f45b60e39ab0d57b58f7a1454300c56e1cffa24fc2a565010fa9b48a70d609aa8257c232c1aaee083be3b8a1098ec8c7a6dd3e6536beb384aeb0b16cdd826c5a15b80523a186800831e0dd3e824991059abd62eabb65c359d4692380160a53394ae28e33bcda115fd10b198f42bb20794218b87212699806ca81579cfda6d8dbff1fa2c946082048e76fb4d93d1bd5a11b47fa176891df0f53e264a806515d60ef92f30630c60bfa6bc08c1e191d03d26bf10cec5e43f51a57a907b14b2d9d6fa98902706e0c4fbea4b479666de5d735d96f4e2d965b3af2468f19ea7acf4ed4f704e492b08920e07d05b4f6c9e57826e3c5ae6f749cb7864a0556186ebf25b830b92f93e1912eae386e9a1bac96d230844f0c9ff4e33d769f1d31b61d598a687ae5086dc540bdf783491908961f117e160b8c6cc838815c098e99c505b7c338fd4dd9cf7b272c39b5989b44242fcb7e5135c5781d49682ea9c2b78f2e3c66d7d86247bfd0e1240f8596265c2662edd0fdf4d853ebdc1f0d06a392ff3c106cbe1192811925f6cb2858b266ba66c6e232b1b1e7a8ed93c088c5860ba52bd1833bafa7964a2809f83246e4432ad15336ee1fa564f6a0fc51dd7a0756de71ad1065f844dd85c3ea16a08945677c782487c7a50b122b564ee73f47e4e2fe5153974a45f66d38de69e4fa5ef90e0382b3c916589577b1a6eaaba102e42f84e95774700868790b77a4ad37d5d8d5ab2b942ce472a3a8f125c7667bf7a614b2a2fc7500a1072d5c793b7662aeaff39e7561e6caa093112e2494240bcda2b45d35674a17d92ba1201e382268caa4ba0129170c15fdb24701a6ec26112319743996a783c0dab2186028f2c4c0254a08fa90f3ab82d67ab20a6436e333b83a2197322f0c7028c0269afedae45bf1bf459b8d04d8129b50f7b7d7d97b7ad8091f433cd320f8ebb7d5892e6d9cf268a2c48eefbdd71ef8129151b0eb63cd9c6a655934258d80d1aed921d1b15b22e9949698999226527db1b7efee5bf1e022e1e26522500086e748d559337697ceaefbbd201a26f4b291400ed5cabe7938dcc2a21554e013b9a84c9ca877b2e416628e0348a2ed2ae0621554d74e6dbe05e0dc8a20d8c903d56e741416fe74850b2f710c81987a314f70f034c4b8b32ebdf1c89a6e6ec435dece8526c2b74475a21181987e43ae8e2ddc879a15bcd5be6d6e20bc29c14ed03ccf2d452992d59a5f7fbe3521d069d80810e7510d43656863de570125541a5b2568dee7774b212d667cd242b7b644ae237cb52cefd37f37eeea8a844a52513dd65f752073de04133013744e43730851712db02ff2d2969b45b41f32f2ca5594af8140d16233d4fae863c3c68bbb21f58b75aa01c5fdf1be61c67b93d2a9065038e5fecadce6ba844a93889b482b0583b238cff0c3ecf4fe5c54baa1e8f29e61a359278a36dfc2f1c01d1fec73698bce335f0d433ca4c98f5f1eb86c74f6b25222243f9a18c2640d474b485803455f91a9e1809f6a64e5b4cdef12705dd42fc47745dd28132d9dad8cb600cb1d2138da8e734536cdac63e57786400682d5b71e9795559312ba6a0c934643cbe8beed3342e0781f6bf0f95092059371d71e456a790f3d43cb49bac81713d2f676873ae5fcb9790d0b0b6f2dfb08312f781f015b884e1dd54b27f6e80193a58cad625f673a89a776c65f0515374a88ade5ebf7c92c24461058e59657c190bc1ac2e575d86a2a334a36981607b323855bf9bbc7921e4b9c45ff9fe24caf210c1621d78218ec89dcb6a2b561345c53b2ccd71b4bfd6e6a0e581f3088e667ff184890a5c9bd5ab6eb793a2242908e2a82782098f60ca0e1382e14edffeb79f3b45106071d04d0d3db2f8974b34530282dad7a5346e678f1b6d9d3e0fbb363c8ac328a84c9e255b754b3f2d2a7d58a4e591520fd35f183da10eead7f907948068989a86fff9881acea2de17f796fed6fd164a4b2c1c3a1b6f48e1de076048004121409514f94da6a4301fc7f7777b9dfad40643abd18b381df3bc45081113f7ca1b07226ae2f3710e9329220e56457224fce4dfc329c3668ced0099cfa6594f57fa97d4ec3ffd913765353be4efa351991e26edd419b404912aa9558c57c8485653c123d6aeb0ed4788b187fd6d1373aa557697314587862a95094a6c99147d0a2f540e06dbd2a1e9a012bb5ccce9b87310b13e53a793e9a874dad0e1d2af452f10e34428e81814ae3fd2c05ac61b2f48787fb0c5855e9ce9db71543f8fdd8b9c476d980d7f91f47e179c6c7de58081d6a952529e66c3c7c428b92b5c367f3a93bcc7fabcc6950911d4c92760fef970173fe7f5ac222bcc04602f0468dc1ba36c8d4aa03436ba422565ef3039443f4927470e93915c7dab893572f992c042ebaabca629d154b8cf9b7ace72836f9987f8223862a4545c58da3fbedfc2d79aa9bee388c3a2f747cae883ac103ec8d6b276656c7c3b83c0f1657419d0e86650d070f086aa9c23d55ba561eb60585c085b6b4dd5b1399f23a2baac3b20e68d864dcc652b9c8da4fe120d970af9abb00dccf7e88e138a999e2702ff3e6c10d8e5e58a1f4f189bea4a371e5bde6c316d04e79adeacafcd4adcc1d8fe39d0f525c82bf0ba95f7d2544dfc6853f6d777854518a869b91257d45642da000aa4fad45572166fa3befe6402327f67cadd546529175225c6575b86c4b89bf3239916288e34c5279059d5e92f597f0d076a38bbeeae8e34328f0eabb5c5bfb293eefb7f70ca0c5fff4b21c6b7f2f6b8529d66fb75387d0cbc7988e99269ce7652c78a17eff22092a9386c2c6f1afbb847b666c1be97cff92ea4efdd12b713da61a38086d917d3c6fa8175793a7531853c014854045ba48744327c176bf34f61b6e3817c43d266627040a42d102235d3ce49872bffab4ab144fec6511b8b0f1e30caaff4ff55b79fbd6a43782ac58c483b135bb42a8ef3a10d13225feeeb51c7b16ac409b56b3b5bf2834e7e28245a9a86373e189972716741c74d69ea788161ae63608c025f480c67bffe2a864fe2ecbb6771d48cc892d7ae0756825daaa75a38bcbff3aa48383569ff3f639b72f87ec38e6f2157c6ad44e865df34861934f06146ea16477ae5ebdc3ffe909033ed4c2f01d48bf157636ea28da1f58e7c1bafe3bed3d62618e544f779401df2a43e979dc3b68397f7220"})

23:15:48 executing program 2:
clock_gettime(0x5, &(0x7f0000000040))
ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000080)={0x3, 0x2, @status={[0x0, 0xfffffffffffffffd, 0x9, 0x0, 0x8, 0x5]}, [0x7, 0x400, 0x81, 0x80000001, 0x7, 0x7, 0x1ff, 0x2, 0x9, 0x6eb2a9a3, 0x7, 0x0, 0x3f, 0x8, 0x8001, 0x400, 0x3fff8, 0x7, 0xfffffffffffffffb, 0x1f, 0x8001, 0x13a, 0x80000000, 0x0, 0x100, 0x8, 0x57, 0x0, 0x9, 0xef44, 0x2, 0x7fff, 0x1f4c, 0x3, 0x400, 0x8000000000000000, 0x100000, 0x7, 0x6, 0x8, 0x1, 0x35, 0x1, 0x6, 0x80, 0x8, 0xb53, 0x9, 0x80, 0x7, 0x6bcee9ee, 0x81, 0x6, 0x3, 0x4, 0x8, 0x6, 0xcf, 0xfffffffffffffff8, 0x4, 0x7fffffffffffffff, 0x8, 0x6, 0x6]})
clock_gettime(0x5, &(0x7f0000000040)) (async)
ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000080)={0x3, 0x2, @status={[0x0, 0xfffffffffffffffd, 0x9, 0x0, 0x8, 0x5]}, [0x7, 0x400, 0x81, 0x80000001, 0x7, 0x7, 0x1ff, 0x2, 0x9, 0x6eb2a9a3, 0x7, 0x0, 0x3f, 0x8, 0x8001, 0x400, 0x3fff8, 0x7, 0xfffffffffffffffb, 0x1f, 0x8001, 0x13a, 0x80000000, 0x0, 0x100, 0x8, 0x57, 0x0, 0x9, 0xef44, 0x2, 0x7fff, 0x1f4c, 0x3, 0x400, 0x8000000000000000, 0x100000, 0x7, 0x6, 0x8, 0x1, 0x35, 0x1, 0x6, 0x80, 0x8, 0xb53, 0x9, 0x80, 0x7, 0x6bcee9ee, 0x81, 0x6, 0x3, 0x4, 0x8, 0x6, 0xcf, 0xfffffffffffffff8, 0x4, 0x7fffffffffffffff, 0x8, 0x6, 0x6]}) (async)

23:15:48 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000ff0000000c00060000000000000000000a00010002000000"], 0x28}}, 0x0)
clock_gettime(0x4, &(0x7f0000000040))

23:15:48 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote, 0x2}}}, 0x30)

23:15:48 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0x40046208, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:48 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x5000000, 0x0})

[  833.990053][ T8060] binder: BINDER_SET_CONTEXT_MGR already set
[  834.001938][ T8063] binder: 8046:8063 ioctl 80089418 20000000 returned -22
[  834.002433][ T8064] binder: 8046:8064 ioctl 5000943a 200003c0 returned -22
[  834.015796][ T8060] binder: 8057:8060 ioctl 40046207 20000380 returned -16
23:15:48 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:48 executing program 5:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
clock_gettime(0x4, &(0x7f0000000040))

23:15:48 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote, 0x7}}}, 0x30)

23:15:48 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x6000000, 0x0})

23:15:48 executing program 2:
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {&(0x7f0000000080), 0xffffffffffffffff, 0x1}}, 0x18)
r0 = socket(0x26, 0x6, 0x0)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000300)={'wg2\x00', <r2=>0x0})
sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000008c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000340)={0x504, r1, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x490, 0x8, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x5, @remote, 0x5}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x10}}}]}, {0x2cc, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x28c, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x15}}, {0x5, 0x3, 0x3}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x39}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x64, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0xffffffff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fff}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "857e4a8a7325d39afb83f63152cd1c42795527bcd6882386dc3d540816038239"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @local}}]}, {0x60, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "44dd301feb87d91b2e685b6e1c64cbf1be33e41c9c671ff58c35fbefb55e4344"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x80000001, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1}}]}, {0xbc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @private=0xa010102}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xb602}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x6, @private0, 0x6}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x400, @mcast1, 0xffffffff}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @loopback}}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x504}, 0x1, 0x0, 0x0, 0x4000}, 0x4)
clock_gettime(0x5, &(0x7f0000000040))

23:15:48 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0x40049409, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:48 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:48 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7000000, 0x0})

23:15:48 executing program 5:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
clock_gettime(0x4, &(0x7f0000000040))

23:15:48 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote, 0x700}}}, 0x30)

23:15:48 executing program 2:
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {&(0x7f0000000080), 0xffffffffffffffff, 0x1}}, 0x18)
r0 = socket(0x26, 0x6, 0x0)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r0) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000300)={'wg2\x00', <r2=>0x0})
sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000008c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000340)={0x504, r1, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x490, 0x8, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x5, @remote, 0x5}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x10}}}]}, {0x2cc, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x28c, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x15}}, {0x5, 0x3, 0x3}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x39}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x64, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0xffffffff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fff}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "857e4a8a7325d39afb83f63152cd1c42795527bcd6882386dc3d540816038239"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @local}}]}, {0x60, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "44dd301feb87d91b2e685b6e1c64cbf1be33e41c9c671ff58c35fbefb55e4344"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x80000001, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1}}]}, {0xbc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @private=0xa010102}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xb602}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x6, @private0, 0x6}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x400, @mcast1, 0xffffffff}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @loopback}}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x504}, 0x1, 0x0, 0x0, 0x4000}, 0x4)
clock_gettime(0x5, &(0x7f0000000040))

23:15:48 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0x40086602, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  834.132395][ T8093] binder: 8086:8093 ioctl 5000943a 200003c0 returned -22
[  834.154788][ T8095] binder: 8086:8095 ioctl 80089418 20000000 returned -22
23:15:48 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote, 0x2000000}}}, 0x30)

23:15:48 executing program 2:
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {&(0x7f0000000080), 0xffffffffffffffff, 0x1}}, 0x18)
r0 = socket(0x26, 0x6, 0x0)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r0) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000300)={'wg2\x00', <r2=>0x0})
sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000008c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000340)={0x504, r1, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x490, 0x8, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x5, @remote, 0x5}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x10}}}]}, {0x2cc, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x28c, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x15}}, {0x5, 0x3, 0x3}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x39}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x64, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0xffffffff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fff}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "857e4a8a7325d39afb83f63152cd1c42795527bcd6882386dc3d540816038239"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @local}}]}, {0x60, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "44dd301feb87d91b2e685b6e1c64cbf1be33e41c9c671ff58c35fbefb55e4344"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x80000001, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1}}]}, {0xbc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @private=0xa010102}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xb602}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x6, @private0, 0x6}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x400, @mcast1, 0xffffffff}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @loopback}}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x504}, 0x1, 0x0, 0x0, 0x4000}, 0x4) (async, rerun: 64)
clock_gettime(0x5, &(0x7f0000000040)) (rerun: 64)

23:15:48 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0xfdfdffff, 0x0})

23:15:48 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:48 executing program 5:
clock_gettime(0x4, &(0x7f0000000040))

23:15:48 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0xff000000, 0x0})

23:15:48 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote, 0x7000000}}}, 0x30)

23:15:48 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)

23:15:48 executing program 5:
clock_gettime(0x0, &(0x7f0000000040))

23:15:48 executing program 2:
clock_gettime(0x5, &(0x7f0000000040))
pselect6(0x40, &(0x7f0000000080)={0x8000000000000000, 0x1f, 0x8000000000000000, 0x5, 0x1ff, 0x8000, 0x9, 0x5}, &(0x7f00000000c0)={0x0, 0x40, 0x1, 0x8000000000000000, 0x2, 0xf4b, 0x80, 0xffff}, &(0x7f0000000100)={0x4, 0x6, 0x7e9beb95, 0x81, 0x242c, 0x8, 0x6, 0x2000000}, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x6]}, 0x8})
clock_getres(0x7, &(0x7f0000000000))

[  834.251480][ T8118] binder: 8117:8118 ioctl 40086602 20000380 returned -22
23:15:48 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:48 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x7)

23:15:48 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0xfffffdfd, 0x0})

23:15:48 executing program 5:
clock_gettime(0x0, &(0x7f0000000040))

23:15:48 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:48 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x7ffffffff000)

23:15:48 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0xffffff7f, 0x0})

23:15:48 executing program 2:
clock_gettime(0x5, &(0x7f0000000040)) (async)
pselect6(0x40, &(0x7f0000000080)={0x8000000000000000, 0x1f, 0x8000000000000000, 0x5, 0x1ff, 0x8000, 0x9, 0x5}, &(0x7f00000000c0)={0x0, 0x40, 0x1, 0x8000000000000000, 0x2, 0xf4b, 0x80, 0xffff}, &(0x7f0000000100)={0x4, 0x6, 0x7e9beb95, 0x81, 0x242c, 0x8, 0x6, 0x2000000}, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x6]}, 0x8}) (async)
clock_getres(0x7, &(0x7f0000000000))

23:15:48 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:48 executing program 5:
clock_gettime(0x0, &(0x7f0000000040))

23:15:48 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:48 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000440), 0x48, 0xc000)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000480)={<r2=>0x0, 0x0, 0x4, 0x1})
ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000880)={{r0}, {@val={r2}, @actul_num={@val=0x2d, 0x6, 0x6b}}})
r3 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0xe, "0f72a2", "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"}}, 0x110)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={<r4=>0xffffffffffffffff}, 0x106}}, 0x20)
r5 = pidfd_getfd(0xffffffffffffffff, r3, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), r5)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1, 0x5}, r4}}, 0x30)
r6 = pidfd_getfd(r3, r0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x111, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r6, &(0x7f00000002c0)={0x9, 0x108, 0xfa00, {r7, 0xe0, "63870a", "52a359787da88d8dba677ef8e9b5365aa7a9a08e109eeab92b48c45489355d094784ff90fa5e0de3ef53192a2f2c4028301c79e6530d5e2ec80afc96f8584a7bf853f8b48ac683d5c306460dd2e9a849cffb986e2a017eafd59a2583111be996ead06e9fc82d0c7c5f734427d42444ddcead577f668ed6e82ae8dedee6fb18f7154f0867ed76b612c783d58c95269f956cdd33aa22275e1c4dee78413a0d1db914b9e4fd3960f650fab2068fc8f21ea55ea98aa9aa5d6688e10f532b37f84a42966d620a77995f7d9e0ba5db0d315c5cff2c527a6b057ac4d4e76f8bfe50ea79ea45f007dcc289e626d0989fc9365cc3305e11f975adcd0aa3cca6d7ca57a216"}}, 0x110)

[  834.351212][ T8144] binder: 8136:8144 ioctl 400c620e 20000380 returned -22
23:15:48 executing program 2:
clock_gettime(0x5, &(0x7f0000000040)) (async)
pselect6(0x40, &(0x7f0000000080)={0x8000000000000000, 0x1f, 0x8000000000000000, 0x5, 0x1ff, 0x8000, 0x9, 0x5}, &(0x7f00000000c0)={0x0, 0x40, 0x1, 0x8000000000000000, 0x2, 0xf4b, 0x80, 0xffff}, &(0x7f0000000100)={0x4, 0x6, 0x7e9beb95, 0x81, 0x242c, 0x8, 0x6, 0x2000000}, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x6]}, 0x8}) (async)
clock_getres(0x7, &(0x7f0000000000))

23:15:48 executing program 5:
clock_gettime(0x4, 0x0)

23:15:48 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x100000000000000, 0x0})

23:15:48 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:48 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000440), 0x48, 0xc000) (async)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000480)={<r2=>0x0, 0x0, 0x4, 0x1})
ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000880)={{r0}, {@val={r2}, @actul_num={@val=0x2d, 0x6, 0x6b}}})
r3 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0xe, "0f72a2", "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"}}, 0x110) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={<r4=>0xffffffffffffffff}, 0x106}}, 0x20)
r5 = pidfd_getfd(0xffffffffffffffff, r3, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), r5) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1, 0x5}, r4}}, 0x30) (async)
r6 = pidfd_getfd(r3, r0, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x111, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r6, &(0x7f00000002c0)={0x9, 0x108, 0xfa00, {r7, 0xe0, "63870a", "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"}}, 0x110)

23:15:48 executing program 5:
clock_gettime(0x4, 0x0)

23:15:48 executing program 2:
clock_gettime(0x5, &(0x7f0000000040))
clock_gettime(0x3, &(0x7f0000000000))

23:15:48 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x0, 0x0)
r1 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
syz_open_dev$video4linux(&(0x7f0000000100), 0x1, 0x52000)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180))
ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000040)={0x0, 0x0, '\x00', @raw_data=[0x9, 0x608c, 0xfffffffe, 0x81, 0x80, 0x433a, 0x1, 0x5, 0x5, 0x1, 0x10000, 0x0, 0x1, 0x7ff, 0x3ff, 0x1, 0x7fffffff, 0x401, 0x401, 0x5, 0x1, 0x100, 0x7, 0x800, 0x4, 0x2, 0x3, 0x9, 0x8, 0x7, 0x401, 0x6]})
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  834.431708][ T8161] binder: BINDER_SET_CONTEXT_MGR already set
23:15:48 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x200000000000000, 0x0})

23:15:48 executing program 2:
clock_gettime(0x5, &(0x7f0000000040))
clock_gettime(0x3, &(0x7f0000000000))
clock_gettime(0x5, &(0x7f0000000040)) (async)
clock_gettime(0x3, &(0x7f0000000000)) (async)

23:15:49 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0x40186366, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:49 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x0, 0x0)
r1 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2) (async)
syz_open_dev$video4linux(&(0x7f0000000100), 0x1, 0x52000)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180)) (async)
ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000040)={0x0, 0x0, '\x00', @raw_data=[0x9, 0x608c, 0xfffffffe, 0x81, 0x80, 0x433a, 0x1, 0x5, 0x5, 0x1, 0x10000, 0x0, 0x1, 0x7ff, 0x3ff, 0x1, 0x7fffffff, 0x401, 0x401, 0x5, 0x1, 0x100, 0x7, 0x800, 0x4, 0x2, 0x3, 0x9, 0x8, 0x7, 0x401, 0x6]})
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:49 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000440), 0x48, 0xc000)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000480)={<r2=>0x0, 0x0, 0x4, 0x1})
ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000880)={{r0}, {@val={r2}, @actul_num={@val=0x2d, 0x6, 0x6b}}})
r3 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0xe, "0f72a2", "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"}}, 0x110)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={<r4=>0xffffffffffffffff}, 0x106}}, 0x20)
r5 = pidfd_getfd(0xffffffffffffffff, r3, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), r5)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1, 0x5}, r4}}, 0x30)
r6 = pidfd_getfd(r3, r0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x111, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r6, &(0x7f00000002c0)={0x9, 0x108, 0xfa00, {r7, 0xe0, "63870a", "52a359787da88d8dba677ef8e9b5365aa7a9a08e109eeab92b48c45489355d094784ff90fa5e0de3ef53192a2f2c4028301c79e6530d5e2ec80afc96f8584a7bf853f8b48ac683d5c306460dd2e9a849cffb986e2a017eafd59a2583111be996ead06e9fc82d0c7c5f734427d42444ddcead577f668ed6e82ae8dedee6fb18f7154f0867ed76b612c783d58c95269f956cdd33aa22275e1c4dee78413a0d1db914b9e4fd3960f650fab2068fc8f21ea55ea98aa9aa5d6688e10f532b37f84a42966d620a77995f7d9e0ba5db0d315c5cff2c527a6b057ac4d4e76f8bfe50ea79ea45f007dcc289e626d0989fc9365cc3305e11f975adcd0aa3cca6d7ca57a216"}}, 0x110)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
syz_open_dev$video4linux(&(0x7f0000000440), 0x48, 0xc000) (async)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000480)={0x0, 0x0, 0x4, 0x1}) (async)
ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000880)={{r0}, {@val={r2}, @actul_num={@val=0x2d, 0x6, 0x6b}}}) (async)
memfd_secret(0x0) (async)
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) (async)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0xe, "0f72a2", "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"}}, 0x110) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x106}}, 0x20) (async)
pidfd_getfd(0xffffffffffffffff, r3, 0x0) (async)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), r5) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1, 0x5}, r4}}, 0x30) (async)
pidfd_getfd(r3, r0, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240), 0x111, 0x4}}, 0x20) (async)
write$RDMA_USER_CM_CMD_REJECT(r6, &(0x7f00000002c0)={0x9, 0x108, 0xfa00, {r7, 0xe0, "63870a", "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"}}, 0x110) (async)

23:15:49 executing program 5:
clock_gettime(0x4, 0x0)

23:15:49 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x300000000000000, 0x0})

[  834.478418][ T8161] binder: 8160:8161 ioctl 4018620d 20000380 returned -16
23:15:49 executing program 2:
clock_gettime(0x5, &(0x7f0000000040))
clock_gettime(0x3, &(0x7f0000000000))
clock_gettime(0x5, &(0x7f0000000040)) (async)
clock_gettime(0x3, &(0x7f0000000000)) (async)

23:15:49 executing program 5:
clock_gettime(0x5, &(0x7f0000000040))
clock_gettime(0x3, &(0x7f0000000000))

23:15:49 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x400000000000000, 0x0})

23:15:49 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x0, 0x0)
r1 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
syz_open_dev$video4linux(&(0x7f0000000100), 0x1, 0x52000) (async)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180)) (async)
ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000040)={0x0, 0x0, '\x00', @raw_data=[0x9, 0x608c, 0xfffffffe, 0x81, 0x80, 0x433a, 0x1, 0x5, 0x5, 0x1, 0x10000, 0x0, 0x1, 0x7ff, 0x3ff, 0x1, 0x7fffffff, 0x401, 0x401, 0x5, 0x1, 0x100, 0x7, 0x800, 0x4, 0x2, 0x3, 0x9, 0x8, 0x7, 0x401, 0x6]}) (async)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:49 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = memfd_secret(0x80000)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x2, {0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}}, 0x38)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30)

23:15:49 executing program 2:
clock_gettime(0x5, &(0x7f0000000040))
clock_gettime(0x5, &(0x7f0000000000))

23:15:49 executing program 5:
clock_gettime(0x5, &(0x7f0000000040))
clock_gettime(0x3, &(0x7f0000000000))

23:15:49 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  834.577997][ T8212] binder: 8201:8212 ioctl 40186366 20000380 returned -22
23:15:49 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
r1 = memfd_secret(0x80000)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x2, {0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}}, 0x38) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30)

23:15:49 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180))
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000080)={0x0, 0x3, 0x7, 0x1})
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000480)={0x1, 0x7fff})
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:49 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x500000000000000, 0x0})

23:15:49 executing program 2:
clock_gettime(0x5, &(0x7f0000000040))
clock_gettime(0x5, &(0x7f0000000000))

23:15:49 executing program 5:
clock_gettime(0x5, &(0x7f0000000040))
clock_gettime(0x3, &(0x7f0000000000))

23:15:49 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = memfd_secret(0x80000)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x2, {0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}}, 0x38)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
memfd_secret(0x80000) (async)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x2, {0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}}, 0x38) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30) (async)

23:15:49 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r1 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180)) (async, rerun: 32)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000080)={0x0, 0x3, 0x7, 0x1}) (async, rerun: 32)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000480)={0x1, 0x7fff})
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:49 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x600000000000000, 0x0})

23:15:49 executing program 2:
clock_gettime(0x5, &(0x7f0000000040)) (async)
clock_gettime(0x5, &(0x7f0000000000))

23:15:49 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0x4020940d, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  834.672387][ T8231] binder: 8228:8231 ioctl 401c5820 20000380 returned -22
23:15:49 executing program 5:
clock_gettime(0x3, &(0x7f0000000000))

23:15:49 executing program 4:
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)

23:15:49 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r1 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180)) (async)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000080)={0x0, 0x3, 0x7, 0x1})
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000480)={0x1, 0x7fff}) (async, rerun: 32)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32)

23:15:49 executing program 2:
clock_gettime(0x5, &(0x7f0000000040)={<r0=>0x0})
r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0)
ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f00000002c0)={{r2}, 0x0, 0x2, @inherit={0x50, &(0x7f0000000240)={0x1, 0x1, 0x1, 0x1, {0x3, 0x7fffffffffffffff, 0x7, 0x8, 0x8}, [0x7]}}, @subvolid=0x10001})
r3 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5, 0x0, {0x2}}, 0x18)
r6 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r6, 0xb701, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x10000000, 0x4, 0x6, 0x810, r3, 0x4, '\x00', r5, r6, 0x4, 0x5, 0x4, 0xb}, 0x48)
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f00000013c0)=ANY=[@ANYBLOB="d000096b5f6f1c24ec26dfa300", @ANYRES16=0x0, @ANYBLOB="000825bd7000ffdbdf25250000000e0001006e010000007673696cfcff000fffffffff657464657673690008009800", @ANYRESOCT=r3, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES8=r0, @ANYBLOB="080001007063690011000200353030303a30303a31302e300000000008008c0001000000080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES32, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c0003000000"], 0xd0}, 0x1, 0x0, 0x0, 0x20004801}, 0x10)

23:15:49 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0x80086301, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:49 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x700000000000000, 0x0})

23:15:49 executing program 5:
clock_gettime(0x0, &(0x7f0000000000))

23:15:49 executing program 2:
clock_gettime(0x5, &(0x7f0000000040)={<r0=>0x0}) (async)
r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0)
ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f00000002c0)={{r2}, 0x0, 0x2, @inherit={0x50, &(0x7f0000000240)={0x1, 0x1, 0x1, 0x1, {0x3, 0x7fffffffffffffff, 0x7, 0x8, 0x8}, [0x7]}}, @subvolid=0x10001}) (async)
r3 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) (async)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5, 0x0, {0x2}}, 0x18)
r6 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r6, 0xb701, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x10000000, 0x4, 0x6, 0x810, r3, 0x4, '\x00', r5, r6, 0x4, 0x5, 0x4, 0xb}, 0x48) (async)
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f00000013c0)=ANY=[@ANYBLOB="d000096b5f6f1c24ec26dfa300", @ANYRES16=0x0, @ANYBLOB="000825bd7000ffdbdf25250000000e0001006e010000007673696cfcff000fffffffff657464657673690008009800", @ANYRESOCT=r3, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES8=r0, @ANYBLOB="080001007063690011000200353030303a30303a31302e300000000008008c0001000000080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES32, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c0003000000"], 0xd0}, 0x1, 0x0, 0x0, 0x20004801}, 0x10)

23:15:49 executing program 4:
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)

23:15:49 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(r1, 0x0)
ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000000)={r1, 0x1, 0x2})

23:15:49 executing program 5:
clock_gettime(0x0, &(0x7f0000000000))

23:15:49 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0xfdfdffff00000000, 0x0})

23:15:49 executing program 5:
clock_gettime(0x0, &(0x7f0000000000))

23:15:49 executing program 2:
clock_gettime(0x5, &(0x7f0000000040)={<r0=>0x0}) (async)
r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0)
ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f00000002c0)={{r2}, 0x0, 0x2, @inherit={0x50, &(0x7f0000000240)={0x1, 0x1, 0x1, 0x1, {0x3, 0x7fffffffffffffff, 0x7, 0x8, 0x8}, [0x7]}}, @subvolid=0x10001}) (async, rerun: 64)
r3 = memfd_secret(0x0) (rerun: 64)
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) (async, rerun: 64)
r4 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5, 0x0, {0x2}}, 0x18)
r6 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r6, 0xb701, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x10000000, 0x4, 0x6, 0x810, r3, 0x4, '\x00', r5, r6, 0x4, 0x5, 0x4, 0xb}, 0x48) (async)
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f00000013c0)=ANY=[@ANYBLOB="d000096b5f6f1c24ec26dfa300", @ANYRES16=0x0, @ANYBLOB="000825bd7000ffdbdf25250000000e0001006e010000007673696cfcff000fffffffff657464657673690008009800", @ANYRESOCT=r3, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES8=r0, @ANYBLOB="080001007063690011000200353030303a30303a31302e300000000008008c0001000000080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES32, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c0003000000"], 0xd0}, 0x1, 0x0, 0x0, 0x20004801}, 0x10)

23:15:49 executing program 4:
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)

23:15:49 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0x80086601, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  834.839075][ T8272] binder: 8271:8272 ioctl 80086301 20000380 returned -22
23:15:49 executing program 2:
clock_gettime(0x1, &(0x7f0000000000))
clock_getres(0x6, &(0x7f0000000080))

23:15:49 executing program 5:
clock_gettime(0x3, 0x0)

23:15:49 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0xff00000000000000, 0x0})

23:15:49 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x0, {0xa, 0x4e21, 0x2, @local, 0x1}}}, 0x38)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30)

23:15:49 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(r1, 0x0)
ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000000)={r1, 0x1, 0x2})

23:15:49 executing program 2:
clock_gettime(0x1, &(0x7f0000000000)) (async)
clock_getres(0x6, &(0x7f0000000080))

[  834.891993][ T8285] binder: 8282:8285 ioctl 400c620e 20000000 returned -22
[  834.908207][ T8296] binder: 8295:8296 ioctl 80086601 20000380 returned -22
23:15:49 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0xffffff7f00000000, 0x0})

23:15:49 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0x801c581f, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:49 executing program 5:
clock_gettime(0x3, 0x0)

23:15:49 executing program 2:
clock_gettime(0x1, &(0x7f0000000000)) (async)
clock_getres(0x6, &(0x7f0000000080))

23:15:49 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x0, {0xa, 0x4e21, 0x2, @local, 0x1}}}, 0x38) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30)

23:15:49 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0xc86c8c6aa1b72aeb, 0xffffffffe})
r1 = memfd_secret(0x0)
r2 = openat$cgroup_netprio_ifpriomap(r1, &(0x7f00000000c0), 0x2, 0x0)
ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000100)={{r2}, {@void, @max}})
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:49 executing program 5:
clock_gettime(0x3, 0x0)

23:15:49 executing program 2:
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
clock_gettime(0x5, &(0x7f0000000040))

