z_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800)
r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4070, 0xfe6}], 0x1, 0xff)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r4, &(0x7f00000017c0), 0x218, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5)

[  670.016722][ T4683] IPVS: ftp: loaded support on port[0] = 21
[  670.049349][ T4684] binder: BINDER_SET_CONTEXT_MGR already set
[  670.068065][ T4684] binder: 4682:4684 ioctl 40046207 0 returned -16
[  670.091264][ T4684] binder: BINDER_SET_CONTEXT_MGR already set
06:07:12 executing program 2:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r6 = dup2(r5, r1)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000002400)=ANY=[@ANYBLOB="00000000f661a54ba14ee860adb356f9596f7e96e6002a47bffa13bf4e4ef9c58132bef9da30ba798acfd860344f1004dfc3fc3eec2cfba745aef3c9b4cfd5f0dfaa95b5b1b7823a7c97b7351292f2d78b4fe1029a865789ba0fd5ddcb59f9fd2607cbd384f241eaefdf8fe6981d99966685f2a0cc1468f5c96ee15876857baca5d9af52182b428deea1297b319f0f0279d8701b07625cee09bab2b44f1e9d4b76c5a062e9b59038805ce23b3d3bb459020226ec0e98b51f1e9bd78b1980075b1d7956fc8abe655e37abc2dfd8c0267b9728bee315c00888faa8ed70d21e70c13fa0297563a943661f690780c630"], 0x1, 0x0, &(0x7f0000000140)="0e"})
socket$kcm(0x29, 0x7, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0)
r7 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000003000/0x4000)=nil)
shmat(r7, &(0x7f0000000000/0x13000)=nil, 0x4000)
shmctl$IPC_INFO(r7, 0x3, &(0x7f0000003540)=""/4112)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000002300)=""/98)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
sendmsg$unix(r0, &(0x7f00000022c0)={&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000200)="f8bd4db9c034496baf8bf739b33d9760c1528d6717d0d308167f34870c31083d7e52ac6f998f33aecf8c7b58c3e11b3b48f8be1e449a523c935195bc8ee6c4e0f1b88e2778016f7544f965a488c7485cff0a1660abe091180f90fa2b924633530326fde2afa83cde6ef14d4b1b49908084b57aedec900bede0b0e5ca171426719698f7e864", 0x85}, {&(0x7f0000000040)="f74b5d06380968c4a7d7893c5c5c70b14cbb527741dcfbb27585cc1613", 0x1d}, {&(0x7f00000002c0)="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", 0x1000}], 0x3}, 0x4000)
r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r8, &(0x7f00000017c0), 0x218, 0x0)

[  670.128122][ T4684] binder: 4682:4684 ioctl 40046207 0 returned -16
[  670.190328][ T4694] binder: 4693:4694 ioctl c0306201 0 returned -14
[  670.641185][ T4684] binder: BINDER_SET_CONTEXT_MGR already set
[  670.651288][ T4684] binder: 4682:4684 ioctl 40046207 0 returned -16
[  670.670872][ T4712] binder: BINDER_SET_CONTEXT_MGR already set
[  670.697352][ T4712] binder: 4682:4712 ioctl 40046207 0 returned -16
[  670.722765][ T4692] binder: BINDER_SET_CONTEXT_MGR already set
[  670.739457][ T4692] binder: 4682:4692 ioctl 40046207 0 returned -16
[  670.779571][ T4683] IPVS: ftp: loaded support on port[0] = 21
06:07:13 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
preadv(r2, &(0x7f0000000480)=[{&(0x7f0000000400)=""/50, 0x32}, {&(0x7f0000000300)=""/182, 0xb6}, {&(0x7f0000000440)=""/27, 0x1b}, {&(0x7f00000002c0)}], 0x4, 0x2)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r3, &(0x7f00000017c0), 0x218, 0x0)
r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
r5 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r6 = dup2(r5, r4)
ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r6, &(0x7f0000000100)="dd5685d7952f02d9f044eaab4b77bbba53f04af10c9f434d287b2448a50088f90302f6e311649560e791449660a19b44f9222e596681cbd3614f462e9db19da7d0875a041693", &(0x7f0000000180)="61d9d5202f91502a5b94e51e47c8f609900837cf7e4b16d2a6cc7e8fd735652753aab66a6185a5b577172eb0e46489ae392b177e8ecefdca252685ea383e9a50f34ff3e3a2a12a9540a8a1f4a90b76e7f0912b4279b45140acff96dcb09a2f3d3fed63cca44ca27b0a2d62703c7a1feed80733237a32941fdf0c55b1f82c5080116dbdd276224461d4a44f1579ce9eb151bb33c08c53cbb4458f0b0da187a26a64c9769ca3ea5e8c974788e4ddc71c653fbc9243b3a28a717d680d7b106d808acd66e933de5f0b71b53e9ac16d2e5c7d02377017f960ffd9aea7ba378840", 0x4}, 0x1c)

06:07:13 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r2, @ANYRESHEX, @ANYRESDEC], 0x0, 0x0, 0x0})
r4 = dup2(r3, r2)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000240)={0x43, 0x4}, 0x10)
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="05c0c265cd4d00000e24237723d37fb9fdaa1cdd1560ff0f3156b8079219d78df6420a3be