23:15:49 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  834.978304][ T8311] binder: 8310:8311 ioctl 801c581f 20000380 returned -22
[  835.000731][ T8314] binder: 8309:8314 ioctl 400c620e 20000000 returned -22
23:15:49 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x0, {0xa, 0x4e21, 0x2, @local, 0x1}}}, 0x38)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x0, {0xa, 0x4e21, 0x2, @local, 0x1}}}, 0x38) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30) (async)

23:15:49 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(r1, 0x0) (async)
ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000000)={r1, 0x1, 0x2})

23:15:49 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:49 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0xfdfdffff00000000, 0x0})

23:15:49 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0xc86c8c6aa1b72aeb, 0xffffffffe}) (async)
r1 = memfd_secret(0x0)
r2 = openat$cgroup_netprio_ifpriomap(r1, &(0x7f00000000c0), 0x2, 0x0)
ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000100)={{r2}, {@void, @max}}) (async)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) (async)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r1) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:49 executing program 2:
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
clock_gettime(0x5, &(0x7f0000000040))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async)
clock_gettime(0x5, &(0x7f0000000040)) (async)

[  835.046089][ T8330] binder: BINDER_SET_CONTEXT_MGR already set
[  835.062787][ T8330] binder: 8327:8330 ioctl 40046207 0 returned -16
23:15:49 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x111, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x0, @remote}}}, 0x30)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff}, 0x111}}, 0xfffffffffffffcc0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0, r3}}, 0x18)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {&(0x7f0000000100), 0x4, r3, 0x30, 0x1, @ib={0x1b, 0x2, 0x4, {"6f5499e4052b4e0aeccf9cae3cc7a99f"}, 0x8f, 0x2, 0x7}}}, 0xa0)

23:15:49 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:49 executing program 2:
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
clock_gettime(0x5, &(0x7f0000000040))

23:15:49 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0xc86c8c6aa1b72aeb, 0xffffffffe}) (async)
r1 = memfd_secret(0x0)
r2 = openat$cgroup_netprio_ifpriomap(r1, &(0x7f00000000c0), 0x2, 0x0)
ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000100)={{r2}, {@void, @max}}) (async, rerun: 32)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) (async, rerun: 32)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) (async)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r1) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:49 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x111, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x0, @remote}}}, 0x30)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff}, 0x111}}, 0xfffffffffffffcc0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0, r3}}, 0x18)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {&(0x7f0000000100), 0x4, r3, 0x30, 0x1, @ib={0x1b, 0x2, 0x4, {"6f5499e4052b4e0aeccf9cae3cc7a99f"}, 0x8f, 0x2, 0x7}}}, 0xa0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x111, 0x2}}, 0x20) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x0, @remote}}}, 0x30) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0xfffffffffffffcc0) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0, r3}}, 0x18) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {&(0x7f0000000100), 0x4, r3, 0x30, 0x1, @ib={0x1b, 0x2, 0x4, {"6f5499e4052b4e0aeccf9cae3cc7a99f"}, 0x8f, 0x2, 0x7}}}, 0xa0) (async)

23:15:49 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0xfdfdffff00000000, 0x0})

[  835.118645][ T8345] binder: BINDER_SET_CONTEXT_MGR already set
[  835.125600][ T8350] binder: 8335:8350 ioctl 400c620e 20000000 returned -22
[  835.130896][ T8345] binder: 8342:8345 ioctl 40046207 0 returned -16
23:15:49 executing program 3:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000140)={0xb635eda99a7f9d70, 0x0, {0xe8b6, 0x5, 0x2008, 0x1, 0x7, 0x3, 0x1, 0x5}})
ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f0000000080))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000100)={0x3})
r2 = memfd_secret(0x0)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000003c0)={<r3=>0x0, 0x7, 0x5})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f00000007c0)={r3, 0x3, 0x5})
openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
process_mrelease(0xffffffffffffffff, 0x0)

23:15:49 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:49 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x111, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x0, @remote}}}, 0x30)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff}, 0x111}}, 0xfffffffffffffcc0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0, r3}}, 0x18)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {&(0x7f0000000100), 0x4, r3, 0x30, 0x1, @ib={0x1b, 0x2, 0x4, {"6f5499e4052b4e0aeccf9cae3cc7a99f"}, 0x8f, 0x2, 0x7}}}, 0xa0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x111, 0x2}}, 0x20) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x0, @remote}}}, 0x30) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0xfffffffffffffcc0) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0, r3}}, 0x18) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {&(0x7f0000000100), 0x4, r3, 0x30, 0x1, @ib={0x1b, 0x2, 0x4, {"6f5499e4052b4e0aeccf9cae3cc7a99f"}, 0x8f, 0x2, 0x7}}}, 0xa0) (async)

23:15:49 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})

23:15:49 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0xfdfdffff00000000, 0x0})

23:15:49 executing program 2:
clock_gettime(0x5, &(0x7f0000000280))
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x8000000000000001, 0x5, 0x4, 0x4, 0xfff, 0x80000001, 0x100}, &(0x7f0000000100)={0x6, 0x4, 0x1000, 0x6c1d, 0xfff, 0x0, 0x1ff, 0x8001}, &(0x7f0000000140)={0x527, 0x4, 0x0, 0xfffffffffffffffd, 0x31f, 0x22, 0x8, 0x9}, &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0)={[0x454a]}, 0x8})
clock_getres(0x4, &(0x7f0000000080))
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000240)={'wpan4\x00'})
mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x6)

[  835.197666][ T8360] binder: BINDER_SET_CONTEXT_MGR already set
[  835.209370][ T8360] binder: 8356:8360 ioctl 40046207 0 returned -16
[  835.233268][ T8377] binder: 8376:8377 ioctl c00c620f 20000380 returned -22
23:15:49 executing program 4:
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r0 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r1)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000080)={0x1, 0x10}, 0x18)

23:15:49 executing program 3:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000140)={0xb635eda99a7f9d70, 0x0, {0xe8b6, 0x5, 0x2008, 0x1, 0x7, 0x3, 0x1, 0x5}}) (async)
ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f0000000080))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000100)={0x3})
r2 = memfd_secret(0x0)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000003c0)={<r3=>0x0, 0x7, 0x5})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f00000007c0)={r3, 0x3, 0x5}) (async)
openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
process_mrelease(0xffffffffffffffff, 0x0)

23:15:49 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))

23:15:49 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc00c6211, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  835.258286][ T8379] binder: 8375:8379 ioctl c400941d 200003c0 returned -22
[  835.273863][ T8392] binder: BINDER_SET_CONTEXT_MGR already set
[  835.293036][ T8392] binder: 8391:8392 ioctl 40046207 0 returned -16
23:15:49 executing program 4:
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r0 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r1)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000080)={0x1, 0x10}, 0x18)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
memfd_secret(0x0) (async)
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r1) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000080)={0x1, 0x10}, 0x18) (async)

23:15:49 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:49 executing program 5:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)

23:15:49 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) (async)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})

23:15:49 executing program 4:
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r0 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r1) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000080)={0x1, 0x10}, 0x18)

23:15:49 executing program 3:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000140)={0xb635eda99a7f9d70, 0x0, {0xe8b6, 0x5, 0x2008, 0x1, 0x7, 0x3, 0x1, 0x5}})
ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f0000000080))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000100)={0x3})
r2 = memfd_secret(0x0)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000003c0)={<r3=>0x0, 0x7, 0x5})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f00000007c0)={r3, 0x3, 0x5})
openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
process_mrelease(0xffffffffffffffff, 0x0)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000140)={0xb635eda99a7f9d70, 0x0, {0xe8b6, 0x5, 0x2008, 0x1, 0x7, 0x3, 0x1, 0x5}}) (async)
ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f0000000080)) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000100)={0x3}) (async)
memfd_secret(0x0) (async)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000003c0)={0x0, 0x7, 0x5}) (async)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f00000007c0)={r3, 0x3, 0x5}) (async)
openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
process_mrelease(0xffffffffffffffff, 0x0) (async)

[  835.323711][ T8402] binder: 8397:8402 ioctl c400941d 200003c0 returned -22
23:15:49 executing program 5:
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)

23:15:49 executing program 2:
clock_gettime(0x5, &(0x7f0000000280)) (async)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x8000000000000001, 0x5, 0x4, 0x4, 0xfff, 0x80000001, 0x100}, &(0x7f0000000100)={0x6, 0x4, 0x1000, 0x6c1d, 0xfff, 0x0, 0x1ff, 0x8001}, &(0x7f0000000140)={0x527, 0x4, 0x0, 0xfffffffffffffffd, 0x31f, 0x22, 0x8, 0x9}, &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0)={[0x454a]}, 0x8})
clock_getres(0x4, &(0x7f0000000080)) (async, rerun: 64)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 64)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000240)={'wpan4\x00'}) (async)
mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x6)

23:15:49 executing program 4:
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x4500, 0x0)
arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000200))
arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000080))
waitid$P_PIDFD(0x3, r0, &(0x7f0000000240), 0x80000000, &(0x7f0000000140))

23:15:49 executing program 5:
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)

23:15:49 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0186212, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  835.391890][ T8421] binder: BINDER_SET_CONTEXT_MGR already set
[  835.401430][ T8419] binder: 8415:8419 ioctl c018620c 20000380 returned -22
[  835.414542][ T8423] binder: 8422:8423 ioctl c400941d 200003c0 returned -22
[  835.415940][ T8421] binder: 8417:8421 ioctl 40046207 0 returned -16
23:15:49 executing program 3:
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(r1, 0x0)
syz_open_procfs$userns(r1, 0x0)
ptrace$setopts(0x4200, r1, 0x5, 0x38)
pidfd_open(r0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:49 executing program 4:
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x4500, 0x0)
arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000200))
arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000080))
waitid$P_PIDFD(0x3, r0, &(0x7f0000000240), 0x80000000, &(0x7f0000000140))
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x4500, 0x0) (async)
arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000200)) (async)
arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000080)) (async)
waitid$P_PIDFD(0x3, r0, &(0x7f0000000240), 0x80000000, &(0x7f0000000140)) (async)

23:15:49 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) (async)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})

23:15:49 executing program 5:
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)

[  835.483742][ T8444] binder: 8438:8444 ioctl c0186212 20000380 returned -22
[  835.506109][ T8451] binder: BINDER_SET_CONTEXT_MGR already set
23:15:50 executing program 4:
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x4500, 0x0)
arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000200))
arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000080))
waitid$P_PIDFD(0x3, r0, &(0x7f0000000240), 0x80000000, &(0x7f0000000140))
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x4500, 0x0) (async)
arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000200)) (async)
arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000080)) (async)
waitid$P_PIDFD(0x3, r0, &(0x7f0000000240), 0x80000000, &(0x7f0000000140)) (async)

23:15:50 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:50 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0186215, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:50 executing program 3:
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(r1, 0x0)
syz_open_procfs$userns(r1, 0x0)
ptrace$setopts(0x4200, r1, 0x5, 0x38)
pidfd_open(r0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_open_procfs$userns(r1, 0x0) (async)
syz_open_procfs$userns(r1, 0x0) (async)
ptrace$setopts(0x4200, r1, 0x5, 0x38) (async)
pidfd_open(r0, 0x0) (async)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)

[  835.540472][ T8451] binder: 8449:8451 ioctl 40046207 0 returned -16
[  835.586167][ T8474] binder: 8470:8474 ioctl c018620c 20000380 returned -22
[  835.592907][ T8478] binder: 8472:8478 ioctl c0186215 20000380 returned -22
23:15:50 executing program 2:
clock_gettime(0x5, &(0x7f0000000280))
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x8000000000000001, 0x5, 0x4, 0x4, 0xfff, 0x80000001, 0x100}, &(0x7f0000000100)={0x6, 0x4, 0x1000, 0x6c1d, 0xfff, 0x0, 0x1ff, 0x8001}, &(0x7f0000000140)={0x527, 0x4, 0x0, 0xfffffffffffffffd, 0x31f, 0x22, 0x8, 0x9}, &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0)={[0x454a]}, 0x8})
clock_getres(0x4, &(0x7f0000000080))
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000240)={'wpan4\x00'})
mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x6)

23:15:50 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0xfffc, 0x0, @remote}}}, 0x30)
pidfd_getfd(0xffffffffffffffff, r0, 0x0)

23:15:50 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:50 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000001c0)=[@decrefs], 0x0, 0x0, 0x0})
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
bind$can_j1939(r1, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18)

23:15:50 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0189436, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:50 executing program 3:
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(r1, 0x0) (async, rerun: 32)
syz_open_procfs$userns(r1, 0x0) (async, rerun: 32)
ptrace$setopts(0x4200, r1, 0x5, 0x38) (async)
pidfd_open(r0, 0x0) (async)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:50 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0xfffc, 0x0, @remote}}}, 0x30)
pidfd_getfd(0xffffffffffffffff, r0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0xfffc, 0x0, @remote}}}, 0x30) (async)
pidfd_getfd(0xffffffffffffffff, r0, 0x0) (async)

23:15:50 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000001c0)=[@decrefs], 0x0, 0x0, 0x0}) (async)
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
bind$can_j1939(r1, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18)

23:15:50 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc020660b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  835.667447][ T8490] binder: 8488:8490 ioctl c018620c 20000380 returned -22
23:15:50 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0xfffc, 0x0, @remote}}}, 0x30)
pidfd_getfd(0xffffffffffffffff, r0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0xfffc, 0x0, @remote}}}, 0x30) (async)
pidfd_getfd(0xffffffffffffffff, r0, 0x0) (async)

23:15:50 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:50 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:50 executing program 2:
clock_gettime(0x1, &(0x7f0000000040))
pselect6(0x40, &(0x7f0000000000)={0x7f, 0x3a, 0x8000000000000000, 0x81, 0x29a2, 0x3, 0xff, 0x5}, &(0x7f0000000080)={0xffffffffffffffff, 0x8000, 0x80, 0xff, 0x200, 0x1, 0xffff, 0xffffffff}, &(0x7f00000000c0)={0x6, 0x0, 0x3, 0x100000000, 0x7, 0xfffffffffffffff9, 0x40, 0xef}, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000180)={&(0x7f0000000140)={[0x40]}, 0x8})

23:15:50 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000001c0)=[@decrefs], 0x0, 0x0, 0x0})
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) (async)
bind$can_j1939(r1, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18)

23:15:50 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:50 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0186215, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:50 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:50 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f00000000c0)={0x0, @capture={0x1000, 0x0, {0x800, 0x81}, 0x4, 0x54}})
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @private1}}}, 0x30)

[  835.759445][ T8521] binder: 8520:8521 ioctl c018620c 20000380 returned -22
23:15:50 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:50 executing program 2:
clock_gettime(0x1, &(0x7f0000000040))
pselect6(0x40, &(0x7f0000000000)={0x7f, 0x3a, 0x8000000000000000, 0x81, 0x29a2, 0x3, 0xff, 0x5}, &(0x7f0000000080)={0xffffffffffffffff, 0x8000, 0x80, 0xff, 0x200, 0x1, 0xffff, 0xffffffff}, &(0x7f00000000c0)={0x6, 0x0, 0x3, 0x100000000, 0x7, 0xfffffffffffffff9, 0x40, 0xef}, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000180)={&(0x7f0000000140)={[0x40]}, 0x8})

23:15:50 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
r1 = syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f00000000c0)={0x0, @capture={0x1000, 0x0, {0x800, 0x81}, 0x4, 0x54}}) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @private1}}}, 0x30)

23:15:50 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)

23:15:50 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  835.823960][ T8532] binder: 8527:8532 ioctl c018620c 20000380 returned -1
[  835.826419][ T8533] binder: 8526:8533 ioctl c0186215 20000380 returned -22
23:15:50 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:50 executing program 2:
clock_gettime(0x1, &(0x7f0000000040))
pselect6(0x40, &(0x7f0000000000)={0x7f, 0x3a, 0x8000000000000000, 0x81, 0x29a2, 0x3, 0xff, 0x5}, &(0x7f0000000080)={0xffffffffffffffff, 0x8000, 0x80, 0xff, 0x200, 0x1, 0xffff, 0xffffffff}, &(0x7f00000000c0)={0x6, 0x0, 0x3, 0x100000000, 0x7, 0xfffffffffffffff9, 0x40, 0xef}, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000180)={&(0x7f0000000140)={[0x40]}, 0x8})

23:15:50 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async)
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)

23:15:50 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:50 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:50 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
r1 = syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f00000000c0)={0x0, @capture={0x1000, 0x0, {0x800, 0x81}, 0x4, 0x54}}) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @private1}}}, 0x30)

23:15:50 executing program 2:
clock_gettime(0x5, &(0x7f0000000040))
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fbdbdf251e0000000c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB="f20d1c80760000"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x8800)

23:15:50 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0})

[  835.900937][ T8548] binder: 8545:8548 ioctl c018620c 20000380 returned -1
23:15:50 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async)
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)

23:15:50 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30)
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
r2 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x3, 0x101100)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f00000001c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x20, "bc4ec3", "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"}}, 0x110)
ioctl$NBD_SET_SIZE(r1, 0xab02, 0x4)
memfd_secret(0x80000)
ioctl$VIDIOC_G_TUNER(r2, 0xc054561d, &(0x7f0000000100)={0xe4, "8ff29a2438c6ae8b730edd2b6bbfa67698f109b5029a27176ff33adecc2aeb29", 0x1, 0x100, 0x2, 0x8, 0x4, 0x4, 0x7a})
r4 = syz_open_dev$video4linux(&(0x7f0000000300), 0x6, 0x404400)
ioctl$VIDIOC_QUERY_EXT_CTRL(r4, 0xc0e85667, &(0x7f0000000340)={0x0, 0x3, "b6e45ecb6ad9fdc27fe6d433a76e2bdf7476197f8d0eee0a6c71a875e3041901", 0x401, 0xfffffffffffffffd, 0x7f, 0x7fff, 0x1, 0x5, 0x3, 0x9, [0x7, 0x9, 0x7ff, 0x3f]})
syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r1)

23:15:50 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:50 executing program 2:
clock_gettime(0x5, &(0x7f0000000040))
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fbdbdf251e0000000c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB="f20d1c80760000"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x8800)

23:15:50 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x54, 0x0, &(0x7f00000001c0)=[@release={0x40046306, 0x2}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0xe66993e61ad422d7}, @fda={0x66646185, 0x3, 0x2, 0x36}, @flat=@weak_handle={0x77682a85, 0x100, 0x1}}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

[  835.956470][ T8557] binder: 8552:8557 ioctl c00c620f 20000380 returned -22
[  835.962964][ T8561] binder: 8559:8561 ioctl c018620c 20000380 returned -1
23:15:50 executing program 5:
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620c, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:50 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x111, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x0, @remote}}}, 0x30)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff}, 0x111}}, 0xfffffffffffffcc0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0, r3}}, 0x18)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {&(0x7f0000000100), 0x4, r3, 0x30, 0x1, @ib={0x1b, 0x2, 0x4, {"6f5499e4052b4e0aeccf9cae3cc7a99f"}, 0x8f, 0x2, 0x7}}}, 0xa0)

23:15:50 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:50 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30) (async)
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) (async)
r2 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x3, 0x101100) (async)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f00000001c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x20, "bc4ec3", "f199e38c878584cdba68eb6493a531b103514977ff29a2f952866800b6caacf0593765589face31cf786a83684c6e058e7ba59e56ba3e11894dc4bc1d4538dc19b81f188a1dc7200d48090dcaf37eec32f4519cb2ab6384aa0cc6041a55edcc01d9669ec07b3046382d3c13a6f5a2a7c52485b8b5fc94d78cbe03b0af4ec0007d272f991b2c537fd85e86574d730949ee4cdb3310fd8d6bb0f14919bd026b7b7e54216c61ce7559259797c67b3ce8324b1436f49ff84d28c3e7e78f901477e11bd7f315967602e84683e56a8df51f62c50acda0a26dc13d73673200a46d21614f6260179ec94a45ac660aad3762a7195d02bf20bb6a5a6b9db321fea664c6c9d"}}, 0x110)
ioctl$NBD_SET_SIZE(r1, 0xab02, 0x4)
memfd_secret(0x80000) (async)
ioctl$VIDIOC_G_TUNER(r2, 0xc054561d, &(0x7f0000000100)={0xe4, "8ff29a2438c6ae8b730edd2b6bbfa67698f109b5029a27176ff33adecc2aeb29", 0x1, 0x100, 0x2, 0x8, 0x4, 0x4, 0x7a}) (async)
r4 = syz_open_dev$video4linux(&(0x7f0000000300), 0x6, 0x404400)
ioctl$VIDIOC_QUERY_EXT_CTRL(r4, 0xc0e85667, &(0x7f0000000340)={0x0, 0x3, "b6e45ecb6ad9fdc27fe6d433a76e2bdf7476197f8d0eee0a6c71a875e3041901", 0x401, 0xfffffffffffffffd, 0x7f, 0x7fff, 0x1, 0x5, 0x3, 0x9, [0x7, 0x9, 0x7ff, 0x3f]}) (async)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r1)

23:15:50 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x54, 0x0, &(0x7f00000001c0)=[@release={0x40046306, 0x2}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0xe66993e61ad422d7}, @fda={0x66646185, 0x3, 0x2, 0x36}, @flat=@weak_handle={0x77682a85, 0x100, 0x1}}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

23:15:50 executing program 5:
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620c, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:50 executing program 2:
clock_gettime(0x5, &(0x7f0000000040))
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fbdbdf251e0000000c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB="f20d1c80760000"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x8800)
clock_gettime(0x5, &(0x7f0000000040)) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fbdbdf251e0000000c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB="f20d1c80760000"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x8800) (async)

23:15:50 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x111, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x0, @remote}}}, 0x30)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff}, 0x111}}, 0xfffffffffffffcc0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0, r3}}, 0x18)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {&(0x7f0000000100), 0x4, r3, 0x30, 0x1, @ib={0x1b, 0x2, 0x4, {"6f5499e4052b4e0aeccf9cae3cc7a99f"}, 0x8f, 0x2, 0x7}}}, 0xa0)

23:15:50 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x300, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:50 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30) (async)
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
r2 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x3, 0x101100) (async)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f00000001c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x20, "bc4ec3", "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"}}, 0x110) (async)
ioctl$NBD_SET_SIZE(r1, 0xab02, 0x4) (async)
memfd_secret(0x80000) (async)
ioctl$VIDIOC_G_TUNER(r2, 0xc054561d, &(0x7f0000000100)={0xe4, "8ff29a2438c6ae8b730edd2b6bbfa67698f109b5029a27176ff33adecc2aeb29", 0x1, 0x100, 0x2, 0x8, 0x4, 0x4, 0x7a})
r4 = syz_open_dev$video4linux(&(0x7f0000000300), 0x6, 0x404400)
ioctl$VIDIOC_QUERY_EXT_CTRL(r4, 0xc0e85667, &(0x7f0000000340)={0x0, 0x3, "b6e45ecb6ad9fdc27fe6d433a76e2bdf7476197f8d0eee0a6c71a875e3041901", 0x401, 0xfffffffffffffffd, 0x7f, 0x7fff, 0x1, 0x5, 0x3, 0x9, [0x7, 0x9, 0x7ff, 0x3f]})
syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r1)

23:15:50 executing program 2:
clock_gettime(0x5, &(0x7f0000000040))
clock_gettime(0x1, &(0x7f0000000000))

23:15:50 executing program 5:
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620c, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:50 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x111, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x0, @remote}}}, 0x30)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff}, 0x111}}, 0xfffffffffffffcc0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0, r3}}, 0x18)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {&(0x7f0000000100), 0x4, r3, 0x30, 0x1, @ib={0x1b, 0x2, 0x4, {"6f5499e4052b4e0aeccf9cae3cc7a99f"}, 0x8f, 0x2, 0x7}}}, 0xa0)

23:15:50 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x54, 0x0, &(0x7f00000001c0)=[@release={0x40046306, 0x2}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0xe66993e61ad422d7}, @fda={0x66646185, 0x3, 0x2, 0x36}, @flat=@weak_handle={0x77682a85, 0x100, 0x1}}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

23:15:50 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0})

23:15:50 executing program 2:
clock_gettime(0x5, &(0x7f0000000040))
clock_gettime(0x1, &(0x7f0000000000))
clock_gettime(0x5, &(0x7f0000000040)) (async)
clock_gettime(0x1, &(0x7f0000000000)) (async)

23:15:50 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:50 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x111, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x0, @remote}}}, 0x30)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff}, 0x111}}, 0xfffffffffffffcc0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0, r3}}, 0x18)

23:15:50 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x500, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:50 executing program 4:
ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305616, &(0x7f00000001c0)={0x0, {0x4, 0xfffffff7}})
ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000080)=@mmap={0x2, 0x7, 0x4, 0x0, 0x7fffffff, {0x0, 0xea60}, {0x1, 0x8, 0xfe, 0x8, 0x0, 0x7, "a5052d53"}, 0x9, 0x1, {}, 0x1045})
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r0 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
r1 = syz_open_dev$video4linux(&(0x7f0000000100), 0x2, 0x16540)
ioctl$VIDIOC_S_EDID(r1, 0xc0285629, &(0x7f0000000180)={0x0, 0xffff, 0x10000, '\x00', &(0x7f0000000140)=0x9})
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000001180))
ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000000)={0x2, 0x1, 0x1})

23:15:50 executing program 2:
clock_gettime(0x5, &(0x7f0000000040)) (async)
clock_gettime(0x1, &(0x7f0000000000))

23:15:50 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x600, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:50 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x111, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x0, @remote}}}, 0x30)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0xfffffffffffffcc0)

23:15:50 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:50 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0})

23:15:50 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:50 executing program 2:
clock_gettime(0x5, &(0x7f0000000040))
pselect6(0x40, &(0x7f0000000080)={0xc23b, 0x10001, 0x3, 0xb, 0x1, 0x8, 0xbc3d, 0x3af1521b}, &(0x7f00000000c0)={0x46e8fffa, 0xffffffff, 0x5, 0x2, 0x400000000000000, 0x8000, 0x4, 0x266}, &(0x7f0000000100)={0x7fff, 0x7, 0x2ef176a7, 0x4, 0x0, 0xffff, 0x7, 0x6}, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000180)={[0xd70a]}, 0x8})
clock_gettime(0x5, &(0x7f0000000000))
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000200), 0x4)

23:15:50 executing program 4:
ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305616, &(0x7f00000001c0)={0x0, {0x4, 0xfffffff7}})
ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000080)=@mmap={0x2, 0x7, 0x4, 0x0, 0x7fffffff, {0x0, 0xea60}, {0x1, 0x8, 0xfe, 0x8, 0x0, 0x7, "a5052d53"}, 0x9, 0x1, {}, 0x1045}) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
r0 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2) (async)
r1 = syz_open_dev$video4linux(&(0x7f0000000100), 0x2, 0x16540)
ioctl$VIDIOC_S_EDID(r1, 0xc0285629, &(0x7f0000000180)={0x0, 0xffff, 0x10000, '\x00', &(0x7f0000000140)=0x9}) (async)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000001180)) (async)
ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000000)={0x2, 0x1, 0x1})

23:15:50 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x111, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x0, @remote}}}, 0x30)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0xfffffffffffffcc0)

23:15:50 executing program 2:
clock_gettime(0x5, &(0x7f0000000040)) (async)
pselect6(0x40, &(0x7f0000000080)={0xc23b, 0x10001, 0x3, 0xb, 0x1, 0x8, 0xbc3d, 0x3af1521b}, &(0x7f00000000c0)={0x46e8fffa, 0xffffffff, 0x5, 0x2, 0x400000000000000, 0x8000, 0x4, 0x266}, &(0x7f0000000100)={0x7fff, 0x7, 0x2ef176a7, 0x4, 0x0, 0xffff, 0x7, 0x6}, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000180)={[0xd70a]}, 0x8}) (async)
clock_gettime(0x5, &(0x7f0000000000)) (async)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000200), 0x4)

23:15:50 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x700, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:50 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0})

23:15:50 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x111, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x0, @remote}}}, 0x30)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0xfffffffffffffcc0)

23:15:50 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:50 executing program 4:
ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305616, &(0x7f00000001c0)={0x0, {0x4, 0xfffffff7}}) (async)
ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000080)=@mmap={0x2, 0x7, 0x4, 0x0, 0x7fffffff, {0x0, 0xea60}, {0x1, 0x8, 0xfe, 0x8, 0x0, 0x7, "a5052d53"}, 0x9, 0x1, {}, 0x1045}) (async, rerun: 32)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (rerun: 32)
r0 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
r1 = syz_open_dev$video4linux(&(0x7f0000000100), 0x2, 0x16540)
ioctl$VIDIOC_S_EDID(r1, 0xc0285629, &(0x7f0000000180)={0x0, 0xffff, 0x10000, '\x00', &(0x7f0000000140)=0x9}) (async)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000001180)) (async)
ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000000)={0x2, 0x1, 0x1})

23:15:50 executing program 2:
clock_gettime(0x5, &(0x7f0000000040)) (async)
pselect6(0x40, &(0x7f0000000080)={0xc23b, 0x10001, 0x3, 0xb, 0x1, 0x8, 0xbc3d, 0x3af1521b}, &(0x7f00000000c0)={0x46e8fffa, 0xffffffff, 0x5, 0x2, 0x400000000000000, 0x8000, 0x4, 0x266}, &(0x7f0000000100)={0x7fff, 0x7, 0x2ef176a7, 0x4, 0x0, 0xffff, 0x7, 0x6}, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000180)={[0xd70a]}, 0x8}) (async)
clock_gettime(0x5, &(0x7f0000000000))
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000200), 0x4)

23:15:50 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x111, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x0, @remote}}}, 0x30)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0xfffffffffffffcc0)

23:15:50 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r1 = memfd_secret(0x80000)
write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f00000000c0)={0xa, 0x4}, 0xc)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)=<r2=>0x0)
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000003c0)={{}, r2, 0x2, @unused=[0xfffffffffffffffd, 0x5760, 0x1ff, 0xfffffffffffffffc], @name="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"})

23:15:50 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0xff00, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:50 executing program 2:
clock_gettime(0x6, &(0x7f0000000000))

23:15:50 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, 0x30)

[  836.356618][ T8664] binder: 8663:8664 ioctl c018620c 20000380 returned -1
23:15:50 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x111, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x0, @remote}}}, 0x30)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0xfffffffffffffcc0)

23:15:50 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:50 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:50 executing program 2:
clock_gettime(0x6, &(0x7f0000000000))
clock_gettime(0x6, &(0x7f0000000000)) (async)

[  836.405144][ T8680] binder: 8679:8680 ioctl 80089418 20000080 returned -22
[  836.434625][ T8687] binder: 8686:8687 ioctl c018620c 20000380 returned -1
23:15:50 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x111, 0x2}}, 0x20)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0xfffffffffffffcc0)

23:15:50 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, 0x30)

23:15:50 executing program 2:
clock_gettime(0x6, &(0x7f0000000000))
clock_gettime(0x6, &(0x7f0000000000)) (async)

23:15:50 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  836.449929][ T8680] binder: 8679:8680 ioctl 5000943a 200003c0 returned -22
23:15:50 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async)
r1 = memfd_secret(0x80000)
write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f00000000c0)={0xa, 0x4}, 0xc) (async)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)=<r2=>0x0)
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000003c0)={{}, r2, 0x2, @unused=[0xfffffffffffffffd, 0x5760, 0x1ff, 0xfffffffffffffffc], @name="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"})

23:15:50 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:50 executing program 3:
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0xfffffffffffffcc0)

23:15:50 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, 0x30)

23:15:51 executing program 2:
clock_gettime(0x5, &(0x7f0000000040))
clock_getres(0x5, &(0x7f0000000000))

23:15:51 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:51 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0xfffffffffffffcc0)

23:15:51 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0})

[  836.491632][ T8697] binder: 8695:8697 ioctl c018620c 20000380 returned -1
[  836.530111][ T8707] binder: 8704:8707 ioctl 80089418 20000080 returned -22
23:15:51 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000000c0)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000004c0)={r2, 0x0, 0x8, 0x1})
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30)
r3 = memfd_secret(0x0)
getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f00000008c0)={@local, @private}, &(0x7f0000000900)=0xc)

23:15:51 executing program 2:
clock_gettime(0x5, &(0x7f0000000040)) (async)
clock_getres(0x5, &(0x7f0000000000))

23:15:51 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0xfffffffffffffcc0)

23:15:51 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff}) (async)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000000c0)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000004c0)={r2, 0x0, 0x8, 0x1}) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30) (async)
r3 = memfd_secret(0x0)
getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f00000008c0)={@local, @private}, &(0x7f0000000900)=0xc)

23:15:51 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r1 = memfd_secret(0x80000)
write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f00000000c0)={0xa, 0x4}, 0xc)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)=<r2=>0x0)
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000003c0)={{}, r2, 0x2, @unused=[0xfffffffffffffffd, 0x5760, 0x1ff, 0xfffffffffffffffc], @name="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"})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async)
memfd_secret(0x80000) (async)
write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f00000000c0)={0xa, 0x4}, 0xc) (async)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) (async)
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000003c0)={{}, r2, 0x2, @unused=[0xfffffffffffffffd, 0x5760, 0x1ff, 0xfffffffffffffffc], @name="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"}) (async)

23:15:51 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:51 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0xfffffffffffffcc0)

23:15:51 executing program 2:
clock_gettime(0x5, &(0x7f0000000040))
clock_getres(0x5, &(0x7f0000000000))
clock_gettime(0x5, &(0x7f0000000040)) (async)
clock_getres(0x5, &(0x7f0000000000)) (async)

[  836.553655][ T8713] binder: 8710:8713 ioctl 4018620d 0 returned -22
[  836.555432][ T8706] binder: 8704:8706 ioctl 5000943a 200003c0 returned -22
[  836.586721][ T8713] binder: 8710:8713 ioctl c018620c 20000380 returned -1
23:15:51 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:51 executing program 2:
clock_gettime(0x5, &(0x7f0000000040))
r0 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000001180))
ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @bt={0x8001, 0x5544ad69, 0x0, 0x1, 0x17, 0x9, 0x7f, 0x9, 0xffff, 0x800, 0xd95, 0x9, 0x1, 0x1, 0x4, 0x8, {0x7, 0x3}, 0x2, 0x60}})

23:15:51 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:51 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0xfffffffffffffcc0)

23:15:51 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff}) (async)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000000c0)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000004c0)={r2, 0x0, 0x8, 0x1}) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30) (async)
r3 = memfd_secret(0x0)
getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f00000008c0)={@local, @private}, &(0x7f0000000900)=0xc)

23:15:51 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
r1 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
r2 = syz_open_dev$cec(&(0x7f0000000300), 0x0, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000001180)={0x0, 0x0, 0x3})
r3 = pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000280)=@mmap={0x14c, 0x3, 0x4, 0x0, 0x5, {}, {0x2, 0x0, 0x63, 0x5, 0x3f, 0x6, "e78b904d"}, 0x6, 0x1, {}, 0x3ff, 0x0, r3})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f00000003c0)={{r1}, 0x0, 0x14, @unused=[0x3f, 0x5, 0x80000000, 0x3], @subvolid=0xed})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x6c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done, @dead_binder_done, @increfs], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)=[@increfs_done={0x40106308, 0x1}], 0xc7, 0x0, &(0x7f0000000180)="3ee70847c570a7ad6a609f55ff15d801316927af5fe0723467b0efdbe606a477fa8caf4872d02c314efca77c627ab55e3f2f97c8898c6c57f1b69ff4188874ac1c13cc9d9bbfa64c72bf4d3e55a9786610b90736ce1d4f11c10fd7f4ab2494d62c30499d39d3441674468bc7f8783cf640d403c48165486532d768d4e1f96ecd00f9d5c5d32d993e4f0a07444afe189af9694aa8a82a0f9f66696a42cecc9c989920925c89015fccd2458d16ad0e3706534700ce2593ffe3a8f870f344f7f8c86cbff819ff5ae6"})

23:15:51 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:51 executing program 3:
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0xfffffffffffffcc0)

23:15:51 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  836.647439][ T8732] binder: 8728:8732 ioctl 80089418 20000080 returned -22
[  836.658293][ T8736] binder: 8735:8736 ioctl 4018620d 0 returned -22
[  836.666663][ T8732] binder: 8728:8732 ioctl 5000943a 200003c0 returned -22
[  836.686527][ T8736] binder: 8735:8736 ioctl c018620c 20000380 returned -1
23:15:51 executing program 2:
clock_gettime(0x5, &(0x7f0000000040))
r0 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000001180))
ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @bt={0x8001, 0x5544ad69, 0x0, 0x1, 0x17, 0x9, 0x7f, 0x9, 0xffff, 0x800, 0xd95, 0x9, 0x1, 0x1, 0x4, 0x8, {0x7, 0x3}, 0x2, 0x60}})
clock_gettime(0x5, &(0x7f0000000040)) (async)
syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2) (async)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000001180)) (async)
ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @bt={0x8001, 0x5544ad69, 0x0, 0x1, 0x17, 0x9, 0x7f, 0x9, 0xffff, 0x800, 0xd95, 0x9, 0x1, 0x1, 0x4, 0x8, {0x7, 0x3}, 0x2, 0x60}}) (async)

23:15:51 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:51 executing program 4:
sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1024000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "efea2740f92e5936f6853812c03fc27b"}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xfff}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x810)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30)

23:15:51 executing program 3:
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0xfffffffffffffcc0)

23:15:51 executing program 2:
clock_gettime(0x5, &(0x7f0000000040)) (async)
r0 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000001180)) (async, rerun: 32)
ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @bt={0x8001, 0x5544ad69, 0x0, 0x1, 0x17, 0x9, 0x7f, 0x9, 0xffff, 0x800, 0xd95, 0x9, 0x1, 0x1, 0x4, 0x8, {0x7, 0x3}, 0x2, 0x60}}) (rerun: 32)

23:15:51 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:51 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
r1 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2) (async, rerun: 64)
r2 = syz_open_dev$cec(&(0x7f0000000300), 0x0, 0x2) (rerun: 64)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000001180)={0x0, 0x0, 0x3}) (async)
r3 = pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000280)=@mmap={0x14c, 0x3, 0x4, 0x0, 0x5, {}, {0x2, 0x0, 0x63, 0x5, 0x3f, 0x6, "e78b904d"}, 0x6, 0x1, {}, 0x3ff, 0x0, r3}) (async)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f00000003c0)={{r1}, 0x0, 0x14, @unused=[0x3f, 0x5, 0x80000000, 0x3], @subvolid=0xed})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x6c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done, @dead_binder_done, @increfs], 0x0, 0x0, 0x0}) (async, rerun: 64)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)=[@increfs_done={0x40106308, 0x1}], 0xc7, 0x0, &(0x7f0000000180)="3ee70847c570a7ad6a609f55ff15d801316927af5fe0723467b0efdbe606a477fa8caf4872d02c314efca77c627ab55e3f2f97c8898c6c57f1b69ff4188874ac1c13cc9d9bbfa64c72bf4d3e55a9786610b90736ce1d4f11c10fd7f4ab2494d62c30499d39d3441674468bc7f8783cf640d403c48165486532d768d4e1f96ecd00f9d5c5d32d993e4f0a07444afe189af9694aa8a82a0f9f66696a42cecc9c989920925c89015fccd2458d16ad0e3706534700ce2593ffe3a8f870f344f7f8c86cbff819ff5ae6"}) (rerun: 64)

23:15:51 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620c, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  836.744855][ T8763] binder: 8760:8763 ioctl 5000943f 200003c0 returned -22
[  836.755061][ T8764] binder: 8758:8764 ioctl 4018620d 0 returned -22
[  836.773606][ T8764] binder: 8758:8764 ioctl c018620c 20000380 returned -1
23:15:51 executing program 4:
sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1024000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "efea2740f92e5936f6853812c03fc27b"}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xfff}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x810)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30)

23:15:51 executing program 3:
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0xfffffffffffffcc0)

23:15:51 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0xff000000, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:51 executing program 2:
clock_gettime(0x5, &(0x7f0000000040))
clock_gettime(0x6, &(0x7f0000000000))

23:15:51 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620c, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:51 executing program 4:
sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1024000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "efea2740f92e5936f6853812c03fc27b"}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xfff}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x810)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30)

23:15:51 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0)

23:15:51 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:51 executing program 2:
clock_gettime(0x5, &(0x7f0000000040))
clock_gettime(0x6, &(0x7f0000000000))
clock_gettime(0x5, &(0x7f0000000040)) (async)
clock_gettime(0x6, &(0x7f0000000000)) (async)

23:15:51 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620c, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  836.891873][ T8785] binder: 8776:8785 ioctl 5000943f 200003c0 returned -22
23:15:52 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) (async)
r1 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
r2 = syz_open_dev$cec(&(0x7f0000000300), 0x0, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000001180)={0x0, 0x0, 0x3}) (async)
r3 = pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000280)=@mmap={0x14c, 0x3, 0x4, 0x0, 0x5, {}, {0x2, 0x0, 0x63, 0x5, 0x3f, 0x6, "e78b904d"}, 0x6, 0x1, {}, 0x3ff, 0x0, r3}) (async)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f00000003c0)={{r1}, 0x0, 0x14, @unused=[0x3f, 0x5, 0x80000000, 0x3], @subvolid=0xed})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x6c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done, @dead_binder_done, @increfs], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)=[@increfs_done={0x40106308, 0x1}], 0xc7, 0x0, &(0x7f0000000180)="3ee70847c570a7ad6a609f55ff15d801316927af5fe0723467b0efdbe606a477fa8caf4872d02c314efca77c627ab55e3f2f97c8898c6c57f1b69ff4188874ac1c13cc9d9bbfa64c72bf4d3e55a9786610b90736ce1d4f11c10fd7f4ab2494d62c30499d39d3441674468bc7f8783cf640d403c48165486532d768d4e1f96ecd00f9d5c5d32d993e4f0a07444afe189af9694aa8a82a0f9f66696a42cecc9c989920925c89015fccd2458d16ad0e3706534700ce2593ffe3a8f870f344f7f8c86cbff819ff5ae6"})

23:15:52 executing program 4:
r0 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0)
waitid$P_PIDFD(0x3, r0, 0x0, 0x2, &(0x7f0000000140))
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
memfd_secret(0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={<r2=>0xffffffffffffffff}, 0x327, 0x4}}, 0x20)
r3 = memfd_secret(0x80000)
write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x0, @remote}, r2}}, 0x92)

23:15:52 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0)

23:15:52 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0xffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:52 executing program 2:
clock_gettime(0x5, &(0x7f0000000040))
clock_gettime(0x6, &(0x7f0000000000))

23:15:52 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0)

23:15:52 executing program 2:
clock_gettime(0x5, &(0x7f0000000040))
clock_getres(0x2, &(0x7f0000000000))

23:15:52 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0)

23:15:52 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:52 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20)

23:15:52 executing program 4:
r0 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0)
waitid$P_PIDFD(0x3, r0, 0x0, 0x2, &(0x7f0000000140))
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
memfd_secret(0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={<r2=>0xffffffffffffffff}, 0x327, 0x4}}, 0x20)
r3 = memfd_secret(0x80000)
write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x0, @remote}, r2}}, 0x92)
memfd_secret(0x0) (async)
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) (async)
waitid$P_PIDFD(0x3, r0, 0x0, 0x2, &(0x7f0000000140)) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
memfd_secret(0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000), 0x327, 0x4}}, 0x20) (async)
memfd_secret(0x80000) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x0, @remote}, r2}}, 0x92) (async)

23:15:52 executing program 2:
clock_gettime(0x5, &(0x7f0000000040))
clock_getres(0x2, &(0x7f0000000000))
clock_gettime(0x5, &(0x7f0000000040)) (async)
clock_getres(0x2, &(0x7f0000000000)) (async)

[  837.688758][ T8817] binder: 8813:8817 ioctl c018620c 0 returned -14
[  837.718152][ T8821] binder: 8819:8821 ioctl 5000943f 200003c0 returned -22
23:15:53 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1}, @flat=@weak_handle={0x77682a85, 0x1, 0x3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000140)}, 0x1000}], 0x0, 0x0, 0x0})

23:15:53 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0)

23:15:53 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20)

23:15:53 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:53 executing program 4:
r0 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) (async)
waitid$P_PIDFD(0x3, r0, 0x0, 0x2, &(0x7f0000000140)) (async)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
memfd_secret(0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={<r2=>0xffffffffffffffff}, 0x327, 0x4}}, 0x20)
r3 = memfd_secret(0x80000)
write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x0, @remote}, r2}}, 0x92)

23:15:53 executing program 2:
clock_gettime(0x5, &(0x7f0000000040))
clock_getres(0x2, &(0x7f0000000000))
clock_gettime(0x5, &(0x7f0000000040)) (async)
clock_getres(0x2, &(0x7f0000000000)) (async)

23:15:53 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20)

23:15:53 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:53 executing program 2:
clock_gettime(0x5, &(0x7f0000000040))
write$damon_monitor_on(0xffffffffffffffff, &(0x7f0000000000), 0x3)

[  838.572727][ T8850] binder: 8839:8850 ioctl c018620c 0 returned -14
23:15:53 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)}}, 0xfffffffffffffcc0)

23:15:53 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1}, @flat=@weak_handle={0x77682a85, 0x1, 0x3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000140)}, 0x1000}], 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1}, @flat=@weak_handle={0x77682a85, 0x1, 0x3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000140)}, 0x1000}], 0x0, 0x0, 0x0}) (async)

23:15:53 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0)

23:15:53 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:53 executing program 2:
clock_gettime(0x5, &(0x7f0000000040)) (async)
write$damon_monitor_on(0xffffffffffffffff, &(0x7f0000000000), 0x3)

23:15:53 executing program 4:
socketpair(0x11, 0xa, 0x20006, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r2 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r2, 0xb701, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
clock_gettime(0x0, &(0x7f00000002c0)={<r6=>0x0, <r7=>0x0})
ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000001180))
ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000480)={0x2, 0x1, @start={0x0, 0x0, "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", "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"}, [0x3, 0x8, 0xbf8, 0x1, 0x0, 0x400, 0x4, 0x6, 0x9, 0x4, 0x9, 0x20, 0x5e, 0x81, 0x80000001, 0x4, 0x4, 0x8, 0x3, 0xfffffffffffffffd, 0x5, 0x1, 0x3ff, 0x80, 0x8000, 0x14f, 0x52, 0x100000000, 0x6, 0xf7b7, 0x66b, 0x8, 0x80000000, 0x87, 0xfffffffffffffc01, 0x6, 0x7, 0x7, 0xfffffffffffff90a, 0x8, 0x8, 0x0, 0x5, 0x23, 0x1de9, 0x20, 0xfffffffffffffeff, 0x0, 0x3, 0x5, 0x5, 0x3, 0x3, 0x6, 0x8f14, 0x94b, 0x4, 0x9, 0x80000000, 0x8, 0x0, 0x1, 0x7fffffffffffffff, 0x3]})
ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000400)=@multiplanar_userptr={0x0, 0x3, 0x4, 0x10000, 0xd1, {r6, r7/1000+60000}, {0x4, 0x0, 0x81, 0x47, 0x5, 0x9, "96c35b38"}, 0x6, 0x2, {&(0x7f0000000380)=[{0x7, 0xffffffe1, {&(0x7f0000000300)}, 0x1f}, {0x5, 0x81, {&(0x7f0000000340)}, 0x5}]}, 0x5, 0x0, r2})
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0, r5}}, 0x18)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000180)={0x10, 0x30, 0xfa00, {&(0x7f0000000140), 0x4, {0xa, 0x4e24, 0x3, @local, 0x1}, r5}}, 0x38)
r8 = syz_open_dev$ndb(&(0x7f0000000280), 0x0, 0x111c02)
ioctl$NBD_CLEAR_SOCK(r8, 0xab04)
write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30)
r9 = syz_open_dev$cec(&(0x7f0000000000), 0x2, 0x2)
ioctl$VIDIOC_ENUMOUTPUT(r9, 0xc0485630, &(0x7f00000000c0)={0xffffff93, "7a3cfca83de65f0609d4d70beb6bc173156c6af4b46e76ef262425f9475d9c15", 0x2, 0x6, 0x6, 0x100, 0x6})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1014})

23:15:53 executing program 5:
r0 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0)
waitid$P_PIDFD(0x3, r0, 0x0, 0x2, &(0x7f0000000140))
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
memfd_secret(0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={<r2=>0xffffffffffffffff}, 0x327, 0x4}}, 0x20)
r3 = memfd_secret(0x80000)
write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x0, @remote}, r2}}, 0x92)

[  838.662937][ T8862] binder: 8861:8862 ioctl c018620c 0 returned -14
[  838.683757][ T8866] binder: BINDER_SET_CONTEXT_MGR already set
23:15:53 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
r1 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
r2 = syz_open_dev$cec(&(0x7f0000000300), 0x0, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000001180)={0x0, 0x0, 0x3})
r3 = pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000280)=@mmap={0x14c, 0x3, 0x4, 0x0, 0x5, {}, {0x2, 0x0, 0x63, 0x5, 0x3f, 0x6, "e78b904d"}, 0x6, 0x1, {}, 0x3ff, 0x0, r3})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f00000003c0)={{r1}, 0x0, 0x14, @unused=[0x3f, 0x5, 0x80000000, 0x3], @subvolid=0xed})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x6c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done, @dead_binder_done, @increfs], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)=[@increfs_done={0x40106308, 0x1}], 0xc7, 0x0, &(0x7f0000000180)="3ee70847c570a7ad6a609f55ff15d801316927af5fe0723467b0efdbe606a477fa8caf4872d02c314efca77c627ab55e3f2f97c8898c6c57f1b69ff4188874ac1c13cc9d9bbfa64c72bf4d3e55a9786610b90736ce1d4f11c10fd7f4ab2494d62c30499d39d3441674468bc7f8783cf640d403c48165486532d768d4e1f96ecd00f9d5c5d32d993e4f0a07444afe189af9694aa8a82a0f9f66696a42cecc9c989920925c89015fccd2458d16ad0e3706534700ce2593ffe3a8f870f344f7f8c86cbff819ff5ae6"})

23:15:53 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:53 executing program 4:
socketpair(0x11, 0xa, 0x20006, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0) (async)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
r2 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) (async)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
clock_gettime(0x0, &(0x7f00000002c0)={<r6=>0x0, <r7=>0x0})
ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000001180))
ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000480)={0x2, 0x1, @start={0x0, 0x0, "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", "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"}, [0x3, 0x8, 0xbf8, 0x1, 0x0, 0x400, 0x4, 0x6, 0x9, 0x4, 0x9, 0x20, 0x5e, 0x81, 0x80000001, 0x4, 0x4, 0x8, 0x3, 0xfffffffffffffffd, 0x5, 0x1, 0x3ff, 0x80, 0x8000, 0x14f, 0x52, 0x100000000, 0x6, 0xf7b7, 0x66b, 0x8, 0x80000000, 0x87, 0xfffffffffffffc01, 0x6, 0x7, 0x7, 0xfffffffffffff90a, 0x8, 0x8, 0x0, 0x5, 0x23, 0x1de9, 0x20, 0xfffffffffffffeff, 0x0, 0x3, 0x5, 0x5, 0x3, 0x3, 0x6, 0x8f14, 0x94b, 0x4, 0x9, 0x80000000, 0x8, 0x0, 0x1, 0x7fffffffffffffff, 0x3]})
ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000400)=@multiplanar_userptr={0x0, 0x3, 0x4, 0x10000, 0xd1, {r6, r7/1000+60000}, {0x4, 0x0, 0x81, 0x47, 0x5, 0x9, "96c35b38"}, 0x6, 0x2, {&(0x7f0000000380)=[{0x7, 0xffffffe1, {&(0x7f0000000300)}, 0x1f}, {0x5, 0x81, {&(0x7f0000000340)}, 0x5}]}, 0x5, 0x0, r2})
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0, r5}}, 0x18) (async)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000180)={0x10, 0x30, 0xfa00, {&(0x7f0000000140), 0x4, {0xa, 0x4e24, 0x3, @local, 0x1}, r5}}, 0x38) (async)
r8 = syz_open_dev$ndb(&(0x7f0000000280), 0x0, 0x111c02)
ioctl$NBD_CLEAR_SOCK(r8, 0xab04) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30)
r9 = syz_open_dev$cec(&(0x7f0000000000), 0x2, 0x2)
ioctl$VIDIOC_ENUMOUTPUT(r9, 0xc0485630, &(0x7f00000000c0)={0xffffff93, "7a3cfca83de65f0609d4d70beb6bc173156c6af4b46e76ef262425f9475d9c15", 0x2, 0x6, 0x6, 0x100, 0x6}) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1014})

23:15:53 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1}, @flat=@weak_handle={0x77682a85, 0x1, 0x3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000140)}, 0x1000}], 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1}, @flat=@weak_handle={0x77682a85, 0x1, 0x3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000140)}, 0x1000}], 0x0, 0x0, 0x0}) (async)

[  838.709408][ T8866] binder: 8863:8866 ioctl 4018620d 20000000 returned -16
23:15:53 executing program 2:
clock_gettime(0x5, &(0x7f0000000040))
write$damon_monitor_on(0xffffffffffffffff, &(0x7f0000000000), 0x3)
clock_gettime(0x5, &(0x7f0000000040)) (async)
write$damon_monitor_on(0xffffffffffffffff, &(0x7f0000000000), 0x3) (async)

23:15:53 executing program 5:
r0 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0)
waitid$P_PIDFD(0x3, r0, 0x0, 0x2, &(0x7f0000000140))
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
memfd_secret(0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={<r2=>0xffffffffffffffff}, 0x327, 0x4}}, 0x20)
r3 = memfd_secret(0x80000)
write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x0, @remote}, r2}}, 0x92)

23:15:53 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:53 executing program 4:
socketpair(0x11, 0xa, 0x20006, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0) (async)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
r2 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) (async)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 64)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20) (async, rerun: 64)
clock_gettime(0x0, &(0x7f00000002c0)={<r6=>0x0, <r7=>0x0})
ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000001180)) (async)
ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000480)={0x2, 0x1, @start={0x0, 0x0, "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", "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"}, [0x3, 0x8, 0xbf8, 0x1, 0x0, 0x400, 0x4, 0x6, 0x9, 0x4, 0x9, 0x20, 0x5e, 0x81, 0x80000001, 0x4, 0x4, 0x8, 0x3, 0xfffffffffffffffd, 0x5, 0x1, 0x3ff, 0x80, 0x8000, 0x14f, 0x52, 0x100000000, 0x6, 0xf7b7, 0x66b, 0x8, 0x80000000, 0x87, 0xfffffffffffffc01, 0x6, 0x7, 0x7, 0xfffffffffffff90a, 0x8, 0x8, 0x0, 0x5, 0x23, 0x1de9, 0x20, 0xfffffffffffffeff, 0x0, 0x3, 0x5, 0x5, 0x3, 0x3, 0x6, 0x8f14, 0x94b, 0x4, 0x9, 0x80000000, 0x8, 0x0, 0x1, 0x7fffffffffffffff, 0x3]}) (async)
ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000400)=@multiplanar_userptr={0x0, 0x3, 0x4, 0x10000, 0xd1, {r6, r7/1000+60000}, {0x4, 0x0, 0x81, 0x47, 0x5, 0x9, "96c35b38"}, 0x6, 0x2, {&(0x7f0000000380)=[{0x7, 0xffffffe1, {&(0x7f0000000300)}, 0x1f}, {0x5, 0x81, {&(0x7f0000000340)}, 0x5}]}, 0x5, 0x0, r2}) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0, r5}}, 0x18) (async)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000180)={0x10, 0x30, 0xfa00, {&(0x7f0000000140), 0x4, {0xa, 0x4e24, 0x3, @local, 0x1}, r5}}, 0x38) (async)
r8 = syz_open_dev$ndb(&(0x7f0000000280), 0x0, 0x111c02)
ioctl$NBD_CLEAR_SOCK(r8, 0xab04)
write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30) (async)
r9 = syz_open_dev$cec(&(0x7f0000000000), 0x2, 0x2)
ioctl$VIDIOC_ENUMOUTPUT(r9, 0xc0485630, &(0x7f00000000c0)={0xffffff93, "7a3cfca83de65f0609d4d70beb6bc173156c6af4b46e76ef262425f9475d9c15", 0x2, 0x6, 0x6, 0x100, 0x6}) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1014})

23:15:53 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:53 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:53 executing program 5:
r0 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0)
waitid$P_PIDFD(0x3, r0, 0x0, 0x2, &(0x7f0000000140))
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
memfd_secret(0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={<r2=>0xffffffffffffffff}, 0x327, 0x4}}, 0x20)
r3 = memfd_secret(0x80000)
write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x0, @remote}, r2}}, 0x92)

23:15:53 executing program 2:
r0 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000001180))
ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000080)={0x1, "44fbebba163322a97348915d0b7977d34cb8af10395a91d97591b88582a594eb", 0x40, 0x5, 0x2, 0x4, 0x2})
r1 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180))
ioctl$VIDIOC_ENUMAUDOUT(r1, 0xc0345642, &(0x7f0000000000)={0x2fa6, "defc499b128426bb2b40a0de7baaeb8f0c4dbc99ef55705f49da622c628eac76", 0x2, 0x1})
clock_gettime(0x5, &(0x7f0000000040))
r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$VIDIOC_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f0000000100)={0x0, 0x0, '\x00', {0x0, @reserved}})

[  838.763750][ T8879] binder: 8878:8879 ioctl 5000943f 200003c0 returned -22
[  838.783617][ T8891] binder: BINDER_SET_CONTEXT_MGR already set
23:15:53 executing program 4:
ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f00000000c0)={0x0, 0xe63, @status={[0x8, 0x4, 0x2, 0x3ff, 0x40, 0x1f]}, [0x7, 0xa4, 0x200, 0x8, 0x9, 0x7ff, 0x5, 0xffffffffffffff06, 0x2, 0x7fff, 0x7f, 0x1, 0xc501, 0x9, 0x6, 0x7f, 0x7, 0x0, 0x4cc78c9a, 0x0, 0x80000000, 0x2, 0x2, 0x3, 0x0, 0x7fff, 0xffff, 0x5, 0xffff, 0x100, 0x7fffffff, 0x9ac, 0x7, 0x7, 0x100000000, 0x5, 0x17c, 0x1, 0x80000001, 0x1, 0x40, 0x4, 0x8df, 0xfffffffffffffe00, 0x3, 0x5, 0x1, 0x6, 0x8, 0x40, 0x1, 0x1, 0x8, 0x80, 0x3, 0x101, 0x1f, 0xfffffffffffff6f0, 0x959e, 0x8, 0x4, 0x0, 0x1, 0xdc9]})
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30)

23:15:53 executing program 5:
r0 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0)
waitid$P_PIDFD(0x3, r0, 0x0, 0x2, &(0x7f0000000140))
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
memfd_secret(0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000), 0x327, 0x4}}, 0x20)
memfd_secret(0x80000)

23:15:53 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:53 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000080), 0x3, 0x2)
ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f00000000c0)={0x8000, 0x1, 0xfff})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:53 executing program 2:
r0 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000001180))
ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000080)={0x1, "44fbebba163322a97348915d0b7977d34cb8af10395a91d97591b88582a594eb", 0x40, 0x5, 0x2, 0x4, 0x2}) (async)
r1 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180)) (async)
ioctl$VIDIOC_ENUMAUDOUT(r1, 0xc0345642, &(0x7f0000000000)={0x2fa6, "defc499b128426bb2b40a0de7baaeb8f0c4dbc99ef55705f49da622c628eac76", 0x2, 0x1}) (async)
clock_gettime(0x5, &(0x7f0000000040))
r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$VIDIOC_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f0000000100)={0x0, 0x0, '\x00', {0x0, @reserved}})

[  838.837755][ T8908] binder: 8902:8908 ioctl 401c5820 20000380 returned -22
[  838.850603][ T8891] binder: 8886:8891 ioctl 4018620d 20000000 returned -16
23:15:53 executing program 4:
ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f00000000c0)={0x0, 0xe63, @status={[0x8, 0x4, 0x2, 0x3ff, 0x40, 0x1f]}, [0x7, 0xa4, 0x200, 0x8, 0x9, 0x7ff, 0x5, 0xffffffffffffff06, 0x2, 0x7fff, 0x7f, 0x1, 0xc501, 0x9, 0x6, 0x7f, 0x7, 0x0, 0x4cc78c9a, 0x0, 0x80000000, 0x2, 0x2, 0x3, 0x0, 0x7fff, 0xffff, 0x5, 0xffff, 0x100, 0x7fffffff, 0x9ac, 0x7, 0x7, 0x100000000, 0x5, 0x17c, 0x1, 0x80000001, 0x1, 0x40, 0x4, 0x8df, 0xfffffffffffffe00, 0x3, 0x5, 0x1, 0x6, 0x8, 0x40, 0x1, 0x1, 0x8, 0x80, 0x3, 0x101, 0x1f, 0xfffffffffffff6f0, 0x959e, 0x8, 0x4, 0x0, 0x1, 0xdc9]})
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30)

23:15:53 executing program 5:
r0 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0)
waitid$P_PIDFD(0x3, r0, 0x0, 0x2, &(0x7f0000000140))
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
memfd_secret(0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000), 0x327, 0x4}}, 0x20)

23:15:53 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000440), 0x48, 0xc000)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000480)={<r2=>0x0, 0x0, 0x4, 0x1})
ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000880)={{r0}, {@val={r2}, @actul_num={@val=0x2d, 0x6, 0x6b}}})
r3 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0xe, "0f72a2", "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"}}, 0x110)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={<r4=>0xffffffffffffffff}, 0x106}}, 0x20)
r5 = pidfd_getfd(0xffffffffffffffff, r3, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), r5)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1, 0x5}, r4}}, 0x30)
r6 = pidfd_getfd(r3, r0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x111, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r6, &(0x7f00000002c0)={0x9, 0x108, 0xfa00, {r7, 0xe0, "63870a", "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"}}, 0x110)

23:15:53 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0xff00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:53 executing program 2:
r0 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000001180))
ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000080)={0x1, "44fbebba163322a97348915d0b7977d34cb8af10395a91d97591b88582a594eb", 0x40, 0x5, 0x2, 0x4, 0x2}) (async)
r1 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180)) (async, rerun: 64)
ioctl$VIDIOC_ENUMAUDOUT(r1, 0xc0345642, &(0x7f0000000000)={0x2fa6, "defc499b128426bb2b40a0de7baaeb8f0c4dbc99ef55705f49da622c628eac76", 0x2, 0x1}) (async, rerun: 64)
clock_gettime(0x5, &(0x7f0000000040))
r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$VIDIOC_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f0000000100)={0x0, 0x0, '\x00', {0x0, @reserved}})

23:15:53 executing program 4:
ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f00000000c0)={0x0, 0xe63, @status={[0x8, 0x4, 0x2, 0x3ff, 0x40, 0x1f]}, [0x7, 0xa4, 0x200, 0x8, 0x9, 0x7ff, 0x5, 0xffffffffffffff06, 0x2, 0x7fff, 0x7f, 0x1, 0xc501, 0x9, 0x6, 0x7f, 0x7, 0x0, 0x4cc78c9a, 0x0, 0x80000000, 0x2, 0x2, 0x3, 0x0, 0x7fff, 0xffff, 0x5, 0xffff, 0x100, 0x7fffffff, 0x9ac, 0x7, 0x7, 0x100000000, 0x5, 0x17c, 0x1, 0x80000001, 0x1, 0x40, 0x4, 0x8df, 0xfffffffffffffe00, 0x3, 0x5, 0x1, 0x6, 0x8, 0x40, 0x1, 0x1, 0x8, 0x80, 0x3, 0x101, 0x1f, 0xfffffffffffff6f0, 0x959e, 0x8, 0x4, 0x0, 0x1, 0xdc9]}) (async)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30)

23:15:53 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000080), 0x3, 0x2)
ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f00000000c0)={0x8000, 0x1, 0xfff})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)) (async, rerun: 64)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (rerun: 64)

23:15:53 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000440), 0x48, 0xc000)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000480)={<r2=>0x0, 0x0, 0x4, 0x1})
ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000880)={{r0}, {@val={r2}, @actul_num={@val=0x2d, 0x6, 0x6b}}})
r3 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0xe, "0f72a2", "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"}}, 0x110)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={<r4=>0xffffffffffffffff}, 0x106}}, 0x20)
r5 = pidfd_getfd(0xffffffffffffffff, r3, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), r5)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1, 0x5}, r4}}, 0x30)
r6 = pidfd_getfd(r3, r0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x111, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r6, &(0x7f00000002c0)={0x9, 0x108, 0xfa00, {r7, 0xe0, "63870a", "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"}}, 0x110)

23:15:53 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0xffffff7f00000000, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:53 executing program 5:
r0 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0)
waitid$P_PIDFD(0x3, r0, 0x0, 0x2, &(0x7f0000000140))
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
memfd_secret(0x0)

23:15:53 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30)

23:15:53 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000080), 0x3, 0x2)
ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f00000000c0)={0x8000, 0x1, 0xfff}) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:53 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x2, 0x0, 0x0, 0x0, 0x0})

23:15:53 executing program 2:
r0 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0800691626bd7000fedb54e0e1bcff0aa524580f142a0d48914b7361070000000000ffffffffeb68e10000000000000000000000000000000000000000000000000000309919cfcf4c095e1581f6be6c1dc33bc3931799f1f2dcfad5", @ANYRES32=0x0, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x8}, 0x8050)
r1 = socket(0xf, 0x800, 0x100)
getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000140)={@multicast2, @loopback}, &(0x7f0000000180)=0xc)
clock_gettime(0x7, &(0x7f0000000000))

23:15:53 executing program 5:
r0 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0)
waitid$P_PIDFD(0x3, r0, 0x0, 0x2, &(0x7f0000000140))
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)

23:15:53 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000440), 0x48, 0xc000)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000480)={<r2=>0x0, 0x0, 0x4, 0x1})
ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000880)={{r0}, {@val={r2}, @actul_num={@val=0x2d, 0x6, 0x6b}}})
r3 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0xe, "0f72a2", "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"}}, 0x110)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={<r4=>0xffffffffffffffff}, 0x106}}, 0x20)
r5 = pidfd_getfd(0xffffffffffffffff, r3, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), r5)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1, 0x5}, r4}}, 0x30)
r6 = pidfd_getfd(r3, r0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x111, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r6, &(0x7f00000002c0)={0x9, 0x108, 0xfa00, {r7, 0xe0, "63870a", "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"}}, 0x110)

23:15:53 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000000c0)=[@register_looper], 0x3c, 0x0, 0x0})

23:15:53 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0})

23:15:53 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async, rerun: 64)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) (rerun: 64)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30)

23:15:53 executing program 5:
r0 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0)
waitid$P_PIDFD(0x3, r0, 0x0, 0x2, &(0x7f0000000140))

23:15:53 executing program 2:
r0 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0800691626bd7000fedb54e0e1bcff0aa524580f142a0d48914b7361070000000000ffffffffeb68e10000000000000000000000000000000000000000000000000000309919cfcf4c095e1581f6be6c1dc33bc3931799f1f2dcfad5", @ANYRES32=0x0, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x8}, 0x8050)
r1 = socket(0xf, 0x800, 0x100)
getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000140)={@multicast2, @loopback}, &(0x7f0000000180)=0xc)
clock_gettime(0x7, &(0x7f0000000000))
memfd_secret(0x0) (async)
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) (async)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0800691626bd7000fedb54e0e1bcff0aa524580f142a0d48914b7361070000000000ffffffffeb68e10000000000000000000000000000000000000000000000000000309919cfcf4c095e1581f6be6c1dc33bc3931799f1f2dcfad5", @ANYRES32=0x0, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x8}, 0x8050) (async)
socket(0xf, 0x800, 0x100) (async)
getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000140)={@multicast2, @loopback}, &(0x7f0000000180)=0xc) (async)
clock_gettime(0x7, &(0x7f0000000000)) (async)

23:15:53 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) (async)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000000c0)=[@register_looper], 0x3c, 0x0, 0x0})

23:15:53 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000440), 0x48, 0xc000)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000480)={<r2=>0x0, 0x0, 0x4, 0x1})
ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000880)={{r0}, {@val={r2}, @actul_num={@val=0x2d, 0x6, 0x6b}}})
r3 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0xe, "0f72a2", "924c7efa91a4f1ac7b67909bcf732c6e8a6eec03772988afcc70299537fc545e3909b0a29aa09f34567c482a0db7206fcfa0b907aca42034d4e48902b270954265c6d9357122b491356cd3548866fe8fcab1da0999807a5e5a8fa87351f9dcc8e5a8fbfa08b1ddcf347376932939b5234ff01d91402c4b276828af9c20e68d3da48ceae7a05cc8dc71d25d03cb00d92afcd8225aa374eac7b0eab311e4bf1f643b74d4823d7b90bfbb543dddd3d48694dcaab94aaa9b6c7b8c8c1211108c37659bd59ff83c3834a9624aa0b48ac24f77f7f7f5d57605d75d3d2ffb2b3153daccc8e2c207fece64236c1f7c1ec7c814560a350dc276ed585e731b3cbaeb26f27a"}}, 0x110)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={<r4=>0xffffffffffffffff}, 0x106}}, 0x20)
r5 = pidfd_getfd(0xffffffffffffffff, r3, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), r5)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1, 0x5}, r4}}, 0x30)
pidfd_getfd(r3, r0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240), 0x111, 0x4}}, 0x20)

23:15:53 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0})

23:15:53 executing program 5:
r0 = memfd_secret(0x0)
waitid$P_PIDFD(0x3, r0, 0x0, 0x2, &(0x7f0000000140))

23:15:53 executing program 2:
r0 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0800691626bd7000fedb54e0e1bcff0aa524580f142a0d48914b7361070000000000ffffffffeb68e10000000000000000000000000000000000000000000000000000309919cfcf4c095e1581f6be6c1dc33bc3931799f1f2dcfad5", @ANYRES32=0x0, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x8}, 0x8050)
r1 = socket(0xf, 0x800, 0x100)
getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000140)={@multicast2, @loopback}, &(0x7f0000000180)=0xc)
clock_gettime(0x7, &(0x7f0000000000))
memfd_secret(0x0) (async)
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) (async)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0800691626bd7000fedb54e0e1bcff0aa524580f142a0d48914b7361070000000000ffffffffeb68e10000000000000000000000000000000000000000000000000000309919cfcf4c095e1581f6be6c1dc33bc3931799f1f2dcfad5", @ANYRES32=0x0, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x8}, 0x8050) (async)
socket(0xf, 0x800, 0x100) (async)
getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000140)={@multicast2, @loopback}, &(0x7f0000000180)=0xc) (async)
clock_gettime(0x7, &(0x7f0000000000)) (async)

23:15:53 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0})

23:15:53 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) (async)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000000c0)=[@register_looper], 0x3c, 0x0, 0x0})

23:15:53 executing program 5:
waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000140))

23:15:53 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) (async)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30)

23:15:53 executing program 2:
clock_gettime(0x5, &(0x7f0000000040))
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000080)={<r0=>0x0, 0x2, 0x1, [0x2, 0x97, 0x0, 0x9f, 0x4], [0x8, 0x4, 0x4, 0x7, 0x3f, 0x6, 0x7f, 0x0, 0x7, 0x5, 0x100000000, 0x1000, 0x6, 0xa0, 0x2e40052d, 0x40, 0xff, 0x401, 0x1, 0x6, 0x3, 0x2, 0x8001, 0x2, 0xf04, 0x6, 0x7, 0x9, 0x6, 0x7, 0x0, 0x9a, 0xffff, 0x40, 0x2, 0x1000, 0x0, 0x3, 0x401, 0x8, 0x100000000, 0x10001, 0x1, 0x7, 0x8000, 0x7fff, 0xfffffffffffff8b9, 0xeb6, 0x4, 0x4, 0xca86, 0x7fffffffffffffff, 0x10000, 0x5, 0x9, 0x7fff, 0x79, 0x0, 0x4, 0x800, 0x2, 0x7, 0x1, 0x3, 0x101, 0xfffffffffffffffd, 0x489, 0x1f, 0x7ff, 0xffffffffffffffff, 0xffffffff00000001, 0x6, 0x7ff, 0x3f, 0x4, 0x85, 0x100, 0x0, 0x101, 0x10001, 0x497, 0x3, 0xffffffffffffffff, 0x3, 0x0, 0x100000000, 0x80000001, 0xb7, 0x8000000000000000, 0xd3, 0x2, 0x80, 0x9, 0x0, 0x1000, 0x1, 0x40000, 0x80000000, 0x3, 0x4, 0x8000000000000000, 0x6, 0x3, 0x9, 0x3f, 0x73b, 0x9, 0xfffffffffffffffb, 0xfffffffffffffff9, 0x8, 0x4, 0x81, 0x8000000000000000, 0x2, 0x1, 0x6, 0x400, 0x1f, 0x8e, 0x5e, 0x3]})
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000004c0)={0x4, 0x2, {0x2, @usage=0x5, 0x0, 0x100, 0x80000000, 0x7bf9, 0xfffffffffffffffd, 0x8000000000000000, 0x6df6f5f68bd2d85a, @usage=0x1ff, 0x7, 0x8, [0x7, 0x0, 0x101, 0x4, 0x200, 0x4]}, {0x6, @usage=0xffffffffffffffff, 0x0, 0x100, 0xfffffffffffffffd, 0x9, 0x8, 0x2, 0x21, @struct={0xff, 0x703}, 0x0, 0x2, [0x5, 0x80000001, 0x73, 0x2, 0x22c, 0x3]}, {0x5, @struct={0xd51, 0x80000000}, r0, 0x4, 0x7, 0x2, 0x3ff, 0x7, 0xc, @usage=0x8, 0x9, 0x1, [0x7, 0xffffffffffffffff, 0x2, 0x0, 0x1, 0x100000000]}, {0x4, 0x1f, 0x6}})
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_tracing={0x1a, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8c3d}, [@alu={0x4, 0x0, 0x9, 0x5, 0x4, 0x20}, @ldst={0x2, 0x1, 0x3, 0xd, 0x1, 0xffffffffffffffc0, 0x10}, @generic={0x0, 0x8, 0x7, 0x3, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}]}, &(0x7f00000008c0)='syzkaller\x00', 0x3, 0xb3, &(0x7f0000000900)=""/179, 0x40f00, 0x10, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000a00)={0x1, 0x5, 0x7, 0x6}, 0x10, 0x2554d, 0xffffffffffffffff, 0x0, &(0x7f0000000a40)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000b00)={0x0, r1}, 0x10)

23:15:53 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000440), 0x48, 0xc000)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000480)={<r2=>0x0, 0x0, 0x4, 0x1})
ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000880)={{r0}, {@val={r2}, @actul_num={@val=0x2d, 0x6, 0x6b}}})
r3 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0xe, "0f72a2", "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"}}, 0x110)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={<r4=>0xffffffffffffffff}, 0x106}}, 0x20)
r5 = pidfd_getfd(0xffffffffffffffff, r3, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), r5)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1, 0x5}, r4}}, 0x30)
pidfd_getfd(r3, r0, 0x0)

23:15:53 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x6, 0x0, 0x0, 0x0, 0x0})

23:15:53 executing program 5:
waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000140))

23:15:53 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x24, 0x0, &(0x7f0000000100)=[@acquire_done={0x40106309, 0x7}, @request_death], 0x0, 0x0, 0x0})

23:15:53 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'})

23:15:53 executing program 2:
clock_gettime(0x5, &(0x7f0000000040)) (async)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000080)={<r0=>0x0, 0x2, 0x1, [0x2, 0x97, 0x0, 0x9f, 0x4], [0x8, 0x4, 0x4, 0x7, 0x3f, 0x6, 0x7f, 0x0, 0x7, 0x5, 0x100000000, 0x1000, 0x6, 0xa0, 0x2e40052d, 0x40, 0xff, 0x401, 0x1, 0x6, 0x3, 0x2, 0x8001, 0x2, 0xf04, 0x6, 0x7, 0x9, 0x6, 0x7, 0x0, 0x9a, 0xffff, 0x40, 0x2, 0x1000, 0x0, 0x3, 0x401, 0x8, 0x100000000, 0x10001, 0x1, 0x7, 0x8000, 0x7fff, 0xfffffffffffff8b9, 0xeb6, 0x4, 0x4, 0xca86, 0x7fffffffffffffff, 0x10000, 0x5, 0x9, 0x7fff, 0x79, 0x0, 0x4, 0x800, 0x2, 0x7, 0x1, 0x3, 0x101, 0xfffffffffffffffd, 0x489, 0x1f, 0x7ff, 0xffffffffffffffff, 0xffffffff00000001, 0x6, 0x7ff, 0x3f, 0x4, 0x85, 0x100, 0x0, 0x101, 0x10001, 0x497, 0x3, 0xffffffffffffffff, 0x3, 0x0, 0x100000000, 0x80000001, 0xb7, 0x8000000000000000, 0xd3, 0x2, 0x80, 0x9, 0x0, 0x1000, 0x1, 0x40000, 0x80000000, 0x3, 0x4, 0x8000000000000000, 0x6, 0x3, 0x9, 0x3f, 0x73b, 0x9, 0xfffffffffffffffb, 0xfffffffffffffff9, 0x8, 0x4, 0x81, 0x8000000000000000, 0x2, 0x1, 0x6, 0x400, 0x1f, 0x8e, 0x5e, 0x3]})
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000004c0)={0x4, 0x2, {0x2, @usage=0x5, 0x0, 0x100, 0x80000000, 0x7bf9, 0xfffffffffffffffd, 0x8000000000000000, 0x6df6f5f68bd2d85a, @usage=0x1ff, 0x7, 0x8, [0x7, 0x0, 0x101, 0x4, 0x200, 0x4]}, {0x6, @usage=0xffffffffffffffff, 0x0, 0x100, 0xfffffffffffffffd, 0x9, 0x8, 0x2, 0x21, @struct={0xff, 0x703}, 0x0, 0x2, [0x5, 0x80000001, 0x73, 0x2, 0x22c, 0x3]}, {0x5, @struct={0xd51, 0x80000000}, r0, 0x4, 0x7, 0x2, 0x3ff, 0x7, 0xc, @usage=0x8, 0x9, 0x1, [0x7, 0xffffffffffffffff, 0x2, 0x0, 0x1, 0x100000000]}, {0x4, 0x1f, 0x6}}) (async)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_tracing={0x1a, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8c3d}, [@alu={0x4, 0x0, 0x9, 0x5, 0x4, 0x20}, @ldst={0x2, 0x1, 0x3, 0xd, 0x1, 0xffffffffffffffc0, 0x10}, @generic={0x0, 0x8, 0x7, 0x3, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}]}, &(0x7f00000008c0)='syzkaller\x00', 0x3, 0xb3, &(0x7f0000000900)=""/179, 0x40f00, 0x10, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000a00)={0x1, 0x5, 0x7, 0x6}, 0x10, 0x2554d, 0xffffffffffffffff, 0x0, &(0x7f0000000a40)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000b00)={0x0, r1}, 0x10)

23:15:53 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000440), 0x48, 0xc000)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000480)={<r2=>0x0, 0x0, 0x4, 0x1})
ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000880)={{r0}, {@val={r2}, @actul_num={@val=0x2d, 0x6, 0x6b}}})
r3 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0xe, "0f72a2", "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"}}, 0x110)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={<r4=>0xffffffffffffffff}, 0x106}}, 0x20)
r5 = pidfd_getfd(0xffffffffffffffff, r3, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), r5)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1, 0x5}, r4}}, 0x30)

23:15:53 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x7, 0x0, 0x0, 0x0, 0x0})

23:15:53 executing program 5:
waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000140))

23:15:53 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) (async)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x24, 0x0, &(0x7f0000000100)=[@acquire_done={0x40106309, 0x7}, @request_death], 0x0, 0x0, 0x0})

23:15:53 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (rerun: 32)

23:15:53 executing program 2:
clock_gettime(0x5, &(0x7f0000000040)) (async)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000080)={<r0=>0x0, 0x2, 0x1, [0x2, 0x97, 0x0, 0x9f, 0x4], [0x8, 0x4, 0x4, 0x7, 0x3f, 0x6, 0x7f, 0x0, 0x7, 0x5, 0x100000000, 0x1000, 0x6, 0xa0, 0x2e40052d, 0x40, 0xff, 0x401, 0x1, 0x6, 0x3, 0x2, 0x8001, 0x2, 0xf04, 0x6, 0x7, 0x9, 0x6, 0x7, 0x0, 0x9a, 0xffff, 0x40, 0x2, 0x1000, 0x0, 0x3, 0x401, 0x8, 0x100000000, 0x10001, 0x1, 0x7, 0x8000, 0x7fff, 0xfffffffffffff8b9, 0xeb6, 0x4, 0x4, 0xca86, 0x7fffffffffffffff, 0x10000, 0x5, 0x9, 0x7fff, 0x79, 0x0, 0x4, 0x800, 0x2, 0x7, 0x1, 0x3, 0x101, 0xfffffffffffffffd, 0x489, 0x1f, 0x7ff, 0xffffffffffffffff, 0xffffffff00000001, 0x6, 0x7ff, 0x3f, 0x4, 0x85, 0x100, 0x0, 0x101, 0x10001, 0x497, 0x3, 0xffffffffffffffff, 0x3, 0x0, 0x100000000, 0x80000001, 0xb7, 0x8000000000000000, 0xd3, 0x2, 0x80, 0x9, 0x0, 0x1000, 0x1, 0x40000, 0x80000000, 0x3, 0x4, 0x8000000000000000, 0x6, 0x3, 0x9, 0x3f, 0x73b, 0x9, 0xfffffffffffffffb, 0xfffffffffffffff9, 0x8, 0x4, 0x81, 0x8000000000000000, 0x2, 0x1, 0x6, 0x400, 0x1f, 0x8e, 0x5e, 0x3]})
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000004c0)={0x4, 0x2, {0x2, @usage=0x5, 0x0, 0x100, 0x80000000, 0x7bf9, 0xfffffffffffffffd, 0x8000000000000000, 0x6df6f5f68bd2d85a, @usage=0x1ff, 0x7, 0x8, [0x7, 0x0, 0x101, 0x4, 0x200, 0x4]}, {0x6, @usage=0xffffffffffffffff, 0x0, 0x100, 0xfffffffffffffffd, 0x9, 0x8, 0x2, 0x21, @struct={0xff, 0x703}, 0x0, 0x2, [0x5, 0x80000001, 0x73, 0x2, 0x22c, 0x3]}, {0x5, @struct={0xd51, 0x80000000}, r0, 0x4, 0x7, 0x2, 0x3ff, 0x7, 0xc, @usage=0x8, 0x9, 0x1, [0x7, 0xffffffffffffffff, 0x2, 0x0, 0x1, 0x100000000]}, {0x4, 0x1f, 0x6}}) (async)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_tracing={0x1a, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8c3d}, [@alu={0x4, 0x0, 0x9, 0x5, 0x4, 0x20}, @ldst={0x2, 0x1, 0x3, 0xd, 0x1, 0xffffffffffffffc0, 0x10}, @generic={0x0, 0x8, 0x7, 0x3, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}]}, &(0x7f00000008c0)='syzkaller\x00', 0x3, 0xb3, &(0x7f0000000900)=""/179, 0x40f00, 0x10, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000a00)={0x1, 0x5, 0x7, 0x6}, 0x10, 0x2554d, 0xffffffffffffffff, 0x0, &(0x7f0000000a40)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000b00)={0x0, r1}, 0x10)

23:15:53 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000440), 0x48, 0xc000)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000480)={<r2=>0x0, 0x0, 0x4, 0x1})
ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000880)={{r0}, {@val={r2}, @actul_num={@val=0x2d, 0x6, 0x6b}}})
r3 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0xe, "0f72a2", "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"}}, 0x110)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={<r4=>0xffffffffffffffff}, 0x106}}, 0x20)
pidfd_getfd(0xffffffffffffffff, r3, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1, 0x5}, r4}}, 0x30)

23:15:53 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x300, 0x0, 0x0, 0x0, 0x0})

23:15:53 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) (async)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x24, 0x0, &(0x7f0000000100)=[@acquire_done={0x40106309, 0x7}, @request_death], 0x0, 0x0, 0x0})

23:15:53 executing program 5:
memfd_secret(0x0)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000140))

23:15:53 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'})

23:15:53 executing program 2:
r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000080)={0x7fffffff, 0x0, 0x3016, 0x2, 0x10001, 0x8, 0x3})
clock_gettime(0x5, &(0x7f0000000040))

23:15:53 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000440), 0x48, 0xc000)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000480)={<r2=>0x0, 0x0, 0x4, 0x1})
ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000880)={{r0}, {@val={r2}, @actul_num={@val=0x2d, 0x6, 0x6b}}})
r3 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0xe, "0f72a2", "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"}}, 0x110)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={<r4=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1, 0x5}, r4}}, 0x30)

23:15:53 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x500, 0x0, 0x0, 0x0, 0x0})

23:15:53 executing program 5:
memfd_secret(0x0)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000140))

23:15:53 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = memfd_secret(0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:53 executing program 4:
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
r1 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180))
ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000000c0)={{r1}, {@val, @max}})
ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000000)={0x0, 0x0, 0x100})
write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30)

23:15:53 executing program 2:
r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000080)={0x7fffffff, 0x0, 0x3016, 0x2, 0x10001, 0x8, 0x3}) (async, rerun: 64)
clock_gettime(0x5, &(0x7f0000000040)) (rerun: 64)

23:15:53 executing program 5:
memfd_secret(0x0)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000140))

23:15:53 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000440), 0x48, 0xc000)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000480)={<r2=>0x0, 0x0, 0x4, 0x1})
ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000880)={{r0}, {@val={r2}, @actul_num={@val=0x2d, 0x6, 0x6b}}})
r3 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0xe, "0f72a2", "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"}}, 0x110)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1, 0x5}}}, 0x30)

23:15:53 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x600, 0x0, 0x0, 0x0, 0x0})

23:15:53 executing program 4:
r0 = socket$can_j1939(0x1d, 0x2, 0x7) (async, rerun: 32)
r1 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2) (rerun: 32)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180)) (async)
ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000000c0)={{r1}, {@val, @max}})
ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000000)={0x0, 0x0, 0x100}) (async)
write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30)

23:15:53 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r1 = memfd_secret(0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:53 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000440), 0x48, 0xc000)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000480)={<r2=>0x0, 0x0, 0x4, 0x1})
ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000880)={{r0}, {@val={r2}, @actul_num={@val=0x2d, 0x6, 0x6b}}})
r3 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0xe, "0f72a2", "924c7efa91a4f1ac7b67909bcf732c6e8a6eec03772988afcc70299537fc545e3909b0a29aa09f34567c482a0db7206fcfa0b907aca42034d4e48902b270954265c6d9357122b491356cd3548866fe8fcab1da0999807a5e5a8fa87351f9dcc8e5a8fbfa08b1ddcf347376932939b5234ff01d91402c4b276828af9c20e68d3da48ceae7a05cc8dc71d25d03cb00d92afcd8225aa374eac7b0eab311e4bf1f643b74d4823d7b90bfbb543dddd3d48694dcaab94aaa9b6c7b8c8c1211108c37659bd59ff83c3834a9624aa0b48ac24f77f7f7f5d57605d75d3d2ffb2b3153daccc8e2c207fece64236c1f7c1ec7c814560a350dc276ed585e731b3cbaeb26f27a"}}, 0x110)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1, 0x5}}}, 0x30)

23:15:53 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x700, 0x0, 0x0, 0x0, 0x0})

23:15:53 executing program 5:
r0 = memfd_secret(0x0)
waitid$P_PIDFD(0x3, r0, 0x0, 0x0, &(0x7f0000000140))

23:15:53 executing program 2:
r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000080)={0x7fffffff, 0x0, 0x3016, 0x2, 0x10001, 0x8, 0x3})
clock_gettime(0x5, &(0x7f0000000040))

23:15:53 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000440), 0x48, 0xc000)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000480)={<r2=>0x0, 0x0, 0x4, 0x1})
ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000880)={{r0}, {@val={r2}, @actul_num={@val=0x2d, 0x6, 0x6b}}})
r3 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0xe, "0f72a2", "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"}}, 0x110)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1, 0x5}}}, 0x30)

23:15:54 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r1 = memfd_secret(0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:54 executing program 2:
clock_gettime(0x7, &(0x7f0000000040))

23:15:54 executing program 5:
r0 = memfd_secret(0x0)
waitid$P_PIDFD(0x3, r0, 0x0, 0x0, &(0x7f0000000140))

23:15:54 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0xff00, 0x0, 0x0, 0x0, 0x0})

23:15:54 executing program 4:
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
r1 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180))
ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000000c0)={{r1}, {@val, @max}})
ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000000)={0x0, 0x0, 0x100})
write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2) (async)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180)) (async)
ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000000c0)={{r1}, {@val, @max}}) (async)
ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000000)={0x0, 0x0, 0x100}) (async)
write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30) (async)

23:15:54 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000440), 0x48, 0xc000)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000480)={<r2=>0x0, 0x0, 0x4, 0x1})
ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000880)={{r0}, {@val={r2}, @actul_num={@val=0x2d, 0x6, 0x6b}}})
r3 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={<r4=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1, 0x5}, r4}}, 0x30)

23:15:54 executing program 5:
r0 = memfd_secret(0x0)
waitid$P_PIDFD(0x3, r0, 0x0, 0x0, &(0x7f0000000140))

23:15:54 executing program 2:
clock_gettime(0x7, &(0x7f0000000040))

23:15:54 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0})

23:15:54 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0, r4}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {r4, 0x56, "7bfaf7", "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"}}, 0x110)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30)

23:15:54 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r1 = memfd_secret(0x0)
r2 = syz_clone(0x10000000, &(0x7f00000000c0)="f0a064464ba2dc9cf3a9ae086b4bdabf869df05700d8944d8412eba53102328dc1db1cba6e30b48ba3246392c692a020a8dda9463ba8e9e3234fd622b779fed0998615f43d92a7b05423de10ee15f3b0edafd1dd8f671172b204adfd2f503712a868c4a06e0ef80c6079986309aaa2bd32547416b720f50ffe90a2ce68dbe8f35697981f1a6408e4cf3fd76f7793567977ad191848fcf77f", 0x98, &(0x7f0000000180), &(0x7f0000000240), &(0x7f0000000280)="689dfcb1a43aa9adaf56efaaa7b6b1847d56823f36b35246c37333b468fc058d061fd71f1ad1167c988115ca2c49ffb0bc81019f419cabf91b157dbfbf5cf3105d717b897777e65e742365f21d5f386b98ad5bc7066174600db6457c")
ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000300)={r2, 0x0, 0x6})

23:15:54 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000440), 0x48, 0xc000)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000480)={<r2=>0x0, 0x0, 0x4, 0x1})
ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000880)={{r0}, {@val={r2}, @actul_num={@val=0x2d, 0x6, 0x6b}}})
memfd_secret(0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={<r3=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1, 0x5}, r3}}, 0x30)

23:15:54 executing program 5:
r0 = memfd_secret(0x0)
waitid$P_PIDFD(0x3, r0, 0x0, 0x2, 0x0)

23:15:54 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000440), 0x48, 0xc000)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000480)={<r2=>0x0, 0x0, 0x4, 0x1})
ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000880)={{r0}, {@val={r2}, @actul_num={@val=0x2d, 0x6, 0x6b}}})
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={<r3=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1, 0x5}, r3}}, 0x30)

23:15:54 executing program 2:
clock_gettime(0x7, &(0x7f0000000040))

23:15:54 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0, r4}}, 0x18) (async)
write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {r4, 0x56, "7bfaf7", "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"}}, 0x110) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30)

23:15:54 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0})

23:15:54 executing program 5:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x7ffffffff000)

23:15:54 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r1 = memfd_secret(0x0)
r2 = syz_clone(0x10000000, &(0x7f00000000c0)="f0a064464ba2dc9cf3a9ae086b4bdabf869df05700d8944d8412eba53102328dc1db1cba6e30b48ba3246392c692a020a8dda9463ba8e9e3234fd622b779fed0998615f43d92a7b05423de10ee15f3b0edafd1dd8f671172b204adfd2f503712a868c4a06e0ef80c6079986309aaa2bd32547416b720f50ffe90a2ce68dbe8f35697981f1a6408e4cf3fd76f7793567977ad191848fcf77f", 0x98, &(0x7f0000000180), &(0x7f0000000240), &(0x7f0000000280)="689dfcb1a43aa9adaf56efaaa7b6b1847d56823f36b35246c37333b468fc058d061fd71f1ad1167c988115ca2c49ffb0bc81019f419cabf91b157dbfbf5cf3105d717b897777e65e742365f21d5f386b98ad5bc7066174600db6457c")
ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000300)={r2, 0x0, 0x6})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async)
memfd_secret(0x0) (async)
syz_clone(0x10000000, &(0x7f00000000c0)="f0a064464ba2dc9cf3a9ae086b4bdabf869df05700d8944d8412eba53102328dc1db1cba6e30b48ba3246392c692a020a8dda9463ba8e9e3234fd622b779fed0998615f43d92a7b05423de10ee15f3b0edafd1dd8f671172b204adfd2f503712a868c4a06e0ef80c6079986309aaa2bd32547416b720f50ffe90a2ce68dbe8f35697981f1a6408e4cf3fd76f7793567977ad191848fcf77f", 0x98, &(0x7f0000000180), &(0x7f0000000240), &(0x7f0000000280)="689dfcb1a43aa9adaf56efaaa7b6b1847d56823f36b35246c37333b468fc058d061fd71f1ad1167c988115ca2c49ffb0bc81019f419cabf91b157dbfbf5cf3105d717b897777e65e742365f21d5f386b98ad5bc7066174600db6457c") (async)
ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000300)={r2, 0x0, 0x6}) (async)

23:15:54 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0})

23:15:54 executing program 2:
clock_gettime(0x4, &(0x7f0000000040))

23:15:54 executing program 5:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x7ffffffff000)

23:15:54 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_open_dev$video4linux(&(0x7f0000000440), 0x48, 0xc000)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000480)={0x0, 0x0, 0x4, 0x1})
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1, 0x5}, r1}}, 0x30)

23:15:54 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0, r4}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {r4, 0x56, "7bfaf7", "049f296da428538e9a3b4c6def9b30c8c281b784b7d1f7f1605b3634c0b48d821145707610dd69224c71d76f7f59f79ecc4e62727012598b8adc0d3fe0787d942db3761a073052fe7e1d177bbc7b3aa09383a957122eaea526b9e39c501026b116f5db03fd9a080bcd3f7fccac207d2f48e6ee6fc462f167b6758dbd82f9b19d20e8f9a15ff5db67ff47d0d7d755f0761eb872309fcbdd0db22ea41261ec83dae713a0753df796fd49f2a71dfe5d034e27873922be25af67bbcb71e198b503d0f1550c843e92d02427a263b83cbd5d96be1bc01f808ff37a881027d5ea69f6369c7cf7727e66583d4365a3f47e76133f26e4396ae32d5cc61fcfd28ba53a5502"}}, 0x110) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30)

23:15:54 executing program 2:
clock_gettime(0x4, &(0x7f0000000040))

23:15:54 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r1 = memfd_secret(0x0) (async)
r2 = syz_clone(0x10000000, &(0x7f00000000c0)="f0a064464ba2dc9cf3a9ae086b4bdabf869df05700d8944d8412eba53102328dc1db1cba6e30b48ba3246392c692a020a8dda9463ba8e9e3234fd622b779fed0998615f43d92a7b05423de10ee15f3b0edafd1dd8f671172b204adfd2f503712a868c4a06e0ef80c6079986309aaa2bd32547416b720f50ffe90a2ce68dbe8f35697981f1a6408e4cf3fd76f7793567977ad191848fcf77f", 0x98, &(0x7f0000000180), &(0x7f0000000240), &(0x7f0000000280)="689dfcb1a43aa9adaf56efaaa7b6b1847d56823f36b35246c37333b468fc058d061fd71f1ad1167c988115ca2c49ffb0bc81019f419cabf91b157dbfbf5cf3105d717b897777e65e742365f21d5f386b98ad5bc7066174600db6457c")
ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000300)={r2, 0x0, 0x6})

23:15:54 executing program 5:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x7ffffffff000)

23:15:54 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_open_dev$video4linux(&(0x7f0000000440), 0x48, 0xc000)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1, 0x5}, r1}}, 0x30)

23:15:54 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0})

23:15:54 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}}, 0x30)
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r2, 0xb701, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x4, @remote, 0xf8}}}, 0x30)

23:15:54 executing program 2:
clock_gettime(0x4, &(0x7f0000000040))

23:15:54 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000340), 0x3, 0x2)
ioctl$VIDIOC_DBG_G_REGISTER(r0, 0xc0385650, &(0x7f00000003c0)={{0x2, @addr=0x1}, 0x8, 0x0, 0x6})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x0, {0x2}}, 0x18)
r4 = pidfd_getfd(r1, r1, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x88, 0x3f, 0x8, 0x46, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x4, 0xd}, 0x48)
r6 = memfd_secret(0x80000)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x8, &(0x7f0000000080)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0xee8}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x3}, @map_fd={0x18, 0x6, 0x1, 0x0, 0x1}, @generic={0x8, 0xf, 0x5, 0xdb8, 0x8700}], &(0x7f00000000c0)='syzkaller\x00', 0xb4b, 0x0, 0x0, 0x40f00, 0x0, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000100)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xc, 0x8, 0xc51a}, 0x10, 0x4b78, 0xffffffffffffffff, 0x0, &(0x7f0000000180)=[r5, 0xffffffffffffffff, r6]}, 0x80)

23:15:54 executing program 5:
write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x7ffffffff000)

23:15:54 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}}, 0x30)
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r2, 0xb701, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x4, @remote, 0xf8}}}, 0x30)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}}, 0x30) (async)
memfd_secret(0x0) (async)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) (async)
getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async)
memfd_secret(0x0) (async)
ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x4, @remote, 0xf8}}}, 0x30) (async)

23:15:54 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1, 0x5}, r1}}, 0x30)

23:15:54 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0})

23:15:54 executing program 2:
clock_gettime(0x5, &(0x7f0000000040))
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xa}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x7}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x64800}, 0x40880)

23:15:54 executing program 5:
write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x7ffffffff000)

23:15:54 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000340), 0x3, 0x2)
ioctl$VIDIOC_DBG_G_REGISTER(r0, 0xc0385650, &(0x7f00000003c0)={{0x2, @addr=0x1}, 0x8, 0x0, 0x6}) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x0, {0x2}}, 0x18)
r4 = pidfd_getfd(r1, r1, 0x0) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x88, 0x3f, 0x8, 0x46, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x4, 0xd}, 0x48) (async)
r6 = memfd_secret(0x80000)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x8, &(0x7f0000000080)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0xee8}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x3}, @map_fd={0x18, 0x6, 0x1, 0x0, 0x1}, @generic={0x8, 0xf, 0x5, 0xdb8, 0x8700}], &(0x7f00000000c0)='syzkaller\x00', 0xb4b, 0x0, 0x0, 0x40f00, 0x0, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000100)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xc, 0x8, 0xc51a}, 0x10, 0x4b78, 0xffffffffffffffff, 0x0, &(0x7f0000000180)=[r5, 0xffffffffffffffff, r6]}, 0x80)

23:15:54 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0})

23:15:54 executing program 3:
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={<r0=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1, 0x5}, r0}}, 0x30)

23:15:54 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}}, 0x30) (async)
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async)
r2 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x4, @remote, 0xf8}}}, 0x30)

23:15:54 executing program 2:
clock_gettime(0x5, &(0x7f0000000040)) (async)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xa}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x7}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x64800}, 0x40880)

23:15:54 executing program 5:
write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x7ffffffff000)

23:15:54 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000340), 0x3, 0x2)
ioctl$VIDIOC_DBG_G_REGISTER(r0, 0xc0385650, &(0x7f00000003c0)={{0x2, @addr=0x1}, 0x8, 0x0, 0x6})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x0, {0x2}}, 0x18)
r4 = pidfd_getfd(r1, r1, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x88, 0x3f, 0x8, 0x46, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x4, 0xd}, 0x48)
r6 = memfd_secret(0x80000)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x8, &(0x7f0000000080)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0xee8}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x3}, @map_fd={0x18, 0x6, 0x1, 0x0, 0x1}, @generic={0x8, 0xf, 0x5, 0xdb8, 0x8700}], &(0x7f00000000c0)='syzkaller\x00', 0xb4b, 0x0, 0x0, 0x40f00, 0x0, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000100)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xc, 0x8, 0xc51a}, 0x10, 0x4b78, 0xffffffffffffffff, 0x0, &(0x7f0000000180)=[r5, 0xffffffffffffffff, r6]}, 0x80)
syz_open_dev$vivid(&(0x7f0000000340), 0x3, 0x2) (async)
ioctl$VIDIOC_DBG_G_REGISTER(r0, 0xc0385650, &(0x7f00000003c0)={{0x2, @addr=0x1}, 0x8, 0x0, 0x6}) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) (async)
bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x0, {0x2}}, 0x18) (async)
pidfd_getfd(r1, r1, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x88, 0x3f, 0x8, 0x46, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x4, 0xd}, 0x48) (async)
memfd_secret(0x80000) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x8, &(0x7f0000000080)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0xee8}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x3}, @map_fd={0x18, 0x6, 0x1, 0x0, 0x1}, @generic={0x8, 0xf, 0x5, 0xdb8, 0x8700}], &(0x7f00000000c0)='syzkaller\x00', 0xb4b, 0x0, 0x0, 0x40f00, 0x0, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000100)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xc, 0x8, 0xc51a}, 0x10, 0x4b78, 0xffffffffffffffff, 0x0, &(0x7f0000000180)=[r5, 0xffffffffffffffff, r6]}, 0x80) (async)

23:15:54 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0})

23:15:54 executing program 4:
r0 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0)
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30)

23:15:54 executing program 5:
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x7ffffffff000)

23:15:54 executing program 3:
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={<r0=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1, 0x5}, r0}}, 0x30)

23:15:54 executing program 2:
clock_gettime(0x5, &(0x7f0000000040)) (async)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xa}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x7}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x64800}, 0x40880)

23:15:54 executing program 3:
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={<r0=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1, 0x5}, r0}}, 0x30)

23:15:54 executing program 4:
r0 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0)
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30)
memfd_secret(0x0) (async)
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) (async)
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30) (async)

23:15:54 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0})

23:15:54 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
socketpair(0x5, 0x80000, 0x540, &(0x7f0000000100))
ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000080))
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r1, 0x40046210, &(0x7f00000000c0))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:54 executing program 2:
clock_gettime(0x5, &(0x7f0000000040))
clock_gettime(0x5, &(0x7f0000000080))

23:15:54 executing program 5:
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x7ffffffff000)

23:15:54 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0xff000000, 0x0, 0x0, 0x0, 0x0})

23:15:54 executing program 4:
r0 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0)
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) (async)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30)

23:15:54 executing program 5:
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x7ffffffff000)

23:15:54 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1, 0x5}, r1}}, 0x30)

23:15:54 executing program 2:
clock_gettime(0x5, &(0x7f0000000040)) (async, rerun: 64)
clock_gettime(0x5, &(0x7f0000000080)) (rerun: 64)

23:15:54 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0})

23:15:54 executing program 5:
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x7ffffffff000)

23:15:54 executing program 2:
clock_gettime(0x5, &(0x7f0000000040))
clock_gettime(0x5, &(0x7f0000000080))
clock_gettime(0x5, &(0x7f0000000040)) (async)
clock_gettime(0x5, &(0x7f0000000080)) (async)

23:15:54 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1, 0x5}, r1}}, 0x30)

23:15:54 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
socketpair(0x5, 0x80000, 0x540, &(0x7f0000000100))
ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000080))
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r1, 0x40046210, &(0x7f00000000c0))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) (async)
socketpair(0x5, 0x80000, 0x540, &(0x7f0000000100)) (async)
ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000080)) (async)
pidfd_getfd(0xffffffffffffffff, r0, 0x0) (async)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r1, 0x40046210, &(0x7f00000000c0)) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async)

23:15:54 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1, 0x5}, r1}}, 0x30)

23:15:54 executing program 4:
ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30)
write$damon_monitor_on(0xffffffffffffffff, &(0x7f0000000000), 0x3)

23:15:54 executing program 5:
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x7ffffffff000)

23:15:54 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0xffffff7f, 0x0, 0x0, 0x0, 0x0})

23:15:54 executing program 2:
clock_gettime(0x3, &(0x7f0000000040))
clock_gettime(0x0, &(0x7f0000000100)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x9, 0x2, 0x2, 0xb9, 0x9c58, 0x4, 0x8, 0x101}, &(0x7f0000000080)={0x7, 0x6, 0x3, 0x23, 0xfffffffffffff000, 0x9, 0x3ff, 0x8000}, &(0x7f00000000c0)={0xd, 0x7d3, 0x1f, 0x8, 0xeb, 0x0, 0x100000001, 0x7}, &(0x7f0000000140)={r0, r1+10000000}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x4]}, 0x8})
pselect6(0x40, &(0x7f0000000200)={0x8, 0xfffffffffffffff9, 0x7fff, 0x0, 0xffffffffffffff00, 0x0, 0xffff, 0x7}, &(0x7f0000000240)={0xffffffff, 0x5, 0x8, 0x0, 0xa8, 0x1000, 0x7037, 0x8001}, &(0x7f0000000280)={0x0, 0x3, 0x9, 0x6, 0x0, 0x5, 0x182, 0x1}, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0x2]}, 0x8})

23:15:54 executing program 4:
ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30)
write$damon_monitor_on(0xffffffffffffffff, &(0x7f0000000000), 0x3)
ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30) (async)
write$damon_monitor_on(0xffffffffffffffff, &(0x7f0000000000), 0x3) (async)

23:15:54 executing program 2:
clock_gettime(0x3, &(0x7f0000000040)) (async)
clock_gettime(0x0, &(0x7f0000000100)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x9, 0x2, 0x2, 0xb9, 0x9c58, 0x4, 0x8, 0x101}, &(0x7f0000000080)={0x7, 0x6, 0x3, 0x23, 0xfffffffffffff000, 0x9, 0x3ff, 0x8000}, &(0x7f00000000c0)={0xd, 0x7d3, 0x1f, 0x8, 0xeb, 0x0, 0x100000001, 0x7}, &(0x7f0000000140)={r0, r1+10000000}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x4]}, 0x8})
pselect6(0x40, &(0x7f0000000200)={0x8, 0xfffffffffffffff9, 0x7fff, 0x0, 0xffffffffffffff00, 0x0, 0xffff, 0x7}, &(0x7f0000000240)={0xffffffff, 0x5, 0x8, 0x0, 0xa8, 0x1000, 0x7037, 0x8001}, &(0x7f0000000280)={0x0, 0x3, 0x9, 0x6, 0x0, 0x5, 0x182, 0x1}, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0x2]}, 0x8})

23:15:54 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1, 0x5}, r1}}, 0x30)

23:15:54 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0})

23:15:54 executing program 5:
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x7ffffffff000)

23:15:54 executing program 4:
ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) (async)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30) (async)
write$damon_monitor_on(0xffffffffffffffff, &(0x7f0000000000), 0x3)

[  840.220215][ T9282] binder: BINDER_SET_CONTEXT_MGR already set
23:15:54 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
socketpair(0x5, 0x80000, 0x540, &(0x7f0000000100)) (async, rerun: 32)
ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000080)) (rerun: 32)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r1, 0x40046210, &(0x7f00000000c0))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:54 executing program 2:
clock_gettime(0x3, &(0x7f0000000040)) (async)
clock_gettime(0x0, &(0x7f0000000100)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x9, 0x2, 0x2, 0xb9, 0x9c58, 0x4, 0x8, 0x101}, &(0x7f0000000080)={0x7, 0x6, 0x3, 0x23, 0xfffffffffffff000, 0x9, 0x3ff, 0x8000}, &(0x7f00000000c0)={0xd, 0x7d3, 0x1f, 0x8, 0xeb, 0x0, 0x100000001, 0x7}, &(0x7f0000000140)={r0, r1+10000000}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x4]}, 0x8})
pselect6(0x40, &(0x7f0000000200)={0x8, 0xfffffffffffffff9, 0x7fff, 0x0, 0xffffffffffffff00, 0x0, 0xffff, 0x7}, &(0x7f0000000240)={0xffffffff, 0x5, 0x8, 0x0, 0xa8, 0x1000, 0x7037, 0x8001}, &(0x7f0000000280)={0x0, 0x3, 0x9, 0x6, 0x0, 0x5, 0x182, 0x1}, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0x2]}, 0x8})

23:15:54 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1, 0x5}, r1}}, 0x30)

23:15:54 executing program 4:
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2, 0x800b3c1}}}, 0x30)

23:15:54 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0})

23:15:54 executing program 5:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0)

[  840.267147][ T9282] binder: 9262:9282 ioctl 4018620d 20000000 returned -16
23:15:54 executing program 2:
clock_gettime(0x8da1356cbaed6065, &(0x7f0000000040))
r0 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000001180))

23:15:54 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0})

23:15:54 executing program 4:
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2, 0x800b3c1}}}, 0x30)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2, 0x800b3c1}}}, 0x30) (async)

23:15:54 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1, 0x5}, r1}}, 0x30)

23:15:54 executing program 2:
clock_gettime(0x8da1356cbaed6065, &(0x7f0000000040)) (async)
r0 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000001180))

23:15:54 executing program 5:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0)

23:15:55 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
process_vm_readv(0x0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/90, 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
process_vm_readv(0xffffffffffffffff, &(0x7f0000000080), 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/47, 0x2f}, {&(0x7f0000000240)=""/222, 0xde}, {&(0x7f00000003c0)=""/251, 0xfb}, {&(0x7f00000004c0)=""/181, 0xb5}, {&(0x7f0000000340)=""/25, 0x19}], 0x5, 0x0)

23:15:55 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0})

23:15:55 executing program 4:
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2, 0x800b3c1}}}, 0x30)

23:15:55 executing program 2:
clock_gettime(0x8da1356cbaed6065, &(0x7f0000000040))
r0 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000001180))

23:15:55 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1, 0x5}}}, 0x30)

23:15:55 executing program 5:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0)

23:15:55 executing program 4:
ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000000)={{0x3, @addr=0x3f}, 0x8, 0x0, 0x8})
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30)

23:15:55 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1, 0x5}}}, 0x30)

23:15:55 executing program 2:
clock_gettime(0x6, &(0x7f0000000040))

23:15:55 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x500000000000000, 0x0, 0x0, 0x0, 0x0})

23:15:55 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) (async, rerun: 64)
process_vm_readv(0x0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/90, 0x5a}], 0x1, 0x0, 0x0, 0x0) (rerun: 64)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
process_vm_readv(0xffffffffffffffff, &(0x7f0000000080), 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/47, 0x2f}, {&(0x7f0000000240)=""/222, 0xde}, {&(0x7f00000003c0)=""/251, 0xfb}, {&(0x7f00000004c0)=""/181, 0xb5}, {&(0x7f0000000340)=""/25, 0x19}], 0x5, 0x0)

23:15:55 executing program 5:
clock_gettime(0x8da1356cbaed6065, &(0x7f0000000040))
r0 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000001180))

23:15:55 executing program 5:
clock_gettime(0x8da1356cbaed6065, &(0x7f0000000040))
r0 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000001180))

23:15:55 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0})

23:15:55 executing program 4:
ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000000)={{0x3, @addr=0x3f}, 0x8, 0x0, 0x8}) (async)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30)

23:15:55 executing program 2:
clock_gettime(0x6, &(0x7f0000000040))
clock_gettime(0x6, &(0x7f0000000040)) (async)

23:15:55 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1, 0x5}}}, 0x30)

23:15:55 executing program 2:
clock_gettime(0x6, &(0x7f0000000040))

23:15:55 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x700000000000000, 0x0, 0x0, 0x0, 0x0})

[  840.959271][ T9386] binder: BINDER_SET_CONTEXT_MGR already set
[  840.983165][ T9386] binder: 9385:9386 ioctl 4018620d 20000000 returned -16
23:15:55 executing program 2:
clock_gettime(0x5, &(0x7f0000000000))

23:15:55 executing program 4:
ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000000)={{0x3, @addr=0x3f}, 0x8, 0x0, 0x8}) (async)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30)

23:15:55 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0})

[  841.006651][ T9386] binder: BINDER_SET_CONTEXT_MGR already set
[  841.012868][ T9386] binder: 9385:9386 ioctl 4018620d 20000000 returned -16
[  841.036658][ T9386] binder: BINDER_SET_CONTEXT_MGR already set
[  841.051159][ T9386] binder: 9385:9386 ioctl 4018620d 20000000 returned -16
[  841.079840][ T9386] binder: BINDER_SET_CONTEXT_MGR already set
[  841.086355][ T9386] binder: 9385:9386 ioctl 4018620d 20000000 returned -16
[  841.098952][ T9386] binder: BINDER_SET_CONTEXT_MGR already set
[  841.107623][ T9386] binder: 9385:9386 ioctl 4018620d 20000000 returned -16
[  841.117139][ T9386] binder: BINDER_SET_CONTEXT_MGR already set
[  841.123222][ T9386] binder: 9385:9386 ioctl 4018620d 20000000 returned -16
[  841.132217][ T9386] binder: BINDER_SET_CONTEXT_MGR already set
[  841.139241][ T9386] binder: 9385:9386 ioctl 4018620d 20000000 returned -16
[  841.148050][ T9386] binder: BINDER_SET_CONTEXT_MGR already set
[  841.155047][ T9386] binder: 9385:9386 ioctl 4018620d 20000000 returned -16
[  841.162257][ T9386] binder: BINDER_SET_CONTEXT_MGR already set
[  841.170066][ T9386] binder: 9385:9386 ioctl 4018620d 20000000 returned -16
[  841.178214][ T9386] binder: BINDER_SET_CONTEXT_MGR already set
[  841.185951][ T9386] binder: 9385:9386 ioctl 4018620d 20000000 returned -16
[  841.193162][ T9386] binder: BINDER_SET_CONTEXT_MGR already set
[  841.200732][ T9386] binder: 9385:9386 ioctl 4018620d 20000000 returned -16
[  841.209706][ T9386] binder: BINDER_SET_CONTEXT_MGR already set
[  841.216942][ T9386] binder: 9385:9386 ioctl 4018620d 20000000 returned -16
[  841.224338][ T9386] binder: BINDER_SET_CONTEXT_MGR already set
[  841.230407][ T9386] binder: 9385:9386 ioctl 4018620d 20000000 returned -16
[  841.238005][ T9386] binder: BINDER_SET_CONTEXT_MGR already set
[  841.244165][ T9386] binder: 9385:9386 ioctl 4018620d 20000000 returned -16
[  841.251281][ T9386] binder: BINDER_SET_CONTEXT_MGR already set
[  841.257460][ T9386] binder: 9385:9386 ioctl 4018620d 20000000 returned -16
[  841.264746][ T9386] binder: BINDER_SET_CONTEXT_MGR already set
[  841.270734][ T9386] binder: 9385:9386 ioctl 4018620d 20000000 returned -16
[  841.278009][ T9386] binder: BINDER_SET_CONTEXT_MGR already set
[  841.283990][ T9386] binder: 9385:9386 ioctl 4018620d 20000000 returned -16
[  841.291148][ T9386] binder: BINDER_SET_CONTEXT_MGR already set
[  841.297146][ T9386] binder: 9385:9386 ioctl 4018620d 20000000 returned -16
[  841.304304][ T9386] binder: BINDER_SET_CONTEXT_MGR already set
[  841.310358][ T9386] binder: 9385:9386 ioctl 4018620d 20000000 returned -16
[  841.318722][ T9386] binder: BINDER_SET_CONTEXT_MGR already set
[  841.326113][ T9386] binder: 9385:9386 ioctl 4018620d 20000000 returned -16
[  841.333266][ T9386] binder: BINDER_SET_CONTEXT_MGR already set
[  841.339820][ T9386] binder: 9385:9386 ioctl 4018620d 20000000 returned -16
[  841.347926][ T9386] binder: BINDER_SET_CONTEXT_MGR already set
[  841.354002][ T9386] binder: 9385:9386 ioctl 4018620d 20000000 returned -16
[  841.361275][ T9386] binder: BINDER_SET_CONTEXT_MGR already set
[  841.367402][ T9386] binder: 9385:9386 ioctl 4018620d 20000000 returned -16
[  841.374597][ T9386] binder: BINDER_SET_CONTEXT_MGR already set
[  841.380665][ T9386] binder: 9385:9386 ioctl 4018620d 20000000 returned -16
[  841.387859][ T9386] binder: BINDER_SET_CONTEXT_MGR already set
[  841.393912][ T9386] binder: 9385:9386 ioctl 4018620d 20000000 returned -16
[  841.401151][ T9386] binder: BINDER_SET_CONTEXT_MGR already set
[  841.407254][ T9386] binder: 9385:9386 ioctl 4018620d 20000000 returned -16
[  841.414476][ T9386] binder: BINDER_SET_CONTEXT_MGR already set
[  841.420578][ T9386] binder: 9385:9386 ioctl 4018620d 20000000 returned -16
[  841.427846][ T9386] binder: BINDER_SET_CONTEXT_MGR already set
[  841.433914][ T9386] binder: 9385:9386 ioctl 4018620d 20000000 returned -16
[  841.444583][ T9386] binder: BINDER_SET_CONTEXT_MGR already set
[  841.450571][ T9386] binder: 9385:9386 ioctl 4018620d 20000000 returned -16
[  841.457882][ T9386] binder: BINDER_SET_CONTEXT_MGR already set
[  841.463857][ T9386] binder: 9385:9386 ioctl 4018620d 20000000 returned -16
[  841.471090][ T9386] binder: BINDER_SET_CONTEXT_MGR already set
[  841.477213][ T9386] binder: 9385:9386 ioctl 4018620d 20000000 returned -16
[  841.484440][ T9386] binder: BINDER_SET_CONTEXT_MGR already set
[  841.490500][ T9386] binder: 9385:9386 ioctl 4018620d 20000000 returned -16
[  841.497711][ T9386] binder: BINDER_SET_CONTEXT_MGR already set
[  841.503787][ T9386] binder: 9385:9386 ioctl 4018620d 20000000 returned -16
[  841.511048][ T9386] binder: BINDER_SET_CONTEXT_MGR already set
[  841.517633][ T9386] binder: 9385:9386 ioctl 4018620d 20000000 returned -16
[  841.524844][ T9386] binder: BINDER_SET_CONTEXT_MGR already set
[  841.530857][ T9386] binder: 9385:9386 ioctl 4018620d 20000000 returned -16
[  841.538009][ T9386] binder: BINDER_SET_CONTEXT_MGR already set
[  841.545994][ T9386] binder: 9385:9386 ioctl 4018620d 20000000 returned -16
[  841.553098][ T9386] binder: BINDER_SET_CONTEXT_MGR already set
[  841.559134][ T9386] binder: 9385:9386 ioctl 4018620d 20000000 returned -16
[  841.566270][ T9386] binder: BINDER_SET_CONTEXT_MGR already set
[  841.572238][ T9386] binder: 9385:9386 ioctl 4018620d 20000000 returned -16
[  841.579393][ T9386] binder: BINDER_SET_CONTEXT_MGR already set
[  841.585498][ T9386] binder: 9385:9386 ioctl 4018620d 20000000 returned -16
[  841.592587][ T9386] binder: BINDER_SET_CONTEXT_MGR already set
[  841.598696][ T9386] binder: 9385:9386 ioctl 4018620d 20000000 returned -16
[  841.605844][ T9386] binder: BINDER_SET_CONTEXT_MGR already set
[  841.611809][ T9386] binder: 9385:9386 ioctl 4018620d 20000000 returned -16
[  841.618947][ T9386] binder: BINDER_SET_CONTEXT_MGR already set
[  841.624971][ T9386] binder: 9385:9386 ioctl 4018620d 20000000 returned -16
[  841.632044][ T9386] binder: BINDER_SET_CONTEXT_MGR already set
[  841.638061][ T9386] binder: 9385:9386 ioctl 4018620d 20000000 returned -16
[  841.645174][ T9386] binder: BINDER_SET_CONTEXT_MGR already set
[  841.651223][ T9386] binder: 9385:9386 ioctl 4018620d 20000000 returned -16
[  841.658752][ T9386] binder: BINDER_SET_CONTEXT_MGR already set
[  841.667327][ T9386] binder: 9385:9386 ioctl 4018620d 20000000 returned -16
[  841.674636][ T9386] binder: BINDER_SET_CONTEXT_MGR already set
[  841.680786][ T9386] binder: 9385:9386 ioctl 4018620d 20000000 returned -16
[  841.688262][ T9386] binder: BINDER_SET_CONTEXT_MGR already set
[  841.694482][ T9386] binder: 9385:9386 ioctl 4018620d 20000000 returned -16
[  841.701617][ T9386] binder: BINDER_SET_CONTEXT_MGR already set
[  841.707827][ T9386] binder: 9385:9386 ioctl 4018620d 20000000 returned -16
[  841.715353][ T9386] binder: BINDER_SET_CONTEXT_MGR already set
[  841.721390][ T9386] binder: 9385:9386 ioctl 4018620d 20000000 returned -16
[  841.728556][ T9386] binder: BINDER_SET_CONTEXT_MGR already set
[  841.735579][ T9386] binder: 9385:9386 ioctl 4018620d 20000000 returned -16
[  841.742751][ T9386] binder: BINDER_SET_CONTEXT_MGR already set
[  841.748955][ T9386] binder: 9385:9386 ioctl 4018620d 20000000 returned -16
[  841.757100][ T9386] binder: BINDER_SET_CONTEXT_MGR already set
[  841.763134][ T9386] binder: 9385:9386 ioctl 4018620d 20000000 returned -16
[  841.770520][ T9386] binder: BINDER_SET_CONTEXT_MGR already set
[  841.776902][ T9386] binder: 9385:9386 ioctl 4018620d 20000000 returned -16
23:15:56 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
process_vm_readv(0x0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/90, 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async)
process_vm_readv(0xffffffffffffffff, &(0x7f0000000080), 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/47, 0x2f}, {&(0x7f0000000240)=""/222, 0xde}, {&(0x7f00000003c0)=""/251, 0xfb}, {&(0x7f00000004c0)=""/181, 0xb5}, {&(0x7f0000000340)=""/25, 0x19}], 0x5, 0x0)

23:15:56 executing program 5:
clock_gettime(0x8da1356cbaed6065, &(0x7f0000000040))
r0 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000001180))

23:15:56 executing program 2:
clock_gettime(0x5, &(0x7f0000000000))

23:15:56 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1, 0x5}, r1}}, 0x30)

23:15:56 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x2, 0x0, @empty}}}, 0x30)
r1 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000180))
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180))
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x81, 0x0, 0x1010, 0x3, 0x3, 0x8, 0x5})
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0), 0x1, {0xa, 0x4e20, 0xe7f, @local, 0x10000}}}, 0x38)

23:15:56 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0xff00000000000000, 0x0, 0x0, 0x0, 0x0})

23:15:56 executing program 2:
clock_gettime(0x5, &(0x7f0000000000))

23:15:56 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x2, 0x0, @empty}}}, 0x30)
r1 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000180))
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180))
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x81, 0x0, 0x1010, 0x3, 0x3, 0x8, 0x5})
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0), 0x1, {0xa, 0x4e20, 0xe7f, @local, 0x10000}}}, 0x38)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x2, 0x0, @empty}}}, 0x30) (async)
syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async)
ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000180)) (async)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180)) (async)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x81, 0x0, 0x1010, 0x3, 0x3, 0x8, 0x5}) (async)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0), 0x1, {0xa, 0x4e20, 0xe7f, @local, 0x10000}}}, 0x38) (async)

23:15:56 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1, 0x5}}}, 0x30)

23:15:56 executing program 5:
clock_gettime(0x8da1356cbaed6065, &(0x7f0000000040))
syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)

[  841.784400][ T9386] binder: BINDER_SET_CONTEXT_MGR already set
[  841.790435][ T9386] binder: 9385:9386 ioctl 4018620d 20000000 returned -16
23:15:56 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0xffffff7f00000000, 0x0, 0x0, 0x0, 0x0})

23:15:56 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:56 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x2, 0x0, @empty}}}, 0x30)
r1 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2) (async)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000180))
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180)) (async)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x81, 0x0, 0x1010, 0x3, 0x3, 0x8, 0x5}) (async)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0), 0x1, {0xa, 0x4e20, 0xe7f, @local, 0x10000}}}, 0x38)

23:15:56 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="e8ffffffffba2d521b0f01d58e00"], 0x14}}, 0x0)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000080))
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fedbdf2514000000080001000300000008001d00", @ANYRES32, @ANYBLOB="7e611dd761a5e334723a9509277d8ef37713e00008e6f603964c248d996dcc9d2dfd003e9bea09ad382677a85bd4cd361788b151ee7570e9ccfb6db7787591c1fd7425f9e2af573722cfed78d0cd500007dfb8dd36c0f2fad63c36720819", @ANYRES32=r1, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08001c00", @ANYRES32, @ANYBLOB="080001000200000008000300", @ANYRES32=0x0, @ANYBLOB="0c000600030000000000000008001c00", @ANYRES32, @ANYBLOB="08001d00", @ANYRES32, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x44040}, 0x40)
clock_gettime(0x5, &(0x7f0000000000))

23:15:56 executing program 5:
clock_gettime(0x8da1356cbaed6065, &(0x7f0000000040))

23:15:56 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0})

23:15:56 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1, 0x5}}}, 0x30)

23:15:56 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0})

23:15:56 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:56 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30)

23:15:56 executing program 5:
clock_gettime(0x0, &(0x7f0000000040))

23:15:56 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="e8ffffffffba2d521b0f01d58e00"], 0x14}}, 0x0)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000080))
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fedbdf2514000000080001000300000008001d00", @ANYRES32, @ANYBLOB="7e611dd761a5e334723a9509277d8ef37713e00008e6f603964c248d996dcc9d2dfd003e9bea09ad382677a85bd4cd361788b151ee7570e9ccfb6db7787591c1fd7425f9e2af573722cfed78d0cd500007dfb8dd36c0f2fad63c36720819", @ANYRES32=r1, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08001c00", @ANYRES32, @ANYBLOB="080001000200000008000300", @ANYRES32=0x0, @ANYBLOB="0c000600030000000000000008001c00", @ANYRES32, @ANYBLOB="08001d00", @ANYRES32, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x44040}, 0x40) (async)
clock_gettime(0x5, &(0x7f0000000000))

23:15:56 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1, 0x5}}}, 0x30)

23:15:56 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0})

23:15:56 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:56 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30)

23:15:56 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1, 0x5}, r1}}, 0x30)

23:15:56 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="e8ffffffffba2d521b0f01d58e00"], 0x14}}, 0x0) (async, rerun: 64)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000080)) (rerun: 64)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fedbdf2514000000080001000300000008001d00", @ANYRES32, @ANYBLOB="7e611dd761a5e334723a9509277d8ef37713e00008e6f603964c248d996dcc9d2dfd003e9bea09ad382677a85bd4cd361788b151ee7570e9ccfb6db7787591c1fd7425f9e2af573722cfed78d0cd500007dfb8dd36c0f2fad63c36720819", @ANYRES32=r1, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08001c00", @ANYRES32, @ANYBLOB="080001000200000008000300", @ANYRES32=0x0, @ANYBLOB="0c000600030000000000000008001c00", @ANYRES32, @ANYBLOB="08001d00", @ANYRES32, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x44040}, 0x40) (async, rerun: 32)
clock_gettime(0x5, &(0x7f0000000000)) (rerun: 32)

23:15:56 executing program 5:
clock_gettime(0x0, &(0x7f0000000040))

23:15:56 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0})

23:15:56 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x98, 0x0, &(0x7f0000000440)=[@increfs_done, @dead_binder_done, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f00000003c0)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/149, 0x95, 0x1, 0x29}, @fda={0x66646185, 0x2, 0x2, 0x40}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/207, 0xcf, 0x0, 0x4}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}, @free_buffer, @increfs_done={0x40106308, 0x3}, @dead_binder_done], 0x6a, 0x0, &(0x7f0000000500)="0f90215be67759dcca8c026944521b8fbcae1c176305707a5e2d5ba32db9430490c95e1fd25fa527683589b23a07e5832a2d6751ad18749e962766ec5c5dcc59bd9420584017768c87ee1a7ce7f26abb34c6da646f96699eb65630dd38d83918028fb37b82220d09f874"})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:56 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1, 0x5}, r1}}, 0x30)

23:15:56 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30) (async)

23:15:56 executing program 5:
clock_gettime(0x0, &(0x7f0000000040))

23:15:56 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x98, 0x0, &(0x7f0000000440)=[@increfs_done, @dead_binder_done, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f00000003c0)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/149, 0x95, 0x1, 0x29}, @fda={0x66646185, 0x2, 0x2, 0x40}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/207, 0xcf, 0x0, 0x4}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}, @free_buffer, @increfs_done={0x40106308, 0x3}, @dead_binder_done], 0x6a, 0x0, &(0x7f0000000500)="0f90215be67759dcca8c026944521b8fbcae1c176305707a5e2d5ba32db9430490c95e1fd25fa527683589b23a07e5832a2d6751ad18749e962766ec5c5dcc59bd9420584017768c87ee1a7ce7f26abb34c6da646f96699eb65630dd38d83918028fb37b82220d09f874"})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x98, 0x0, &(0x7f0000000440)=[@increfs_done, @dead_binder_done, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f00000003c0)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/149, 0x95, 0x1, 0x29}, @fda={0x66646185, 0x2, 0x2, 0x40}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/207, 0xcf, 0x0, 0x4}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}, @free_buffer, @increfs_done={0x40106308, 0x3}, @dead_binder_done], 0x6a, 0x0, &(0x7f0000000500)="0f90215be67759dcca8c026944521b8fbcae1c176305707a5e2d5ba32db9430490c95e1fd25fa527683589b23a07e5832a2d6751ad18749e962766ec5c5dcc59bd9420584017768c87ee1a7ce7f26abb34c6da646f96699eb65630dd38d83918028fb37b82220d09f874"}) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async)

23:15:56 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x6, 0x0, 0x0})

23:15:56 executing program 5:
clock_gettime(0x8da1356cbaed6065, 0x0)

23:15:56 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1, 0x5}, r1}}, 0x30)

23:15:56 executing program 2:
clock_gettime(0x7, &(0x7f0000000000))
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000000c0)={0x1, @vbi={0x1, 0x7, 0x7, 0x33524742, [0x8000, 0x7], [0xffff, 0x1f], 0x1}})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00'})

23:15:56 executing program 4:
r0 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0xff, @remote, 0x9}}}, 0x30)
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0, r4}}, 0x18)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r4, 0x2}}, 0x18)

23:15:56 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 64)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x0, 0x0) (rerun: 64)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x98, 0x0, &(0x7f0000000440)=[@increfs_done, @dead_binder_done, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f00000003c0)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/149, 0x95, 0x1, 0x29}, @fda={0x66646185, 0x2, 0x2, 0x40}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/207, 0xcf, 0x0, 0x4}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}, @free_buffer, @increfs_done={0x40106308, 0x3}, @dead_binder_done], 0x6a, 0x0, &(0x7f0000000500)="0f90215be67759dcca8c026944521b8fbcae1c176305707a5e2d5ba32db9430490c95e1fd25fa527683589b23a07e5832a2d6751ad18749e962766ec5c5dcc59bd9420584017768c87ee1a7ce7f26abb34c6da646f96699eb65630dd38d83918028fb37b82220d09f874"}) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:56 executing program 2:
clock_gettime(0x7, &(0x7f0000000000))
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000000c0)={0x1, @vbi={0x1, 0x7, 0x7, 0x33524742, [0x8000, 0x7], [0xffff, 0x1f], 0x1}})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00'})
clock_gettime(0x7, &(0x7f0000000000)) (async)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000000c0)={0x1, @vbi={0x1, 0x7, 0x7, 0x33524742, [0x8000, 0x7], [0xffff, 0x1f], 0x1}}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) (async)

23:15:56 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0xffffff7f, 0x0, 0x0, 0x0, 0x0})

23:15:56 executing program 4:
r0 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0xff, @remote, 0x9}}}, 0x30)
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0, r4}}, 0x18)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r4, 0x2}}, 0x18)
memfd_secret(0x0) (async)
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0xff, @remote, 0x9}}}, 0x30) (async)
memfd_secret(0x0) (async)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0, r4}}, 0x18) (async)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r4, 0x2}}, 0x18) (async)

23:15:56 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x7, 0x0, 0x0})

23:15:56 executing program 2:
clock_gettime(0x7, &(0x7f0000000000)) (async)
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000000c0)={0x1, @vbi={0x1, 0x7, 0x7, 0x33524742, [0x8000, 0x7], [0xffff, 0x1f], 0x1}}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00'})

23:15:56 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1, 0x5}, r1}}, 0x30)

23:15:56 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x300, 0x0, 0x0})

23:15:56 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
socketpair(0x5, 0x80000, 0x540, &(0x7f0000000100))
ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000080))
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r1, 0x40046210, &(0x7f00000000c0))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:56 executing program 4:
r0 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0xff, @remote, 0x9}}}, 0x30) (async)
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) (async)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0, r4}}, 0x18) (async, rerun: 32)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r4, 0x2}}, 0x18) (rerun: 32)

23:15:56 executing program 1:
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x19}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x95}, 0x4)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})

23:15:56 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1, 0x5}, r1}}, 0x30)

23:15:56 executing program 2:
clock_gettime(0x5, &(0x7f0000000040))
pselect6(0x40, &(0x7f0000000000)={0x7, 0x3, 0x7, 0x636, 0x4, 0x4d, 0x81, 0x3f}, &(0x7f0000000080)={0x3, 0x6, 0x4, 0x4, 0x4, 0xec8, 0x1, 0x2}, &(0x7f00000001c0)={0x9, 0x9, 0x6, 0x3ff, 0x8, 0x2, 0x3, 0x2}, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={[0x200]}, 0x8})
r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000200))
sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x1402, 0x4, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x800)

23:15:56 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x500, 0x0, 0x0})

23:15:56 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1, 0x5}, r1}}, 0x30)

23:15:56 executing program 1:
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x19}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x95}, 0x4) (async, rerun: 32)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 32)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})

23:15:56 executing program 4:
r0 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_mreqn(r1, 0x0, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0xb, @rand_addr=' \x01\x00'}}}, 0x30)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg0\x00'})
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r0)
r4 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000001180))
ioctl$VIDIOC_TRY_DECODER_CMD(r4, 0xc0485661, &(0x7f0000000240)={0x0, 0x1, @start={0x2, 0x1}})
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xa00008}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r3, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x28}}, 0x40000)

23:15:56 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x600, 0x0, 0x0})

23:15:56 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0)

23:15:56 executing program 2:
clock_gettime(0x5, &(0x7f0000000040)) (async)
pselect6(0x40, &(0x7f0000000000)={0x7, 0x3, 0x7, 0x636, 0x4, 0x4d, 0x81, 0x3f}, &(0x7f0000000080)={0x3, 0x6, 0x4, 0x4, 0x4, 0xec8, 0x1, 0x2}, &(0x7f00000001c0)={0x9, 0x9, 0x6, 0x3ff, 0x8, 0x2, 0x3, 0x2}, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={[0x200]}, 0x8}) (async)
r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000200))
sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x1402, 0x4, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x800)

23:15:56 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
socketpair(0x5, 0x80000, 0x540, &(0x7f0000000100))
ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000080))
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r1, 0x40046210, &(0x7f00000000c0))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:56 executing program 1:
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x19}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x95}, 0x4)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})

23:15:56 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0)

23:15:56 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x700, 0x0, 0x0})

23:15:56 executing program 4:
r0 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_mreqn(r1, 0x0, 0x0, 0x0, 0x0) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0xb, @rand_addr=' \x01\x00'}}}, 0x30)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg0\x00'}) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r0) (async)
r4 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000001180))
ioctl$VIDIOC_TRY_DECODER_CMD(r4, 0xc0485661, &(0x7f0000000240)={0x0, 0x1, @start={0x2, 0x1}}) (async)
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xa00008}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r3, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x28}}, 0x40000)

23:15:56 executing program 2:
clock_gettime(0x5, &(0x7f0000000040))
pselect6(0x40, &(0x7f0000000000)={0x7, 0x3, 0x7, 0x636, 0x4, 0x4d, 0x81, 0x3f}, &(0x7f0000000080)={0x3, 0x6, 0x4, 0x4, 0x4, 0xec8, 0x1, 0x2}, &(0x7f00000001c0)={0x9, 0x9, 0x6, 0x3ff, 0x8, 0x2, 0x3, 0x2}, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={[0x200]}, 0x8}) (async)
r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000200))
sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x1402, 0x4, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x800)

23:15:56 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xff00, 0x0, 0x0})

23:15:56 executing program 4:
r0 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) (async)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_mreqn(r1, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0xb, @rand_addr=' \x01\x00'}}}, 0x30) (async, rerun: 32)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg0\x00'})
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30) (async, rerun: 32)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r0) (async, rerun: 32)
r4 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000001180)) (async)
ioctl$VIDIOC_TRY_DECODER_CMD(r4, 0xc0485661, &(0x7f0000000240)={0x0, 0x1, @start={0x2, 0x1}}) (async)
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xa00008}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r3, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x28}}, 0x40000)

23:15:56 executing program 2:
clock_gettime(0x5, &(0x7f0000000040))
clock_gettime(0x0, &(0x7f0000000000))

23:15:56 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0)

23:15:56 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="2e7b15fd06cced8c1d71c9000000000000000000c9449be2828a4a3a9837ddc2a2570b0f7513a8461e503be0c47122e5bcef13783d13e620bb2c284cb7bc21c34677277b66ce5896aa7904695345fc2a95c2125439c02e75b99606987e9d1ca17f76ad308326c6114be6b45ae272e1649aa32354d258791fe439f78a827bdd6edc7ef78533a096d85b2cc3dbd3cea6ec25be848e2695e14889e29b6cbd908c1b16763a0b33b0d1"], 0x0, 0x0, 0x0})
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000080)={0x1})
r1 = memfd_secret(0x80000)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)

23:15:56 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
socketpair(0x5, 0x80000, 0x540, &(0x7f0000000100))
ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000080))
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r1, 0x40046210, &(0x7f00000000c0))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:56 executing program 2:
clock_gettime(0x5, &(0x7f0000000040))
clock_gettime(0x0, &(0x7f0000000000))
clock_gettime(0x5, &(0x7f0000000040)) (async)
clock_gettime(0x0, &(0x7f0000000000)) (async)

23:15:56 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x3, 0xffffffffffffffff, 0x30, 0x1, @ib={0x1b, 0x0, 0x10000, {"1683f0209d192a72e7e8e6fe8c34a9c4"}, 0x1, 0x7, 0x3}}}, 0xa0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x111, 0xa}}, 0x20)

23:15:56 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30)

23:15:56 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0})

[  842.475208][ T9589] binder: 9587:9589 unknown command 4246043438
[  842.502873][ T9589] binder: 9587:9589 ioctl c0306201 20000380 returned -22
23:15:57 executing program 2:
clock_gettime(0x5, &(0x7f0000000040))
clock_gettime(0x0, &(0x7f0000000000))

23:15:57 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x30)

23:15:57 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0})

23:15:57 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x3, 0xffffffffffffffff, 0x30, 0x1, @ib={0x1b, 0x0, 0x10000, {"1683f0209d192a72e7e8e6fe8c34a9c4"}, 0x1, 0x7, 0x3}}}, 0xa0) (async)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x111, 0xa}}, 0x20)

23:15:57 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
socketpair(0x5, 0x80000, 0x540, &(0x7f0000000100))
ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000080))
pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:57 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="2e7b15fd06cced8c1d71c9000000000000000000c9449be2828a4a3a9837ddc2a2570b0f7513a8461e503be0c47122e5bcef13783d13e620bb2c284cb7bc21c34677277b66ce5896aa7904695345fc2a95c2125439c02e75b99606987e9d1ca17f76ad308326c6114be6b45ae272e1649aa32354d258791fe439f78a827bdd6edc7ef78533a096d85b2cc3dbd3cea6ec25be848e2695e14889e29b6cbd908c1b16763a0b33b0d1"], 0x0, 0x0, 0x0}) (async, rerun: 32)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000080)={0x1}) (rerun: 32)
r1 = memfd_secret(0x80000)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)

[  842.534958][ T9606] binder: 9587:9606 ioctl c018620c 20000080 returned -22
23:15:57 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x30)

23:15:57 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x3, 0xffffffffffffffff, 0x30, 0x1, @ib={0x1b, 0x0, 0x10000, {"1683f0209d192a72e7e8e6fe8c34a9c4"}, 0x1, 0x7, 0x3}}}, 0xa0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x111, 0xa}}, 0x20)

23:15:57 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0})

23:15:57 executing program 2:
clock_gettime(0x6, &(0x7f00000001c0))
pselect6(0x40, &(0x7f0000000000)={0x1f, 0x4000000000, 0x0, 0x100000000, 0x9, 0x0, 0x20080, 0x8}, &(0x7f0000000080)={0x8, 0x0, 0x1, 0x7f, 0x10001, 0x1, 0x3f, 0x2}, &(0x7f00000000c0)={0x1, 0x100, 0x9, 0x7ff, 0x1, 0x7, 0x0, 0x101}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140), 0x8})

23:15:57 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0})

23:15:57 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f00000000c0)={{r1}, 0x0, 0x10, @unused=[0x0, 0x3, 0x7fffffffffffffff, 0x6], @name="bbcafe5128ffb2c101024b0be85870220a82fa3562ebc2b185b64cc3bb4c7d2df8029a33672f2b91a756b704b7ed3770486868766a50ec8e85a3348414d1225335538a2f521b8e85a41ca9ef4965e9aac21425548d23c99740d624f5719d71061d61832aafd29721227c5bc46c727d76001cdd65aca85b353976095f3c6e1c741d97572c647e8bf5b1b03a647a822c06ba6229568e8579fb16ce6043825a2c67461edcb9f7689d59bb7a85fa3e023bf9591e3387f754129ca7cea60cff76527d8823aca9e3db34689814c8c96ef78f15ff152c4a69346624410bed8e3bc523871f96c16b264909fafb0c017673a516b26281bdf020a68b38e72a8b78508fdaadbb4a57e91949fbc782cf0580fe31adbb2a1bfc557e467319c768a93b191b41ac09fc07a9b18047a847d2d7af56a09e6cadd03e9cfae3e80ff2289c86e03ff3916e707a52ebf00e5aa7c1b9734eec65cf117c0802e1f8cc48199973e378916f32193ece42ef9e9a58bc3ad54dcd2dddcde03a2229f5ff48de8f00c19087743a4a6f13e1c6ce7466075e057ae59ac1c4db7eeb8c3170ec14ebb0ed10ed05584ff401b0df86c726e082392f5e2137d6da8b8f00c421cf7a58bdf6d4a4f7e226e839858dc8f79ccef269cc2e30344f332dc25cdd74cc524baec24b34c48ef2bd3cc26a1c453e4e970abbfbaa23c4f557b4155d0b8d049f336cb06bf0c732095e1169a9dbd00a095640b111252e2a6dc6ea201e4c5b2a6cce33c1590c0c3816e558b9e05c87dc95b6075346436b4a6287198907ff68e25dba413909355fac0b4fe10a9780f8480b552d9a95549261dfe79bf6b4e027131ed3cf057a268e2ae15992209a10cd310294b9cd4a65a45c3ce9b37ab51473302db250200f09fe90994a5ad5d07b6d8a592190ef344704787dbfe582b3d7894c16ba03ecab928a8fb6bd14fa2f091bde4dff71b9075add5953ee02110927046ca991bd21585e25cfbea9ddf7ed122b73f4679c7b3a5298106a5f9de95662f274a0f8042ce0d58e6ca36ba74b59b40ad94bdd415f7285983f101ec4f7249473d3c3c79220895ceea51e21bffa333ac4846c3c8c272af1eb053444576b88dd62c75e1bf2e780b8312da0c0437243cbf53f06a037cbd622d67a2fa6fb57ce0ca7f010fcda495f34d1a610860f3820c96a8e2b66b43c460bacd3522202438c547119ef978e14c520cde2f1ba9556410bc9415c1a9b52d57fa68d5b8f14bc3c97654b7775ad8136f3a0be777e95bd77bcbe24b0755b98f2e6b8543138b608a50e18686e41308318d1cee5b8715153f32e2a753d2414aaad6406d97b1c8c2576380bfdd619478b537a3e55eac3211c50d769f40b44ea7a5b2dabf2fd9c77be320f3c20723d452c7bfbe22085a4aa0cfc3728c0e8070062325bbb292e68462637e5e67bc55fc8f14d82739d986012c6a7041a3bf9a349cc50e77d257cf8ad4efbf75c93ffc5fa82fccfe8cd2c1d7edcf850d5ff955185bf16b0ed8160ce83a050b898478ab46382009bb0c8386c686574134af5881bb7d6f482f9c6fec49b6c43adce0ac29717202c0d3db531648cab1f5c5f7a702f48a039f34a3aa8dbdab3a29c36361090dbf55ee1b8bd72b348f419c473fb017fc9f4c4a13d034690089cbcdf9e1cdff1ae64cd5293c3a313424d899e5724be9bdcc5d8aa33adcd536705331b4149490d2a8fd13c8ee8320e3d273644690d9190e791f0f8d77a3e9e3dd731c40897a65c64fa835abe453c587247399f9a9541032c7a73807460e06a275ee486843f7bebf3abf5bcea72e64362762f53c4337a3719d04c2adcc68c9a711cedac70c4cdb7c4a22a75b73ccf59f09a61266a50fb9b4134d495e0532dc906d43eeac575f8997e6695a41d91ec081add555a91e325cb14d50898dac1e6fc648dfae8e70dbc1b3b4032e22817e8bebfcea707323b474ebf4111171372f988cf14888223be966316c8586b20ebfbec4e1e7e98dc3cd7475bb117345be7636d0b1701c1b584f7dcc9282996484d8955c92866276ec983942df5707925e5e6a656cea2fab846bb4cb0a1e6a58c246862aaa911fc5d9d63e45fff0e77c9ea7846cb7abe9b8fe1833f121d8490b74ef8d45bb493efe9b80c01f457e03caeef7df3601855520808d77287454b42662cd132bd1b8c0efcc1649096a110fc96668e7369d9ae3b509b4dc1c26d4a8a80c789aeb7c2f357a07c08b83220cfd668b4d8461722aa9d47dd8d41c7bc30b7b665f7d7d6030c67abae7df8fcb0c250ce4bf9332f51c33bd65743eebd62587b367221f9c20c911424e1b106e78c28b008a510950cbbc5039b310041d1bb11fae4408f7764c7655d81b90f1c222c7946ec81b97e8c9ed616e066f13aca5c4dc8fc9354cbd37f2b4bb73d9faeb2bdab225c461124c20cd6353131619ab45a02ad2f56497251752a0275297503ede99531e035ff42164d4648336d2e3ed9bee0c6343c9ec13be53e319791614c34d6bfc294fddf01711894310cc8aabb65c2a973005203c041e9b6ad76c6a4b3375fef7ef033803938f136cd5745ce8e1f67dd9ee4c875cc9a9f1d1749e22b3453b2652204bf65c685e886fbef46d96cb2b67a8e1ba40d4a8d51c2443289e1babb3b3da51896cf1f36ba8990a6279970a3f16dadc2b58f5ca95ea5876e508e5dbe098c3541c30d9315b0b802d9f19875a81201e0ecd7ff01306de1305496cd4176a651f14d1109964ca3b12bd379528e83b7d196d7d98ad45ce1f968fa0532050fd2f4278ae390b958cd6713597458dbefe59fd43a4504d1f369140870788020dcc671161f28de1886daf74ec00c8c8ccc4555b61cdb214d6194e622840ab58af0f0f33cae98a9a9d83da7f3b68e6e2a745d6d07101d52a829d73f03fb8f5dd8b0d63cce59e6f8598fe4e46ff3311354551e047ba358962ae249ee936bba292e8d2edea7895c0f4046583badf9cc213d52d8431c71fd93c07b19d86fb4fb47cec493f2297e99986d62e3a3cb4c09fb68ff077da3d1e9c88d3ac2c885510ab72f11b3ed03135129f835589af522bc1250ca09940dfccb71c4560907597ee1a9cb9678e86995c51d1723da0a290ee1d794fea75e075645e9df9a580a5dd950724f3e4508a0e2d00db9251f1dcfbf3df3ef67684d2b9aabdc52c5eae28bf40a7a40671895a7794adb118cb96caf3a71ba52dcedc15656afa043dfec377907cf29afb8458c4138d65aaeec37abc68875447fe63db9f0d003637d2904895e30553d21e82080ca4e224214b5ff0c71345d2a1232b3836b25a25849cfbae65a986935003dea4fe5b1a29bac782891210199f902ec6ef413e3271d4b26848ad23e5a185514119ad71950ff04d80f4be4385fb7ad906d06f27b8159d95719901991f1bd33c7ee866dd75223007e719020cb2099d797ef52d2cc891dc3985370e3d74ef065032f2b99cc6192f7addc05f79f574e5c811106030ea20fab69e61f3db3ef9c93d03c4c769d25651f9a23e8b18472c01640abf2cb56712cb718caa68c1f4e9bb1f9f49d8feea83ff1027eecbb7d8d80235268f8827f784c0b7f6ee9c04607b330f92dde0f676046ede691170bf35a5dac678adc631bc2aab690e59fa6cbbb7b5351da6543d361bcbc4a9117e2d289302c0687f4ba0f52f3357ec9087de9b47d06d8a4c9a39403badf23c608a66624f5024692a16cc1d3f0fc415e4a162bb623eaf3dfaba3ab8cd1f688cd774161ad848db38119aaf56bf928dc1812467395386883cd3c5fd873dae9bd3b88844ba5451251cc6a29c56d7d064a6d04fbdbf44e27057696db2edbc9641cd30069aff98c423e464b9c9760220d10854cbaf3e72512ef743a849ca60f728f0cb16b47ae589c9b4ddf1e6066b3a0e163a93abc3ca2d2c92eaf061d7f6a6210b2c0c948329f65ba8e01995b5f6d95fb0ad76a9d2758179b3ad28d479d9070e58a97f8a21e9bb2d857343554503fe045f1eff05b65a99cf16f2abe33297cd0d5adb55fe4bfabe3bc9f0500eeafb381a62d1c0ced4dc998449c2f6d05ea647feeea7942eea4075af49afa1f5335469acc5b4010758fd3ad48d2d4d9431b81dd33ed25d38c6f350a28accf7ca60f0afafb112ba8969ece6dad334b67cc3780ae28e98947a39da76b1b0738610231bdaaa3a39521ed81a682fda1b21ccc601af52edc8e0695d5f73b95fa8979034c26f0e8a7a63fc3c84ea054d81d65ed9664fb1d5b6a8519aa95b680f666b506f67f668b2026435d04e2208a21bbb670846631117283745a551439c21c007b8f3b4202b5809698173898a294e627cefaed571a72000176c2ec83da28a23de12f5649f95604c74ae83eb26bee24ced25bba70d9042ea274631c7bea48e43b803060e1949b7c3ad5ad7f70a5d8592ff4a92ea1b6ff92e89a996e701b003c1eafe651f5e3edd8abbf49a2d50088d3a9628099222d2ce366336ad33c3a372435f09ceed212c3d394f08f07c387e48eefa3dd62cc548b13f3fe31c7cbd4f4a1ed5bbabf6dfe78306673fc21a4800fe5abcd65bd10e171ac49fc46e283ec159e0d73efbd5c5c5479f2babcb9c0ea1a419e3506d442aebd60e807ec485501226e8313d1e6be41132fa2dd1b52121883bc563f29e1e03da214a472e9a21634ecf54b8124ed8ab19e166d5f69a97c1aaf59f82f56599f5fd5b6e94691a47bd6e8e082bf2e1dfb67a0bfbaf45ee8ff734e6227da873fc9d80608700ef940db4db9cd432f380e5a523dad685fb006ef4518f7ea58ff9bc3f1475c4582074ce42b33daf28a5316c49cc1d7fd86c1f1850c56d3ca654c77c1db6d85d14edde554ad57bc08feb2bf79671e1bd4c19914702eaa62e3691918bea7c0783278af3aea7f26ea8ede5291e47281a81fe14cfb5f1070240ff2451e3f5ce9f1735517037c991a0a05fe02ac57dc3cb1bcbf8c1a90cbbfea78508e719a9049794d7e29f2c3e897eabd444510cf3dc0e9087ea6bab503346ed5504a5195e72a9d77457bc3bd2e20bc1e5870e68b83e0383691f38f2513d59e1217e23fe3b88d2d1c033460e4121539d2fb7b7d4987067cf5ad0ee044d0ae06456f55931818c30a45d49ff39e7f69b4182dd107a554f82c4ccd13dc60656f7484b3b39f3f6bc4c022c2b4c53fb16218737993429d7971def45dbb9fee79115ba8ed77ab31379dc34dc07245cbaeaf94b4f9bc957018e035d0ba8d905142d1268f63b823997d95c18f38de15feb812e5e214cafaad5a24fa4ee0f820dfc2d955de370df447e4056a43b84fbd17604c8fd4f6433b012c3595b0bcf7ec03046cc46c859724d983c0a3e52793c854c8eff4da143e60845d63dd6adc86ed79a876878d9ba711655b51b4e83a46718faaa522c98f10b8500d17901073671f44cd13cb89841581c8fc302a347c74767b3ab2e21101d53e9b373280e7d8bcf44bfe54b36fd9d0be2c06e7ee84e2f664e2673f3219165514d42b4865e86026b20b223cbff4420eb14448699d9f357029104d5bbaf6a9a13d51de81321f8c6c31dfef0a5a47c9d232a1732f5b2486013775d759931ad70a7212d2f658b7aba971b91911d66f3c38856e76205144c9fa68dd0a101555c8721275d62bfe20403ecd5a17b0fc3ee2af8eecf5b6697d552ddc4b139ccce0324ed19108bb03f105aad5c96d3317f4206d05176fb106e48ea14b995ac075c21f44118cf89e95657f3b03f6ff2ad3"})
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x0, @loopback}}}, 0x30)

23:15:57 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x30)

[  842.610765][ T9620] binder: 9619:9620 unknown command 4246043438
[  842.610863][ T9622] binder: 9619:9622 ioctl c018620c 20000080 returned -22
[  842.630916][ T9620] binder: 9619:9620 ioctl c0306201 20000380 returned -22
23:15:57 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
socketpair(0x5, 0x80000, 0x540, &(0x7f0000000100))
ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:57 executing program 2:
clock_gettime(0x6, &(0x7f00000001c0))
pselect6(0x40, &(0x7f0000000000)={0x1f, 0x4000000000, 0x0, 0x100000000, 0x9, 0x0, 0x20080, 0x8}, &(0x7f0000000080)={0x8, 0x0, 0x1, 0x7f, 0x10001, 0x1, 0x3f, 0x2}, &(0x7f00000000c0)={0x1, 0x100, 0x9, 0x7ff, 0x1, 0x7, 0x0, 0x101}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140), 0x8})
clock_gettime(0x6, &(0x7f00000001c0)) (async)
pselect6(0x40, &(0x7f0000000000)={0x1f, 0x4000000000, 0x0, 0x100000000, 0x9, 0x0, 0x20080, 0x8}, &(0x7f0000000080)={0x8, 0x0, 0x1, 0x7f, 0x10001, 0x1, 0x3f, 0x2}, &(0x7f00000000c0)={0x1, 0x100, 0x9, 0x7ff, 0x1, 0x7, 0x0, 0x101}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140), 0x8}) (async)

23:15:57 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f00000000c0)={{r1}, 0x0, 0x10, @unused=[0x0, 0x3, 0x7fffffffffffffff, 0x6], @name="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"}) (async, rerun: 32)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x0, @loopback}}}, 0x30) (rerun: 32)

23:15:57 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0})

[  842.677364][ T9620] binder: 9619:9620 unknown command 4246043438
[  842.692937][ T9622] binder: 9619:9622 ioctl c018620c 20000080 returned -22
[  842.714726][ T9620] binder: 9619:9620 ioctl c0306201 20000380 returned -22
[  842.738267][ T9622] binder: 9619:9622 ioctl c018620c 20000080 returned -22
[  842.755736][ T9622] binder: 9619:9622 ioctl c018620c 20000080 returned -22
[  842.756646][ T9620] binder: 9619:9620 unknown command 4246043438
[  842.762953][ T9622] binder: 9619:9622 ioctl c018620c 20000080 returned -22
[  842.785891][ T9620] binder: 9619:9620 ioctl c0306201 20000380 returned -22
[  842.787383][ T9622] binder: 9619:9622 ioctl c018620c 20000080 returned -22
[  842.800584][ T9622] binder: 9619:9622 ioctl c018620c 20000080 returned -22
[  842.804471][ T9620] binder: 9619:9620 unknown command 4246043438
[  842.812323][ T9622] binder: 9619:9622 ioctl c018620c 20000080 returned -22
[  842.813984][ T9620] binder: 9619:9620 ioctl c0306201 20000380 returned -22
[  842.821254][ T9622] binder: 9619:9622 ioctl c018620c 20000080 returned -22
[  842.830150][ T9620] binder: 9619:9620 unknown command 4246043438
[  842.835671][ T9622] binder: 9619:9622 ioctl c018620c 20000080 returned -22
[  842.841972][ T9620] binder: 9619:9620 ioctl c0306201 20000380 returned -22
[  842.849007][ T9622] binder: 9619:9622 ioctl c018620c 20000080 returned -22
[  842.857450][ T9620] binder: 9619:9620 unknown command 4246043438
[  842.862889][ T9622] binder: 9619:9622 ioctl c018620c 20000080 returned -22
[  842.868777][ T9620] binder: 9619:9620 ioctl c0306201 20000380 returned -22
[  842.868912][ T9620] binder: 9619:9620 unknown command 4246043438
[  842.876562][ T9622] binder: 9619:9622 ioctl c018620c 20000080 returned -22
[  842.886453][ T9620] binder: 9619:9620 ioctl c0306201 20000380 returned -22
[  842.889968][ T9622] binder: 9619:9622 ioctl c018620c 20000080 returned -22
[  842.911749][ T9622] binder: 9619:9622 ioctl c018620c 20000080 returned -22
[  842.912072][ T9620] binder: 9619:9620 unknown command 4246043438
[  842.919173][ T9622] binder: 9619:9622 ioctl c018620c 20000080 returned -22
[  842.926816][ T9620] binder: 9619:9620 ioctl c0306201 20000380 returned -22
[  842.932316][ T9622] binder: 9619:9622 ioctl c018620c 20000080 returned -22
[  842.939144][ T9620] binder: 9619:9620 unknown command 4246043438
[  842.946709][ T9622] binder: 9619:9622 ioctl c018620c 20000080 returned -22
[  842.957061][ T9620] binder: 9619:9620 ioctl c0306201 20000380 returned -22
[  842.959771][ T9622] binder: 9619:9622 ioctl c018620c 20000080 returned -22
[  842.967147][ T9620] binder: 9619:9620 unknown command 4246043438
[  842.973741][ T9622] binder: 9619:9622 ioctl c018620c 20000080 returned -22
[  842.980915][ T9620] binder: 9619:9620 ioctl c0306201 20000380 returned -22
[  842.987141][ T9622] binder: 9619:9622 ioctl c018620c 20000080 returned -22
[  842.995820][ T9620] binder: 9619:9620 unknown command 4246043438
[  843.001176][ T9622] binder: 9619:9622 ioctl c018620c 20000080 returned -22
[  843.008576][ T9620] binder: 9619:9620 ioctl c0306201 20000380 returned -22
[  843.014296][ T9622] binder: 9619:9622 ioctl c018620c 20000080 returned -22
[  843.031381][ T9620] binder: 9619:9620 unknown command 4246043438
[  843.032770][ T9622] binder: 9619:9622 ioctl c018620c 20000080 returned -22
[  843.037656][ T9620] binder: 9619:9620 ioctl c0306201 20000380 returned -22
[  843.044909][ T9622] binder: 9619:9622 ioctl c018620c 20000080 returned -22
[  843.051760][ T9620] binder: 9619:9620 unknown command 4246043438
[  843.060857][ T9622] binder: 9619:9622 ioctl c018620c 20000080 returned -22
[  843.064888][ T9620] binder: 9619:9620 ioctl c0306201 20000380 returned -22
[  843.072095][ T9622] binder: 9619:9622 ioctl c018620c 20000080 returned -22
[  843.079008][ T9620] binder: 9619:9620 unknown command 4246043438
[  843.088153][ T9622] binder: 9619:9622 ioctl c018620c 20000080 returned -22
[  843.092211][ T9620] binder: 9619:9620 ioctl c0306201 20000380 returned -22
[  843.099527][ T9622] binder: 9619:9622 ioctl c018620c 20000080 returned -22
[  843.108418][ T9620] binder: 9619:9620 unknown command 4246043438
[  843.116949][ T9622] binder: 9619:9622 ioctl c018620c 20000080 returned -22
[  843.119598][ T9620] binder: 9619:9620 ioctl c0306201 20000380 returned -22
[  843.126936][ T9622] binder: 9619:9622 ioctl c018620c 20000080 returned -22
[  843.133649][ T9620] binder: 9619:9620 unknown command 4246043438
[  843.141799][ T9622] binder: 9619:9622 ioctl c018620c 20000080 returned -22
[  843.154621][ T9622] binder: 9619:9622 ioctl c018620c 20000080 returned -22
[  843.161751][ T9620] binder: 9619:9620 ioctl c0306201 20000380 returned -22
[  843.169107][ T9620] binder: 9619:9620 unknown command 4246043438
[  843.175493][ T9620] binder: 9619:9620 ioctl c0306201 20000380 returned -22
[  843.182617][ T9620] binder: 9619:9620 unknown command 4246043438
[  843.189063][ T9620] binder: 9619:9620 ioctl c0306201 20000380 returned -22
[  843.196331][ T9620] binder: 9619:9620 unknown command 4246043438
[  843.202495][ T9620] binder: 9619:9620 ioctl c0306201 20000380 returned -22
[  843.209825][ T9620] binder: 9619:9620 unknown command 4246043438
[  843.216205][ T9620] binder: 9619:9620 ioctl c0306201 20000380 returned -22
[  843.223308][ T9620] binder: 9619:9620 unknown command 4246043438
[  843.229720][ T9620] binder: 9619:9620 ioctl c0306201 20000380 returned -22
[  843.236973][ T9620] binder: 9619:9620 unknown command 4246043438
[  843.243122][ T9620] binder: 9619:9620 ioctl c0306201 20000380 returned -22
[  843.250942][ T9620] binder: 9619:9620 unknown command 4246043438
[  843.257578][ T9620] binder: 9619:9620 ioctl c0306201 20000380 returned -22
[  843.265220][ T9620] binder: 9619:9620 unknown command 4246043438
[  843.271454][ T9620] binder: 9619:9620 ioctl c0306201 20000380 returned -22
[  843.278950][ T9620] binder: 9619:9620 unknown command 4246043438
[  843.285314][ T9620] binder: 9619:9620 ioctl c0306201 20000380 returned -22
[  843.292403][ T9620] binder: 9619:9620 unknown command 4246043438
[  843.298756][ T9620] binder: 9619:9620 ioctl c0306201 20000380 returned -22
[  843.305992][ T9620] binder: 9619:9620 unknown command 4246043438
[  843.312147][ T9620] binder: 9619:9620 ioctl c0306201 20000380 returned -22
[  843.319444][ T9620] binder: 9619:9620 unknown command 4246043438
[  843.326089][ T9620] binder: 9619:9620 ioctl c0306201 20000380 returned -22
[  843.333241][ T9620] binder: 9619:9620 unknown command 4246043438
[  843.339739][ T9620] binder: 9619:9620 ioctl c0306201 20000380 returned -22
[  843.346973][ T9620] binder: 9619:9620 unknown command 4246043438
[  843.353189][ T9620] binder: 9619:9620 ioctl c0306201 20000380 returned -22
[  843.360595][ T9620] binder: 9619:9620 unknown command 4246043438
[  843.367534][ T9620] binder: 9619:9620 ioctl c0306201 20000380 returned -22
[  843.375177][ T9620] binder: 9619:9620 unknown command 4246043438
[  843.381375][ T9620] binder: 9619:9620 ioctl c0306201 20000380 returned -22
23:15:57 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="2e7b15fd06cced8c1d71c9000000000000000000c9449be2828a4a3a9837ddc2a2570b0f7513a8461e503be0c47122e5bcef13783d13e620bb2c284cb7bc21c34677277b66ce5896aa7904695345fc2a95c2125439c02e75b99606987e9d1ca17f76ad308326c6114be6b45ae272e1649aa32354d258791fe439f78a827bdd6edc7ef78533a096d85b2cc3dbd3cea6ec25be848e2695e14889e29b6cbd908c1b16763a0b33b0d1"], 0x0, 0x0, 0x0})
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000080)={0x1}) (async)
r1 = memfd_secret(0x80000)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)

23:15:57 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1, 0x5}, r1}}, 0x30)

23:15:57 executing program 2:
clock_gettime(0x6, &(0x7f00000001c0)) (async)
pselect6(0x40, &(0x7f0000000000)={0x1f, 0x4000000000, 0x0, 0x100000000, 0x9, 0x0, 0x20080, 0x8}, &(0x7f0000000080)={0x8, 0x0, 0x1, 0x7f, 0x10001, 0x1, 0x3f, 0x2}, &(0x7f00000000c0)={0x1, 0x100, 0x9, 0x7ff, 0x1, 0x7, 0x0, 0x101}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140), 0x8})

23:15:57 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f00000000c0)={{r1}, 0x0, 0x10, @unused=[0x0, 0x3, 0x7fffffffffffffff, 0x6], @name="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"}) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x0, @loopback}}}, 0x30)

23:15:57 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0})

23:15:57 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
socketpair(0x5, 0x80000, 0x540, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:57 executing program 4:
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = memfd_secret(0x80000)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x1000, 0x208000, @private0, 0xfff}}}, 0x30)

[  843.388703][ T9620] binder: 9619:9620 unknown command 4246043438
[  843.395087][ T9620] binder: 9619:9620 ioctl c0306201 20000380 returned -22
23:15:57 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0})

23:15:57 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1, 0x5}, r1}}, 0x30)

23:15:57 executing program 2:
clock_gettime(0x7, &(0x7f0000000040))
r0 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000001180))
r1 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x480100, 0x0)
ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000001540)=0xfffffff8)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180))
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000140)={<r3=>0x0, 0xd494, 0x16e1})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000540)={{r1}, 0x0, 0x0, @inherit={0x88, &(0x7f0000000080)={0x1, 0x8, 0x5, 0x4, {0x21, 0x8, 0x6, 0x3, 0x6}, [0x64eb, 0xfffffffffffffff8, 0x8, 0x5, 0x800, 0x200, 0x5, 0x8000]}}, @devid=r3})

23:15:57 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xfdfdffff, 0x0, 0x0})

23:15:57 executing program 4:
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = memfd_secret(0x80000)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x1000, 0x208000, @private0, 0xfff}}}, 0x30)

[  843.457892][ T9667] binder: 9665:9667 unknown command 4246043438
[  843.473926][ T9667] binder: 9665:9667 ioctl c0306201 20000380 returned -22
23:15:58 executing program 1:
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r0 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000040)=0x1)

23:15:58 executing program 2:
clock_gettime(0x7, &(0x7f0000000040)) (async)
r0 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000001180)) (async)
r1 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2) (async)
r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x480100, 0x0)
ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000001540)=0xfffffff8) (async)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180)) (async)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000140)={<r3=>0x0, 0xd494, 0x16e1})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000540)={{r1}, 0x0, 0x0, @inherit={0x88, &(0x7f0000000080)={0x1, 0x8, 0x5, 0x4, {0x21, 0x8, 0x6, 0x3, 0x6}, [0x64eb, 0xfffffffffffffff8, 0x8, 0x5, 0x800, 0x200, 0x5, 0x8000]}}, @devid=r3})

23:15:58 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
socketpair(0x5, 0x80000, 0x540, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:58 executing program 3:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
clock_gettime(0x4, &(0x7f0000000040))

23:15:58 executing program 4:
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
r0 = memfd_secret(0x80000)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x1000, 0x208000, @private0, 0xfff}}}, 0x30)

23:15:58 executing program 2:
clock_gettime(0x7, &(0x7f0000000040)) (async, rerun: 64)
r0 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2) (rerun: 64)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000001180)) (async)
r1 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2) (async)
r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x480100, 0x0)
ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000001540)=0xfffffff8) (async)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180)) (async)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000140)={<r3=>0x0, 0xd494, 0x16e1})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000540)={{r1}, 0x0, 0x0, @inherit={0x88, &(0x7f0000000080)={0x1, 0x8, 0x5, 0x4, {0x21, 0x8, 0x6, 0x3, 0x6}, [0x64eb, 0xfffffffffffffff8, 0x8, 0x5, 0x800, 0x200, 0x5, 0x8000]}}, @devid=r3})

23:15:58 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xff000000, 0x0, 0x0})

23:15:58 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7000000, 0x0})

[  843.511896][ T9666] binder: 9665:9666 ioctl c018620c 20000080 returned -22
23:15:58 executing program 1:
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)) (async)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async)
r0 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000040)=0x1)

23:15:58 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000), 0x2, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100), 0x2, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x2, 0xe}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x1000, 0x43, @loopback, 0x40080}, r1}}, 0xfffffffffffffe32)

23:15:58 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xfffffdfd, 0x0, 0x0})

23:15:58 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30)

23:15:58 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
socketpair(0x5, 0x80000, 0x540, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:58 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000), 0x2, 0x3}}, 0x20) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100), 0x2, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x2, 0xe}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x1000, 0x43, @loopback, 0x40080}, r1}}, 0xfffffffffffffe32)

23:15:58 executing program 1:
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)) (async)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r0 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) (async)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000040)=0x1)

23:15:58 executing program 3:
r0 = socket(0x11, 0x3, 0x8000)
sendmsg$can_j1939(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, 0x0, 0x3, {0x2, 0xf1, 0x4}}, 0x18, &(0x7f0000000180)={&(0x7f0000000080)="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", 0xfb}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:58 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xffffff7f, 0x0, 0x0})

23:15:58 executing program 2:
clock_gettime(0x5, &(0x7f0000000040))
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000))

23:15:58 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan4\x00', <r1=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan4\x00', <r2=>0x0})
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x802)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x110b})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x2, &(0x7f0000000080)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0xd}], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0xdd, &(0x7f0000000240)=""/221, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0xf, 0x7, 0x2}, 0x10}, 0x80)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:58 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0})

23:15:58 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000), 0x2, 0x3}}, 0x20) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100), 0x2, 0x4}}, 0x20) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x2, 0xe}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x1000, 0x43, @loopback, 0x40080}, r1}}, 0xfffffffffffffe32)

23:15:58 executing program 3:
r0 = socket(0x11, 0x3, 0x8000)
sendmsg$can_j1939(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, 0x0, 0x3, {0x2, 0xf1, 0x4}}, 0x18, &(0x7f0000000180)={&(0x7f0000000080)="cfb8076ffac42bb0367f4468512a55f8986e81fe5e15b0e95c387a7df7db5f53ec3e96c6ab2ef8a291b88e0b73268f130341a3b215f461d380774521db344245cfe09e00582ae42ec57971c969decf90504750b21f325bfd4156ad4d1c5bbe27f0f5ec5e55482a9a29cf923d3e0da0b1985c9c4b09a482628d399456672e90888c00954f439c0f9f0ee07bd4bb0a774a91ebae49a95b1e7870303f032b59b5a166f676f072304457b9a33eb2891cb1a0c54c11ed85c15ffdbeaaa2eb9ef618c13bd9244699dd945d9521ecfaf807de0a4e43a2ce174ff54b2ee5fddbfed2eb5b9e73155e131dd7d225308285086e37aea975477db49199baaa7203", 0xfb}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:58 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan4\x00', <r1=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan4\x00', <r2=>0x0})
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x802)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x110b})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x2, &(0x7f0000000080)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0xd}], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0xdd, &(0x7f0000000240)=""/221, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0xf, 0x7, 0x2}, 0x10}, 0x80)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:58 executing program 2:
clock_gettime(0x5, &(0x7f0000000040))
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000))
clock_gettime(0x5, &(0x7f0000000040)) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) (async)

23:15:58 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:58 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0})

23:15:58 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30)
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0, r4}}, 0x18)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f00000009c0)={0x5, 0x10, 0xfa00, {&(0x7f00000007c0), r4, 0x1}}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000240)={'vxcan1\x00', <r5=>0x0})
getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000280)={@private, @multicast2, <r6=>0x0}, &(0x7f00000002c0)=0xc)
getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000300)={@loopback, @dev, <r7=>0x0}, &(0x7f0000000340)=0xc)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000380)={'team0\x00', <r8=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000780)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f00000003c0)={0x354, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x51f}}}]}}, {{0x8, 0x1, r7}, {0x1f0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe6}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4173}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x8001, 0x9, 0x9, 0x7fff}, {0x5, 0x20, 0x80, 0x58}, {0x8, 0x3, 0x1, 0x81}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x5, 0x5, 0x6, 0x1}]}}}]}}]}, 0x354}, 0x1, 0x0, 0x0, 0x44}, 0x1)
write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {r4, 0x9, 'G@l', "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"}}, 0x110)

23:15:58 executing program 3:
r0 = socket(0x11, 0x3, 0x8000)
sendmsg$can_j1939(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, 0x0, 0x3, {0x2, 0xf1, 0x4}}, 0x18, &(0x7f0000000180)={&(0x7f0000000080)="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", 0xfb}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23:15:58 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan4\x00', <r1=>0x0}) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan4\x00', <r2=>0x0}) (rerun: 64)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x802) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x110b}) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x2, &(0x7f0000000080)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0xd}], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0xdd, &(0x7f0000000240)=""/221, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0xf, 0x7, 0x2}, 0x10}, 0x80) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:58 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:58 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0})

23:15:58 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30) (async)
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0, r4}}, 0x18) (async)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f00000009c0)={0x5, 0x10, 0xfa00, {&(0x7f00000007c0), r4, 0x1}}, 0x18) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000240)={'vxcan1\x00', <r5=>0x0}) (async)
getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000280)={@private, @multicast2, <r6=>0x0}, &(0x7f00000002c0)=0xc)
getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000300)={@loopback, @dev, <r7=>0x0}, &(0x7f0000000340)=0xc) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000380)={'team0\x00', <r8=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000780)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f00000003c0)={0x354, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x51f}}}]}}, {{0x8, 0x1, r7}, {0x1f0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe6}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4173}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x8001, 0x9, 0x9, 0x7fff}, {0x5, 0x20, 0x80, 0x58}, {0x8, 0x3, 0x1, 0x81}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x5, 0x5, 0x6, 0x1}]}}}]}}]}, 0x354}, 0x1, 0x0, 0x0, 0x44}, 0x1)
write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {r4, 0x9, 'G@l', "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"}}, 0x110)

23:15:58 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:58 executing program 3:
r0 = socket(0x11, 0x3, 0x8000)
sendmsg$can_j1939(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, 0x0, 0x3, {0x2, 0xf1, 0x4}}, 0x18, &(0x7f0000000180)={&(0x7f0000000080)="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", 0xfb}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)

23:15:58 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x2, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000100))
ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f00000000c0))

23:15:58 executing program 2:
clock_gettime(0x5, &(0x7f0000000040)) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000))

23:15:58 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
socketpair(0x5, 0x80000, 0x540, &(0x7f0000000100))
ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:58 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0})

23:15:58 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30) (async)
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) (async)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0, r4}}, 0x18) (async)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f00000009c0)={0x5, 0x10, 0xfa00, {&(0x7f00000007c0), r4, 0x1}}, 0x18) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000240)={'vxcan1\x00', <r5=>0x0}) (async)
getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000280)={@private, @multicast2, <r6=>0x0}, &(0x7f00000002c0)=0xc) (async)
getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000300)={@loopback, @dev, <r7=>0x0}, &(0x7f0000000340)=0xc) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000380)={'team0\x00', <r8=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000780)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f00000003c0)={0x354, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x51f}}}]}}, {{0x8, 0x1, r7}, {0x1f0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe6}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4173}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x8001, 0x9, 0x9, 0x7fff}, {0x5, 0x20, 0x80, 0x58}, {0x8, 0x3, 0x1, 0x81}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x5, 0x5, 0x6, 0x1}]}}}]}}]}, 0x354}, 0x1, 0x0, 0x0, 0x44}, 0x1)
write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {r4, 0x9, 'G@l', "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"}}, 0x110)

23:15:58 executing program 3:
r0 = socket(0x11, 0x3, 0x8000)
sendmsg$can_j1939(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, 0x0, 0x3, {0x2, 0xf1, 0x4}}, 0x18, &(0x7f0000000180)={&(0x7f0000000080)="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", 0xfb}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)

23:15:58 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x2, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000100))
ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f00000000c0))
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x2, 0x0) (async)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000100)) (async)
ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f00000000c0)) (async)

23:15:58 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x500000000000000, 0x0, 0x0})

23:15:58 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x28}}, 0x0)
sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r1, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000050)
clock_gettime(0x5, &(0x7f0000000040))
pselect6(0x40, &(0x7f0000000000)={0x100000001, 0xf4ac, 0x3, 0x4, 0xfff, 0xffffffffffffffff, 0x7fffffff, 0xa6}, &(0x7f0000000080)={0x8001, 0x5, 0x8, 0x3, 0x636, 0x0, 0x4, 0x9}, &(0x7f00000000c0)={0x6ae, 0x0, 0x20, 0x2, 0x80, 0x100000001, 0x4, 0x3}, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={[0xffffffffffffffff]}, 0x8})
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, r1, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0xfc, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2d24}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0xac, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xd65}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x48, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x48, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}]}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7fff}]}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x6c081}, 0x4004000)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'hsr0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x13, 0x7, '/usr/sbin/ntpd\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x1)

23:15:58 executing program 3:
sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, 0x0, 0x3, {0x2, 0xf1, 0x4}}, 0x18, &(0x7f0000000180)={&(0x7f0000000080)="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", 0xfb}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)

23:15:58 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30)
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, 0x0, 0x2, {0x2, 0xff}, 0x2}, 0x18)

23:15:58 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x28}}, 0x0)
sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r1, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000050) (async)
clock_gettime(0x5, &(0x7f0000000040))
pselect6(0x40, &(0x7f0000000000)={0x100000001, 0xf4ac, 0x3, 0x4, 0xfff, 0xffffffffffffffff, 0x7fffffff, 0xa6}, &(0x7f0000000080)={0x8001, 0x5, 0x8, 0x3, 0x636, 0x0, 0x4, 0x9}, &(0x7f00000000c0)={0x6ae, 0x0, 0x20, 0x2, 0x80, 0x100000001, 0x4, 0x3}, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={[0xffffffffffffffff]}, 0x8}) (async)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, r1, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0xfc, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2d24}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0xac, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xd65}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x48, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x48, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}]}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7fff}]}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x6c081}, 0x4004000) (async)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'hsr0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x13, 0x7, '/usr/sbin/ntpd\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x1)

23:15:58 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
socketpair(0x5, 0x80000, 0x540, &(0x7f0000000100))
ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:58 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30) (async)
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, 0x0, 0x2, {0x2, 0xff}, 0x2}, 0x18)

23:15:58 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x600000000000000, 0x0, 0x0})

23:15:58 executing program 3:
sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, 0x0, 0x3, {0x2, 0xf1, 0x4}}, 0x18, &(0x7f0000000180)={&(0x7f0000000080)="cfb8076ffac42bb0367f4468512a55f8986e81fe5e15b0e95c387a7df7db5f53ec3e96c6ab2ef8a291b88e0b73268f130341a3b215f461d380774521db344245cfe09e00582ae42ec57971c969decf90504750b21f325bfd4156ad4d1c5bbe27f0f5ec5e55482a9a29cf923d3e0da0b1985c9c4b09a482628d399456672e90888c00954f439c0f9f0ee07bd4bb0a774a91ebae49a95b1e7870303f032b59b5a166f676f072304457b9a33eb2891cb1a0c54c11ed85c15ffdbeaaa2eb9ef618c13bd9244699dd945d9521ecfaf807de0a4e43a2ce174ff54b2ee5fddbfed2eb5b9e73155e131dd7d225308285086e37aea975477db49199baaa7203", 0xfb}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)

23:15:58 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x28}}, 0x0)
sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r1, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000050) (async)
clock_gettime(0x5, &(0x7f0000000040))
pselect6(0x40, &(0x7f0000000000)={0x100000001, 0xf4ac, 0x3, 0x4, 0xfff, 0xffffffffffffffff, 0x7fffffff, 0xa6}, &(0x7f0000000080)={0x8001, 0x5, 0x8, 0x3, 0x636, 0x0, 0x4, 0x9}, &(0x7f00000000c0)={0x6ae, 0x0, 0x20, 0x2, 0x80, 0x100000001, 0x4, 0x3}, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={[0xffffffffffffffff]}, 0x8}) (async)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, r1, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0xfc, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2d24}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0xac, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xd65}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x48, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x48, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}]}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7fff}]}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x6c081}, 0x4004000) (async)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'hsr0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x13, 0x7, '/usr/sbin/ntpd\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x1)

23:15:58 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30)
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, 0x0, 0x2, {0x2, 0xff}, 0x2}, 0x18)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30) (async)
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, 0x0, 0x2, {0x2, 0xff}, 0x2}, 0x18) (async)

[  843.972930][ T9796] binder: BINDER_SET_CONTEXT_MGR already set
[  844.010114][ T9796] binder: 9793:9796 ioctl 4018620d 20000000 returned -16
23:15:58 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x2, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000100)) (async, rerun: 32)
ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f00000000c0)) (rerun: 32)

23:15:58 executing program 3:
sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, 0x0, 0x3, {0x2, 0xf1, 0x4}}, 0x18, &(0x7f0000000180)={&(0x7f0000000080)="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", 0xfb}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)

23:15:58 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x700000000000000, 0x0, 0x0})

23:15:58 executing program 2:
clock_gettime(0x2, &(0x7f0000000080))
r0 = memfd_secret(0x80000)
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000))

23:15:58 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
socketpair(0x5, 0x80000, 0x540, &(0x7f0000000100))
ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:58 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:58 executing program 4:
r0 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0)
ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x1)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30)

23:15:58 executing program 3:
r0 = socket(0x0, 0x3, 0x8000)
sendmsg$can_j1939(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, 0x0, 0x3, {0x2, 0xf1, 0x4}}, 0x18, &(0x7f0000000180)={&(0x7f0000000080)="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", 0xfb}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)

23:15:58 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0})

23:15:58 executing program 2:
clock_gettime(0x2, &(0x7f0000000080)) (async, rerun: 32)
r0 = memfd_secret(0x80000) (rerun: 32)
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000))

23:15:58 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:58 executing program 4:
r0 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0)
ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x1) (async)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30)

23:15:58 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xff00000000000000, 0x0, 0x0})

23:15:58 executing program 2:
clock_gettime(0x2, &(0x7f0000000080)) (async)
r0 = memfd_secret(0x80000)
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000))

23:15:58 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x0, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async)

23:15:58 executing program 5:
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000))
socketpair(0x5, 0x80000, 0x540, &(0x7f0000000100))
ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:58 executing program 3:
r0 = socket(0x0, 0x3, 0x8000)
sendmsg$can_j1939(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, 0x0, 0x3, {0x2, 0xf1, 0x4}}, 0x18, &(0x7f0000000180)={&(0x7f0000000080)="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", 0xfb}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)

23:15:58 executing program 4:
r0 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) (async)
ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x1) (async)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30)

23:15:58 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xffffff7f00000000, 0x0, 0x0})

23:15:58 executing program 2:
clock_gettime(0x5, &(0x7f0000000040))
clock_gettime(0x0, &(0x7f0000000340)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000280)={0x9, 0x8, 0x2, 0x80, 0x101, 0x5, 0x7, 0x2}, &(0x7f00000002c0)={0x5, 0x1, 0x10001, 0x8000, 0x3, 0x6, 0x0, 0x2}, &(0x7f0000000300)={0x2, 0x1, 0x9, 0x7b80, 0x9, 0x175, 0x872c, 0x3c}, &(0x7f0000000380)={r0, r1+60000000}, &(0x7f0000000400)={&(0x7f00000003c0)={[0x4]}, 0x8})
pselect6(0x40, &(0x7f0000000200)={0x6, 0x3ff, 0x0, 0x4, 0x9, 0xffffffffffffff6c, 0x6, 0x3}, &(0x7f0000000080)={0x10001, 0x6, 0x9eb3, 0x5, 0x6, 0x1ff, 0x4, 0x8}, &(0x7f00000000c0)={0x10001, 0x3ff, 0x81, 0x10002bd0, 0x4, 0x5, 0xfffffffffffffffa, 0x80000001}, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={[0x5]}, 0x8})
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
clock_gettime(0x4, &(0x7f00000001c0))
clock_getres(0x5, &(0x7f0000000000))
clock_getres(0x5, &(0x7f0000000240))

23:15:58 executing program 1:
write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:58 executing program 2:
clock_gettime(0x5, &(0x7f0000000040))
clock_gettime(0x0, &(0x7f0000000340)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000280)={0x9, 0x8, 0x2, 0x80, 0x101, 0x5, 0x7, 0x2}, &(0x7f00000002c0)={0x5, 0x1, 0x10001, 0x8000, 0x3, 0x6, 0x0, 0x2}, &(0x7f0000000300)={0x2, 0x1, 0x9, 0x7b80, 0x9, 0x175, 0x872c, 0x3c}, &(0x7f0000000380)={r0, r1+60000000}, &(0x7f0000000400)={&(0x7f00000003c0)={[0x4]}, 0x8}) (async)
pselect6(0x40, &(0x7f0000000200)={0x6, 0x3ff, 0x0, 0x4, 0x9, 0xffffffffffffff6c, 0x6, 0x3}, &(0x7f0000000080)={0x10001, 0x6, 0x9eb3, 0x5, 0x6, 0x1ff, 0x4, 0x8}, &(0x7f00000000c0)={0x10001, 0x3ff, 0x81, 0x10002bd0, 0x4, 0x5, 0xfffffffffffffffa, 0x80000001}, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={[0x5]}, 0x8})
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) (async)
clock_gettime(0x4, &(0x7f00000001c0)) (async)
clock_getres(0x5, &(0x7f0000000000)) (async)
clock_getres(0x5, &(0x7f0000000240))

23:15:58 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0})

23:15:58 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x800, 0x0)

23:15:58 executing program 1:
write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:58 executing program 5:
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000))
socketpair(0x5, 0x80000, 0x540, &(0x7f0000000100))
ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:58 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0})

23:15:58 executing program 3:
r0 = socket(0x0, 0x3, 0x8000)
sendmsg$can_j1939(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, 0x0, 0x3, {0x2, 0xf1, 0x4}}, 0x18, &(0x7f0000000180)={&(0x7f0000000080)="cfb8076ffac42bb0367f4468512a55f8986e81fe5e15b0e95c387a7df7db5f53ec3e96c6ab2ef8a291b88e0b73268f130341a3b215f461d380774521db344245cfe09e00582ae42ec57971c969decf90504750b21f325bfd4156ad4d1c5bbe27f0f5ec5e55482a9a29cf923d3e0da0b1985c9c4b09a482628d399456672e90888c00954f439c0f9f0ee07bd4bb0a774a91ebae49a95b1e7870303f032b59b5a166f676f072304457b9a33eb2891cb1a0c54c11ed85c15ffdbeaaa2eb9ef618c13bd9244699dd945d9521ecfaf807de0a4e43a2ce174ff54b2ee5fddbfed2eb5b9e73155e131dd7d225308285086e37aea975477db49199baaa7203", 0xfb}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)

23:15:58 executing program 2:
clock_gettime(0x5, &(0x7f0000000040))
clock_gettime(0x0, &(0x7f0000000340)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000280)={0x9, 0x8, 0x2, 0x80, 0x101, 0x5, 0x7, 0x2}, &(0x7f00000002c0)={0x5, 0x1, 0x10001, 0x8000, 0x3, 0x6, 0x0, 0x2}, &(0x7f0000000300)={0x2, 0x1, 0x9, 0x7b80, 0x9, 0x175, 0x872c, 0x3c}, &(0x7f0000000380)={r0, r1+60000000}, &(0x7f0000000400)={&(0x7f00000003c0)={[0x4]}, 0x8})
pselect6(0x40, &(0x7f0000000200)={0x6, 0x3ff, 0x0, 0x4, 0x9, 0xffffffffffffff6c, 0x6, 0x3}, &(0x7f0000000080)={0x10001, 0x6, 0x9eb3, 0x5, 0x6, 0x1ff, 0x4, 0x8}, &(0x7f00000000c0)={0x10001, 0x3ff, 0x81, 0x10002bd0, 0x4, 0x5, 0xfffffffffffffffa, 0x80000001}, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={[0x5]}, 0x8})
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) (async)
clock_gettime(0x4, &(0x7f00000001c0))
clock_getres(0x5, &(0x7f0000000000)) (async)
clock_getres(0x5, &(0x7f0000000240))

23:15:58 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x800, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x800, 0x0) (async)

23:15:58 executing program 1:
write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) (async, rerun: 64)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (rerun: 64)

23:15:58 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0})

23:15:58 executing program 2:
clock_gettime(0x5, &(0x7f0000000040))
clock_getres(0x3, &(0x7f0000000000))

23:15:58 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x800, 0x0)

23:15:58 executing program 5:
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000))
socketpair(0x5, 0x80000, 0x540, &(0x7f0000000100))
ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:58 executing program 2:
clock_gettime(0x5, &(0x7f0000000040)) (async)
clock_getres(0x3, &(0x7f0000000000))

23:15:58 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180))
r2 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000001180))
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f00000000c0)={{r2}, 0x0, 0x3e6d642b79b5e15b, @unused=[0x1000, 0x7, 0x1, 0xff], @subvolid=0xd2a5a26})
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x800, 0x0)

23:15:58 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x5, 0x0})

23:15:58 executing program 3:
r0 = socket(0x11, 0x0, 0x8000)
sendmsg$can_j1939(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, 0x0, 0x3, {0x2, 0xf1, 0x4}}, 0x18, &(0x7f0000000180)={&(0x7f0000000080)="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", 0xfb}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)

[  844.432520][ T9917] binder: BINDER_SET_CONTEXT_MGR already set
[  844.469718][ T9917] binder: 9909:9917 ioctl 4018620d 20000000 returned -16
23:15:59 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
r1 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180)) (async)
r2 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000001180)) (async)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f00000000c0)={{r2}, 0x0, 0x3e6d642b79b5e15b, @unused=[0x1000, 0x7, 0x1, 0xff], @subvolid=0xd2a5a26}) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x800, 0x0)

23:15:59 executing program 2:
clock_gettime(0x5, &(0x7f0000000040))
clock_getres(0x3, &(0x7f0000000000))
clock_gettime(0x5, &(0x7f0000000040)) (async)
clock_getres(0x3, &(0x7f0000000000)) (async)

23:15:59 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0})

[  844.506812][ T9917] binder: BINDER_SET_CONTEXT_MGR already set
[  844.537153][ T9917] binder: 9909:9917 ioctl 4018620d 20000000 returned -16
[  844.587510][ T9917] binder: BINDER_SET_CONTEXT_MGR already set
[  844.593643][ T9917] binder: 9909:9917 ioctl 4018620d 20000000 returned -16
[  844.601124][ T9917] binder: BINDER_SET_CONTEXT_MGR already set
[  844.607324][ T9917] binder: 9909:9917 ioctl 4018620d 20000000 returned -16
[  844.616640][ T9917] binder: BINDER_SET_CONTEXT_MGR already set
[  844.622629][ T9917] binder: 9909:9917 ioctl 4018620d 20000000 returned -16
[  844.630388][ T9917] binder: BINDER_SET_CONTEXT_MGR already set
[  844.636637][ T9917] binder: 9909:9917 ioctl 4018620d 20000000 returned -16
[  844.643747][ T9917] binder: BINDER_SET_CONTEXT_MGR already set
[  844.649998][ T9917] binder: 9909:9917 ioctl 4018620d 20000000 returned -16
[  844.657182][ T9917] binder: BINDER_SET_CONTEXT_MGR already set
[  844.663164][ T9917] binder: 9909:9917 ioctl 4018620d 20000000 returned -16
[  844.670365][ T9917] binder: BINDER_SET_CONTEXT_MGR already set
[  844.677107][ T9917] binder: 9909:9917 ioctl 4018620d 20000000 returned -16
[  844.684365][ T9917] binder: BINDER_SET_CONTEXT_MGR already set
[  844.690393][ T9917] binder: 9909:9917 ioctl 4018620d 20000000 returned -16
[  844.697812][ T9917] binder: BINDER_SET_CONTEXT_MGR already set
[  844.703791][ T9917] binder: 9909:9917 ioctl 4018620d 20000000 returned -16
[  844.711170][ T9917] binder: BINDER_SET_CONTEXT_MGR already set
[  844.717291][ T9917] binder: 9909:9917 ioctl 4018620d 20000000 returned -16
[  844.724624][ T9917] binder: BINDER_SET_CONTEXT_MGR already set
[  844.730665][ T9917] binder: 9909:9917 ioctl 4018620d 20000000 returned -16
[  844.738072][ T9917] binder: BINDER_SET_CONTEXT_MGR already set
[  844.744115][ T9917] binder: 9909:9917 ioctl 4018620d 20000000 returned -16
[  844.751201][ T9917] binder: BINDER_SET_CONTEXT_MGR already set
[  844.757219][ T9917] binder: 9909:9917 ioctl 4018620d 20000000 returned -16
[  844.764327][ T9917] binder: BINDER_SET_CONTEXT_MGR already set
[  844.770290][ T9917] binder: 9909:9917 ioctl 4018620d 20000000 returned -16
[  844.777500][ T9917] binder: BINDER_SET_CONTEXT_MGR already set
[  844.783476][ T9917] binder: 9909:9917 ioctl 4018620d 20000000 returned -16
[  844.790610][ T9917] binder: BINDER_SET_CONTEXT_MGR already set
[  844.796639][ T9917] binder: 9909:9917 ioctl 4018620d 20000000 returned -16
[  844.803747][ T9917] binder: BINDER_SET_CONTEXT_MGR already set
[  844.809778][ T9917] binder: 9909:9917 ioctl 4018620d 20000000 returned -16
[  844.816897][ T9917] binder: BINDER_SET_CONTEXT_MGR already set
[  844.822859][ T9917] binder: 9909:9917 ioctl 4018620d 20000000 returned -16
[  844.829978][ T9917] binder: BINDER_SET_CONTEXT_MGR already set
[  844.837183][ T9917] binder: 9909:9917 ioctl 4018620d 20000000 returned -16
[  844.844798][ T9917] binder: BINDER_SET_CONTEXT_MGR already set
[  844.850770][ T9917] binder: 9909:9917 ioctl 4018620d 20000000 returned -16
[  844.857890][ T9917] binder: BINDER_SET_CONTEXT_MGR already set
[  844.863864][ T9917] binder: 9909:9917 ioctl 4018620d 20000000 returned -16
[  844.871024][ T9917] binder: BINDER_SET_CONTEXT_MGR already set
[  844.877043][ T9917] binder: 9909:9917 ioctl 4018620d 20000000 returned -16
[  844.884443][ T9917] binder: BINDER_SET_CONTEXT_MGR already set
[  844.890426][ T9917] binder: 9909:9917 ioctl 4018620d 20000000 returned -16
[  844.897558][ T9917] binder: BINDER_SET_CONTEXT_MGR already set
[  844.903536][ T9917] binder: 9909:9917 ioctl 4018620d 20000000 returned -16
[  844.910959][ T9917] binder: BINDER_SET_CONTEXT_MGR already set
[  844.916968][ T9917] binder: 9909:9917 ioctl 4018620d 20000000 returned -16
[  844.924116][ T9917] binder: BINDER_SET_CONTEXT_MGR already set
[  844.930104][ T9917] binder: 9909:9917 ioctl 4018620d 20000000 returned -16
[  844.937274][ T9917] binder: BINDER_SET_CONTEXT_MGR already set
[  844.943259][ T9917] binder: 9909:9917 ioctl 4018620d 20000000 returned -16
[  844.950823][ T9917] binder: BINDER_SET_CONTEXT_MGR already set
[  844.958135][ T9917] binder: 9909:9917 ioctl 4018620d 20000000 returned -16
[  844.965408][ T9917] binder: BINDER_SET_CONTEXT_MGR already set
[  844.971420][ T9917] binder: 9909:9917 ioctl 4018620d 20000000 returned -16
[  844.981216][ T9917] binder: BINDER_SET_CONTEXT_MGR already set
[  844.987425][ T9917] binder: 9909:9917 ioctl 4018620d 20000000 returned -16
[  844.995661][ T9917] binder: BINDER_SET_CONTEXT_MGR already set
[  845.001673][ T9917] binder: 9909:9917 ioctl 4018620d 20000000 returned -16
[  845.008978][ T9917] binder: BINDER_SET_CONTEXT_MGR already set
[  845.016185][ T9917] binder: 9909:9917 ioctl 4018620d 20000000 returned -16
[  845.023307][ T9917] binder: BINDER_SET_CONTEXT_MGR already set
[  845.029514][ T9917] binder: 9909:9917 ioctl 4018620d 20000000 returned -16
[  845.037768][ T9917] binder: BINDER_SET_CONTEXT_MGR already set
[  845.043802][ T9917] binder: 9909:9917 ioctl 4018620d 20000000 returned -16
[  845.051127][ T9917] binder: BINDER_SET_CONTEXT_MGR already set
[  845.057517][ T9917] binder: 9909:9917 ioctl 4018620d 20000000 returned -16
[  845.065195][ T9917] binder: BINDER_SET_CONTEXT_MGR already set
[  845.071243][ T9917] binder: 9909:9917 ioctl 4018620d 20000000 returned -16
[  845.078728][ T9917] binder: BINDER_SET_CONTEXT_MGR already set
[  845.085695][ T9917] binder: 9909:9917 ioctl 4018620d 20000000 returned -16
[  845.093247][ T9917] binder: BINDER_SET_CONTEXT_MGR already set
[  845.099591][ T9917] binder: 9909:9917 ioctl 4018620d 20000000 returned -16
[  845.107189][ T9917] binder: BINDER_SET_CONTEXT_MGR already set
[  845.113301][ T9917] binder: 9909:9917 ioctl 4018620d 20000000 returned -16
[  845.121799][ T9917] binder: BINDER_SET_CONTEXT_MGR already set
[  845.127881][ T9917] binder: 9909:9917 ioctl 4018620d 20000000 returned -16
[  845.135067][ T9917] binder: BINDER_SET_CONTEXT_MGR already set
[  845.141073][ T9917] binder: 9909:9917 ioctl 4018620d 20000000 returned -16
[  845.148248][ T9917] binder: BINDER_SET_CONTEXT_MGR already set
[  845.154277][ T9917] binder: 9909:9917 ioctl 4018620d 20000000 returned -16
[  845.161392][ T9917] binder: BINDER_SET_CONTEXT_MGR already set
[  845.167394][ T9917] binder: 9909:9917 ioctl 4018620d 20000000 returned -16
[  845.174550][ T9917] binder: BINDER_SET_CONTEXT_MGR already set
[  845.180631][ T9917] binder: 9909:9917 ioctl 4018620d 20000000 returned -16
[  845.187859][ T9917] binder: BINDER_SET_CONTEXT_MGR already set
[  845.193835][ T9917] binder: 9909:9917 ioctl 4018620d 20000000 returned -16
[  845.203120][ T9917] binder: BINDER_SET_CONTEXT_MGR already set
[  845.209281][ T9917] binder: 9909:9917 ioctl 4018620d 20000000 returned -16
[  845.216728][ T9917] binder: BINDER_SET_CONTEXT_MGR already set
[  845.222704][ T9917] binder: 9909:9917 ioctl 4018620d 20000000 returned -16
[  845.229997][ T9917] binder: BINDER_SET_CONTEXT_MGR already set
[  845.236095][ T9917] binder: 9909:9917 ioctl 4018620d 20000000 returned -16
[  845.243241][ T9917] binder: BINDER_SET_CONTEXT_MGR already set
[  845.249286][ T9917] binder: 9909:9917 ioctl 4018620d 20000000 returned -16
23:15:59 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff)
r3 = syz_clone(0x8008000, &(0x7f0000000100)="8b8bfaff241f19a2f777ec670e5da88cd3f43c4244aef3c1bcad1bcd29d0a1d34f620d07342221a9c9f1848d72ebc7092941d91fb6f5", 0x36, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000240)="ed7694a5be78fd4e164150f59bd44a8e90b6707436d6f7a8ae345afe2473b1d444830c81fae2f2ed2d32491c351c0f5e5e31a3de7bdd0d717902001b873b72c1ec8a23ea377cdd9ccb5047d00b706587ef23b24c7e37ed3b842bea4f9569b2f6537b29776b5b3633468d51aba4af674479ba00218f95ee9e5dc1127851cbf53c22d35713cddcc1f67a1d10bf09f073843298b9891a9ffb8d92464d9458e9cba6bb5d328acadefaea68ed25caade6b68cb843ef55e51cd82a5b95b3f64cc268c39b41c47993ac42374d1d5cfc9eac04ff3b94")
r4 = syz_clone(0x4001000, &(0x7f00000003c0)="0692bcbea64a024c4638629f27b80f9c6a11dbe77ca7915f1074d610bd5f4f7d9a2a52e61d7e4b9cf6e0baaf645b257f872ee83314d405e0bb1ba193b541e2e67f8962db70f7039bf684c268d54d5069848dee48c4fa3580e8c1c3463f28ea3e273aaace9863bf17d21f4d13cad372985eb1b1dbd4c9df898ccedccb5e522209102b0b73cf9ee50acc3ada468557544b20966fc969638cdac4fd9677061c01ca1b6a612e29d6838b34cf0f78df53949ca0a8b583e8f3fff720f6879f5e77cca3fa53e6adb4b48e5b8c79e33fd41cef25db6d2f0d80b5f6d19ec765e13334c7ba276eeccaaf4e873f1858ec897f7c13", 0xef, &(0x7f0000000340), &(0x7f00000004c0), &(0x7f0000000500)="47f75b8824c51fb47c485517043a4ba5f78ec7571dbafc0a8a6c4f84e56d1956e97f1e802f9104d279bf8e207a2065462ee9b90b2ac3264e6c1cfb6ea5fdff368ff55d4dd3b4d627f1dfdfcf7dfd1df67396f690bd60d8d4f75de541a9039e939b578cac12ca53fd048bf78bf7f71a5b091a60348c035ec2c2e1793c57fbd7b4bce0694796b1d5592314e8e81461034ece26e8b2cb728dbee7cd003f0f27668c1dad0556c18b123d1656106294b5b37cc475eba676d406ddc4191db378ddee543e5599aa07724fdb7ca01be945da84bf53f534bbd62e84220b461c09116d201f23ca5209ebe8d5e9dd2587ef3c6168e0")
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xd0, r2, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40011}, 0x95af5ea09864810b)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:59 executing program 3:
r0 = socket(0x11, 0x0, 0x8000)
sendmsg$can_j1939(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, 0x0, 0x3, {0x2, 0xf1, 0x4}}, 0x18, &(0x7f0000000180)={&(0x7f0000000080)="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", 0xfb}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)

23:15:59 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
socketpair(0x5, 0x80000, 0x540, &(0x7f0000000100))
ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:59 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x7, 0x0})

23:15:59 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async, rerun: 32)
r1 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2) (rerun: 32)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180)) (async)
r2 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000001180)) (async)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f00000000c0)={{r2}, 0x0, 0x3e6d642b79b5e15b, @unused=[0x1000, 0x7, 0x1, 0xff], @subvolid=0xd2a5a26}) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x800, 0x0)

23:15:59 executing program 2:
clock_gettime(0x5, &(0x7f0000000040))
pselect6(0x40, &(0x7f0000000080)={0x8001, 0xffffffffffffff00, 0x2, 0x7, 0x800, 0x6, 0x4, 0x9}, &(0x7f00000000c0)={0x3f, 0x5, 0x8, 0x100000000, 0x8000, 0x6, 0x0, 0x9}, &(0x7f0000000100)={0xfffffffffffffffb, 0x7ff, 0x7, 0x7, 0xff, 0x7, 0x1, 0x95}, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x9]}, 0x8})
socketpair(0x15, 0x0, 0x0, &(0x7f0000000000))
clock_gettime(0x3, &(0x7f0000000000))

23:15:59 executing program 3:
r0 = socket(0x11, 0x0, 0x8000)
sendmsg$can_j1939(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, 0x0, 0x3, {0x2, 0xf1, 0x4}}, 0x18, &(0x7f0000000180)={&(0x7f0000000080)="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", 0xfb}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)

[  845.257588][ T9917] binder: BINDER_SET_CONTEXT_MGR already set
[  845.263967][ T9917] binder: 9909:9917 ioctl 4018620d 20000000 returned -16
23:15:59 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x300, 0x0})

23:15:59 executing program 2:
clock_gettime(0x5, &(0x7f0000000040)) (async)
pselect6(0x40, &(0x7f0000000080)={0x8001, 0xffffffffffffff00, 0x2, 0x7, 0x800, 0x6, 0x4, 0x9}, &(0x7f00000000c0)={0x3f, 0x5, 0x8, 0x100000000, 0x8000, 0x6, 0x0, 0x9}, &(0x7f0000000100)={0xfffffffffffffffb, 0x7ff, 0x7, 0x7, 0xff, 0x7, 0x1, 0x95}, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x9]}, 0x8}) (async)
socketpair(0x15, 0x0, 0x0, &(0x7f0000000000)) (async)
clock_gettime(0x3, &(0x7f0000000000))

23:15:59 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
socketpair(0x5, 0x80000, 0x540, &(0x7f0000000100))
ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:59 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30)
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280)={<r2=>0xffffffffffffffff}, 0x2, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {&(0x7f0000000080), r2}}, 0x18)
r3 = pidfd_open(0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000340)={<r4=>0x0, <r5=>0x0})
r6 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r6, 0xb701, 0x0)
ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000003c0)=@userptr={0x3, 0xc, 0x4, 0x2000, 0x7, {r4, r5/1000+60000}, {0x2, 0xc, 0x37, 0x27, 0xda, 0x4, "6da3a11b"}, 0x3a66b184, 0x2, {&(0x7f0000000380)}, 0x2cf11c85, 0x0, r6})
pidfd_getfd(r3, r1, 0x0)

23:15:59 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x500, 0x0})

23:15:59 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) (async)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff)
r3 = syz_clone(0x8008000, &(0x7f0000000100)="8b8bfaff241f19a2f777ec670e5da88cd3f43c4244aef3c1bcad1bcd29d0a1d34f620d07342221a9c9f1848d72ebc7092941d91fb6f5", 0x36, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000240)="ed7694a5be78fd4e164150f59bd44a8e90b6707436d6f7a8ae345afe2473b1d444830c81fae2f2ed2d32491c351c0f5e5e31a3de7bdd0d717902001b873b72c1ec8a23ea377cdd9ccb5047d00b706587ef23b24c7e37ed3b842bea4f9569b2f6537b29776b5b3633468d51aba4af674479ba00218f95ee9e5dc1127851cbf53c22d35713cddcc1f67a1d10bf09f073843298b9891a9ffb8d92464d9458e9cba6bb5d328acadefaea68ed25caade6b68cb843ef55e51cd82a5b95b3f64cc268c39b41c47993ac42374d1d5cfc9eac04ff3b94") (async)
r4 = syz_clone(0x4001000, &(0x7f00000003c0)="0692bcbea64a024c4638629f27b80f9c6a11dbe77ca7915f1074d610bd5f4f7d9a2a52e61d7e4b9cf6e0baaf645b257f872ee83314d405e0bb1ba193b541e2e67f8962db70f7039bf684c268d54d5069848dee48c4fa3580e8c1c3463f28ea3e273aaace9863bf17d21f4d13cad372985eb1b1dbd4c9df898ccedccb5e522209102b0b73cf9ee50acc3ada468557544b20966fc969638cdac4fd9677061c01ca1b6a612e29d6838b34cf0f78df53949ca0a8b583e8f3fff720f6879f5e77cca3fa53e6adb4b48e5b8c79e33fd41cef25db6d2f0d80b5f6d19ec765e13334c7ba276eeccaaf4e873f1858ec897f7c13", 0xef, &(0x7f0000000340), &(0x7f00000004c0), &(0x7f0000000500)="47f75b8824c51fb47c485517043a4ba5f78ec7571dbafc0a8a6c4f84e56d1956e97f1e802f9104d279bf8e207a2065462ee9b90b2ac3264e6c1cfb6ea5fdff368ff55d4dd3b4d627f1dfdfcf7dfd1df67396f690bd60d8d4f75de541a9039e939b578cac12ca53fd048bf78bf7f71a5b091a60348c035ec2c2e1793c57fbd7b4bce0694796b1d5592314e8e81461034ece26e8b2cb728dbee7cd003f0f27668c1dad0556c18b123d1656106294b5b37cc475eba676d406ddc4191db378ddee543e5599aa07724fdb7ca01be945da84bf53f534bbd62e84220b461c09116d201f23ca5209ebe8d5e9dd2587ef3c6168e0")
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xd0, r2, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40011}, 0x95af5ea09864810b)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:59 executing program 2:
clock_gettime(0x5, &(0x7f0000000040)) (async)
pselect6(0x40, &(0x7f0000000080)={0x8001, 0xffffffffffffff00, 0x2, 0x7, 0x800, 0x6, 0x4, 0x9}, &(0x7f00000000c0)={0x3f, 0x5, 0x8, 0x100000000, 0x8000, 0x6, 0x0, 0x9}, &(0x7f0000000100)={0xfffffffffffffffb, 0x7ff, 0x7, 0x7, 0xff, 0x7, 0x1, 0x95}, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x9]}, 0x8})
socketpair(0x15, 0x0, 0x0, &(0x7f0000000000))
clock_gettime(0x3, &(0x7f0000000000))

23:15:59 executing program 3:
r0 = socket(0x11, 0x3, 0x0)
sendmsg$can_j1939(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, 0x0, 0x3, {0x2, 0xf1, 0x4}}, 0x18, &(0x7f0000000180)={&(0x7f0000000080)="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", 0xfb}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)

23:15:59 executing program 3:
socket(0x11, 0x3, 0x0)
sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, 0x0, 0x3, {0x2, 0xf1, 0x4}}, 0x18, &(0x7f0000000180)={&(0x7f0000000080)="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", 0xfb}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)

23:15:59 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30)
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280)={<r2=>0xffffffffffffffff}, 0x2, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {&(0x7f0000000080), r2}}, 0x18)
r3 = pidfd_open(0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000340)={<r4=>0x0, <r5=>0x0})
r6 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r6, 0xb701, 0x0)
ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000003c0)=@userptr={0x3, 0xc, 0x4, 0x2000, 0x7, {r4, r5/1000+60000}, {0x2, 0xc, 0x37, 0x27, 0xda, 0x4, "6da3a11b"}, 0x3a66b184, 0x2, {&(0x7f0000000380)}, 0x2cf11c85, 0x0, r6})
pidfd_getfd(r3, r1, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30) (async)
memfd_secret(0x0) (async)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280), 0x2, 0x3}}, 0x20) (async)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {&(0x7f0000000080), r2}}, 0x18) (async)
pidfd_open(0x0, 0x0) (async)
clock_gettime(0x0, &(0x7f0000000340)) (async)
memfd_secret(0x0) (async)
ioctl$NS_GET_USERNS(r6, 0xb701, 0x0) (async)
ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000003c0)=@userptr={0x3, 0xc, 0x4, 0x2000, 0x7, {r4, r5/1000+60000}, {0x2, 0xc, 0x37, 0x27, 0xda, 0x4, "6da3a11b"}, 0x3a66b184, 0x2, {&(0x7f0000000380)}, 0x2cf11c85, 0x0, r6}) (async)
pidfd_getfd(r3, r1, 0x0) (async)

23:15:59 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x600, 0x0})

23:15:59 executing program 2:
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000080)={<r0=>0x0, 0x4, 0x4})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000480)={r0, 0x6a00, 0x7})
clock_gettime(0x5, &(0x7f0000000040))
r1 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)

23:15:59 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
socketpair(0x5, 0x80000, 0x540, &(0x7f0000000100))
ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:59 executing program 3:
socket(0x11, 0x3, 0x0)
sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, 0x0, 0x3, {0x2, 0xf1, 0x4}}, 0x18, &(0x7f0000000180)={&(0x7f0000000080)="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", 0xfb}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)

23:15:59 executing program 2:
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000080)={<r0=>0x0, 0x4, 0x4})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000480)={r0, 0x6a00, 0x7})
clock_gettime(0x5, &(0x7f0000000040))
r1 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000080)={0x0, 0x4, 0x4}) (async)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000480)={r0, 0x6a00, 0x7}) (async)
clock_gettime(0x5, &(0x7f0000000040)) (async)
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) (async)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) (async)

23:15:59 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x700, 0x0})

23:15:59 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff)
r3 = syz_clone(0x8008000, &(0x7f0000000100)="8b8bfaff241f19a2f777ec670e5da88cd3f43c4244aef3c1bcad1bcd29d0a1d34f620d07342221a9c9f1848d72ebc7092941d91fb6f5", 0x36, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000240)="ed7694a5be78fd4e164150f59bd44a8e90b6707436d6f7a8ae345afe2473b1d444830c81fae2f2ed2d32491c351c0f5e5e31a3de7bdd0d717902001b873b72c1ec8a23ea377cdd9ccb5047d00b706587ef23b24c7e37ed3b842bea4f9569b2f6537b29776b5b3633468d51aba4af674479ba00218f95ee9e5dc1127851cbf53c22d35713cddcc1f67a1d10bf09f073843298b9891a9ffb8d92464d9458e9cba6bb5d328acadefaea68ed25caade6b68cb843ef55e51cd82a5b95b3f64cc268c39b41c47993ac42374d1d5cfc9eac04ff3b94") (async)
r4 = syz_clone(0x4001000, &(0x7f00000003c0)="0692bcbea64a024c4638629f27b80f9c6a11dbe77ca7915f1074d610bd5f4f7d9a2a52e61d7e4b9cf6e0baaf645b257f872ee83314d405e0bb1ba193b541e2e67f8962db70f7039bf684c268d54d5069848dee48c4fa3580e8c1c3463f28ea3e273aaace9863bf17d21f4d13cad372985eb1b1dbd4c9df898ccedccb5e522209102b0b73cf9ee50acc3ada468557544b20966fc969638cdac4fd9677061c01ca1b6a612e29d6838b34cf0f78df53949ca0a8b583e8f3fff720f6879f5e77cca3fa53e6adb4b48e5b8c79e33fd41cef25db6d2f0d80b5f6d19ec765e13334c7ba276eeccaaf4e873f1858ec897f7c13", 0xef, &(0x7f0000000340), &(0x7f00000004c0), &(0x7f0000000500)="47f75b8824c51fb47c485517043a4ba5f78ec7571dbafc0a8a6c4f84e56d1956e97f1e802f9104d279bf8e207a2065462ee9b90b2ac3264e6c1cfb6ea5fdff368ff55d4dd3b4d627f1dfdfcf7dfd1df67396f690bd60d8d4f75de541a9039e939b578cac12ca53fd048bf78bf7f71a5b091a60348c035ec2c2e1793c57fbd7b4bce0694796b1d5592314e8e81461034ece26e8b2cb728dbee7cd003f0f27668c1dad0556c18b123d1656106294b5b37cc475eba676d406ddc4191db378ddee543e5599aa07724fdb7ca01be945da84bf53f534bbd62e84220b461c09116d201f23ca5209ebe8d5e9dd2587ef3c6168e0")
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xd0, r2, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40011}, 0x95af5ea09864810b) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:15:59 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30) (async)
r1 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280)={<r2=>0xffffffffffffffff}, 0x2, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {&(0x7f0000000080), r2}}, 0x18) (async)
r3 = pidfd_open(0x0, 0x0) (async, rerun: 64)
clock_gettime(0x0, &(0x7f0000000340)={<r4=>0x0, <r5=>0x0}) (async, rerun: 64)
r6 = memfd_secret(0x0)
ioctl$NS_GET_USERNS(r6, 0xb701, 0x0) (async, rerun: 32)
ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000003c0)=@userptr={0x3, 0xc, 0x4, 0x2000, 0x7, {r4, r5/1000+60000}, {0x2, 0xc, 0x37, 0x27, 0xda, 0x4, "6da3a11b"}, 0x3a66b184, 0x2, {&(0x7f0000000380)}, 0x2cf11c85, 0x0, r6}) (async, rerun: 32)
pidfd_getfd(r3, r1, 0x0)

23:16:00 executing program 3:
socket(0x11, 0x3, 0x0)
sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, 0x0, 0x3, {0x2, 0xf1, 0x4}}, 0x18, &(0x7f0000000180)={&(0x7f0000000080)="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", 0xfb}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)

23:16:00 executing program 2:
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000080)={<r0=>0x0, 0x4, 0x4})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000480)={r0, 0x6a00, 0x7}) (async)
clock_gettime(0x5, &(0x7f0000000040))
r1 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)

23:16:00 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0xff00, 0x0})

23:16:00 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000))
socketpair(0x5, 0x80000, 0x540, &(0x7f0000000100))
ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:16:00 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30)
r1 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180))
ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000000)={{r0}, {@void, @actul_num={@void, 0x3, 0x47}}})
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0), 0x2, 0xd}}, 0x20)

23:16:00 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom0\x00', 0x800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100, 0xfffffffffffffffd})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:16:00 executing program 3:
r0 = socket(0x11, 0x3, 0x0)
sendmsg$can_j1939(r0, 0x0, 0x4000000)

23:16:00 executing program 2:
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000000)={0x0, 0x5, 0x201c})
clock_gettime(0x5, &(0x7f0000000040))

[  845.620986][T10039] ==================================================================
[  845.629097][T10039] BUG: KASAN: null-ptr-deref in down_read+0xa5/0x450
[  845.635856][T10039] Write of size 8 at addr 00000000000000e8 by task syz-executor.1/10039
[  845.644206][T10039] 
[  845.646547][T10039] CPU: 0 PID: 10039 Comm: syz-executor.1 Not tainted 6.0.0-rc3-next-20220901-syzkaller #0
[  845.656465][T10039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
[  845.666582][T10039] Call Trace:
[  845.669880][T10039]  <TASK>
[  845.672825][T10039]  dump_stack_lvl+0xcd/0x134
[  845.677445][T10039]  ? down_read+0xa5/0x450
[  845.681801][T10039]  kasan_report+0xb1/0x1e0
[  845.686237][T10039]  ? down_read+0xa5/0x450
[  845.690582][T10039]  kasan_check_range+0x13d/0x180
[  845.695564][T10039]  down_read+0xa5/0x450
[  845.699734][T10039]  ? binder_alloc_new_buf+0xa5/0x19a0
[  845.705117][T10039]  ? lock_acquire+0x480/0x570
[  845.709801][T10039]  ? rwsem_down_read_slowpath+0xb10/0xb10
[  845.715625][T10039]  ? __traceiter_binder_return+0xa0/0xa0
[  845.721275][T10039]  ? rcu_read_lock_sched_held+0xd/0x70
[  845.726741][T10039]  ? lock_acquire+0x480/0x570
[  845.731438][T10039]  binder_alloc_new_buf+0xa5/0x19a0
[  845.736645][T10039]  ? __kmem_cache_alloc_node+0x1d8/0x3d0
[  845.742305][T10039]  binder_transaction+0x242e/0x9a80
[  845.747519][T10039]  ? is_bpf_text_address+0x77/0x170
[  845.752739][T10039]  ? lock_acquire+0x480/0x570
[  845.757423][T10039]  ? rcu_read_lock_sched_held+0xd/0x70
[  845.762885][T10039]  ? lock_release+0x560/0x780
[  845.767568][T10039]  ? is_bpf_text_address+0x77/0x170
[  845.772781][T10039]  ? lock_downgrade+0x6e0/0x6e0
[  845.777642][T10039]  ? binder_deferred_func+0x1150/0x1150
[  845.783201][T10039]  ? unwind_next_frame+0xfa9/0x1cc0
[  845.788418][T10039]  ? is_bpf_text_address+0x99/0x170
[  845.793644][T10039]  ? kernel_text_address+0x39/0x80
[  845.798764][T10039]  ? __kernel_text_address+0x9/0x30
[  845.803964][T10039]  ? unwind_get_return_address+0x51/0x90
[  845.809611][T10039]  ? write_profile+0x4a0/0x4a0
[  845.814379][T10039]  ? rcu_read_lock_sched_held+0xd/0x70
[  845.819842][T10039]  ? lock_acquire+0x480/0x570
[  845.824527][T10039]  ? rcu_read_lock_sched_held+0xd/0x70
[  845.829990][T10039]  ? lock_release+0x560/0x780
[  845.834687][T10039]  ? __might_fault+0xd1/0x170
[  845.839369][T10039]  ? lock_downgrade+0x6e0/0x6e0
[  845.844226][T10039]  ? __might_fault+0xd1/0x170
[  845.848909][T10039]  ? lock_downgrade+0x6e0/0x6e0
[  845.853772][T10039]  binder_thread_write+0x8a9/0x3220
[  845.859013][T10039]  ? lock_release+0x560/0x780
[  845.863983][T10039]  ? debug_check_no_obj_freed+0x20c/0x420
[  845.869726][T10039]  ? __kmem_cache_alloc_node+0x48/0x3d0
[  845.875293][T10039]  ? binder_transaction+0x9a80/0x9a80
[  845.880688][T10039]  ? binder_debug+0xb2/0x160
[  845.885306][T10039]  ? rcu_read_lock_sched_held+0xd/0x70
[  845.890782][T10039]  ? lock_acquire+0x480/0x570
[  845.895483][T10039]  ? rcu_read_lock_sched_held+0xd/0x70
[  845.900953][T10039]  ? lock_release+0x560/0x780
[  845.905727][T10039]  ? binder_debug+0xb2/0x160
[  845.910328][T10039]  ? __traceiter_binder_return+0xa0/0xa0
[  845.915975][T10039]  ? lock_downgrade+0x6e0/0x6e0
[  845.920854][T10039]  ? lockdep_init_map_type+0x21a/0x7f0
[  845.926331][T10039]  binder_ioctl+0x3470/0x6d00
[  845.931016][T10039]  ? tomoyo_path_number_perm+0x162/0x550
[  845.936658][T10039]  ? do_raw_spin_unlock+0x171/0x230
[  845.941885][T10039]  ? tomoyo_execute_permission+0x4a0/0x4a0
[  845.947716][T10039]  ? __sanitizer_cov_trace_switch+0x50/0x90
[  845.953713][T10039]  ? binder_thread_write+0x3220/0x3220
[  845.959437][T10039]  ? do_vfs_ioctl+0x132/0x15c0
[  845.964211][T10039]  ? vfs_fileattr_set+0xbe0/0xbe0
[  845.969257][T10039]  ? rcu_read_lock_sched_held+0xd/0x70
[  845.974722][T10039]  ? __ct_user_exit+0xff/0x150
[  845.979508][T10039]  ? __fget_files+0x26a/0x440
[  845.984215][T10039]  ? bpf_lsm_file_ioctl+0x5/0x10
[  845.989164][T10039]  ? binder_thread_write+0x3220/0x3220
[  845.994651][T10039]  __x64_sys_ioctl+0x193/0x200
[  845.999434][T10039]  do_syscall_64+0x35/0xb0
[  846.003859][T10039]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  846.009771][T10039] RIP: 0033:0x7fc8cc689279
[  846.014191][T10039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  846.033807][T10039] RSP: 002b:00007fc8cbdff168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  846.042224][T10039] RAX: ffffffffffffffda RBX: 00007fc8cc79bf80 RCX: 00007fc8cc689279
[  846.050196][T10039] RDX: 0000000020000380 RSI: 00000000c0306201 RDI: 0000000000000003
[  846.058169][T10039] RBP: 00007fc8cc6e32e9 R08: 0000000000000000 R09: 0000000000000000
23:16:00 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30) (async)
r1 = syz_open_dev$vivid(&(0x7f0000001140), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001180)) (async)
ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000000)={{r0}, {@void, @actul_num={@void, 0x3, 0x47}}}) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0), 0x2, 0xd}}, 0x20)

23:16:00 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000))
socketpair(0x5, 0x80000, 0x540, &(0x7f0000000100))
ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

23:16:00 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0})

[  846.066140][T10039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  846.074117][T10039] R13: 00007fffa98f99df R14: 00007fc8cbdff300 R15: 0000000000022000
[  846.082096][T10039]  </TASK>
[  846.085111][T10039] ==================================================================
[  846.099886][T10039] Kernel panic - not syncing: panic_on_warn set ...
[  846.106512][T10039] CPU: 1 PID: 10039 Comm: syz-executor.1 Not tainted 6.0.0-rc3-next-20220901-syzkaller #0
[  846.116424][T10039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
[  846.126500][T10039] Call Trace:
[  846.129802][T10039]  <TASK>
[  846.132734][T10039]  dump_stack_lvl+0xcd/0x134
[  846.137347][T10039]  panic+0x2c8/0x622
[  846.141294][T10039]  ? panic_print_sys_info.part.0+0x110/0x110
[  846.147302][T10039]  ? preempt_schedule_common+0x59/0xc0
[  846.152787][T10039]  ? preempt_schedule_thunk+0x16/0x18
[  846.158179][T10039]  ? down_read+0xa5/0x450
[  846.162521][T10039]  end_report.part.0+0x3f/0x7c
[  846.167305][T10039]  kasan_report.cold+0xa/0xf
[  846.171992][T10039]  ? down_read+0xa5/0x450
[  846.176439][T10039]  kasan_check_range+0x13d/0x180
[  846.181433][T10039]  down_read+0xa5/0x450
[  846.185612][T10039]  ? binder_alloc_new_buf+0xa5/0x19a0
[  846.191028][T10039]  ? lock_acquire+0x480/0x570
[  846.195722][T10039]  ? rwsem_down_read_slowpath+0xb10/0xb10
[  846.201457][T10039]  ? __traceiter_binder_return+0xa0/0xa0
[  846.207104][T10039]  ? rcu_read_lock_sched_held+0xd/0x70
[  846.212567][T10039]  ? lock_acquire+0x480/0x570
[  846.217274][T10039]  binder_alloc_new_buf+0xa5/0x19a0
[  846.222504][T10039]  ? __kmem_cache_alloc_node+0x1d8/0x3d0
[  846.228162][T10039]  binder_transaction+0x242e/0x9a80
[  846.233393][T10039]  ? is_bpf_text_address+0x77/0x170
[  846.238612][T10039]  ? lock_acquire+0x480/0x570
[  846.243308][T10039]  ? rcu_read_lock_sched_held+0xd/0x70
[  846.248774][T10039]  ? lock_release+0x560/0x780
[  846.253457][T10039]  ? is_bpf_text_address+0x77/0x170
[  846.258673][T10039]  ? lock_downgrade+0x6e0/0x6e0
[  846.263536][T10039]  ? binder_deferred_func+0x1150/0x1150
[  846.269089][T10039]  ? unwind_next_frame+0xfa9/0x1cc0
[  846.274342][T10039]  ? is_bpf_text_address+0x99/0x170
[  846.279640][T10039]  ? kernel_text_address+0x39/0x80
[  846.284761][T10039]  ? __kernel_text_address+0x9/0x30
[  846.289961][T10039]  ? unwind_get_return_address+0x51/0x90
[  846.295608][T10039]  ? write_profile+0x4a0/0x4a0
[  846.300400][T10039]  ? rcu_read_lock_sched_held+0xd/0x70
[  846.305952][T10039]  ? lock_acquire+0x480/0x570
[  846.310640][T10039]  ? rcu_read_lock_sched_held+0xd/0x70
[  846.316109][T10039]  ? lock_release+0x560/0x780
[  846.320793][T10039]  ? __might_fault+0xd1/0x170
[  846.325477][T10039]  ? lock_downgrade+0x6e0/0x6e0
[  846.330336][T10039]  ? __might_fault+0xd1/0x170
[  846.335018][T10039]  ? lock_downgrade+0x6e0/0x6e0
[  846.339885][T10039]  binder_thread_write+0x8a9/0x3220
[  846.345096][T10039]  ? lock_release+0x560/0x780
[  846.349776][T10039]  ? debug_check_no_obj_freed+0x20c/0x420
[  846.355502][T10039]  ? __kmem_cache_alloc_node+0x48/0x3d0
[  846.361082][T10039]  ? binder_transaction+0x9a80/0x9a80
[  846.366516][T10039]  ? binder_debug+0xb2/0x160
[  846.371138][T10039]  ? rcu_read_lock_sched_held+0xd/0x70
[  846.376613][T10039]  ? lock_acquire+0x480/0x570
[  846.381312][T10039]  ? rcu_read_lock_sched_held+0xd/0x70
[  846.386802][T10039]  ? lock_release+0x560/0x780
[  846.391501][T10039]  ? binder_debug+0xb2/0x160
[  846.396111][T10039]  ? __traceiter_binder_return+0xa0/0xa0
[  846.401759][T10039]  ? lock_downgrade+0x6e0/0x6e0
[  846.406621][T10039]  ? lockdep_init_map_type+0x21a/0x7f0
[  846.412105][T10039]  binder_ioctl+0x3470/0x6d00
[  846.416798][T10039]  ? tomoyo_path_number_perm+0x162/0x550
[  846.422442][T10039]  ? do_raw_spin_unlock+0x171/0x230
[  846.427653][T10039]  ? tomoyo_execute_permission+0x4a0/0x4a0
[  846.433492][T10039]  ? __sanitizer_cov_trace_switch+0x50/0x90
[  846.439412][T10039]  ? binder_thread_write+0x3220/0x3220
[  846.444890][T10039]  ? do_vfs_ioctl+0x132/0x15c0
[  846.449678][T10039]  ? vfs_fileattr_set+0xbe0/0xbe0
[  846.454725][T10039]  ? rcu_read_lock_sched_held+0xd/0x70
[  846.460194][T10039]  ? __ct_user_exit+0xff/0x150
[  846.464981][T10039]  ? __fget_files+0x26a/0x440
[  846.469670][T10039]  ? bpf_lsm_file_ioctl+0x5/0x10
[  846.474616][T10039]  ? binder_thread_write+0x3220/0x3220
[  846.480089][T10039]  __x64_sys_ioctl+0x193/0x200
[  846.484867][T10039]  do_syscall_64+0x35/0xb0
[  846.489294][T10039]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  846.495286][T10039] RIP: 0033:0x7fc8cc689279
[  846.499704][T10039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  846.519316][T10039] RSP: 002b:00007fc8cbdff168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  846.527732][T10039] RAX: ffffffffffffffda RBX: 00007fc8cc79bf80 RCX: 00007fc8cc689279
[  846.535705][T10039] RDX: 0000000020000380 RSI: 00000000c0306201 RDI: 0000000000000003
[  846.543679][T10039] RBP: 00007fc8cc6e32e9 R08: 0000000000000000 R09: 0000000000000000
[  846.551652][T10039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  846.559626][T10039] R13: 00007fffa98f99df R14: 00007fc8cbdff300 R15: 0000000000022000
[  846.567608][T10039]  </TASK>
[  846.570702][T10039] Kernel Offset: disabled
[  846.575022][T10039] Rebooting in 86400 seconds..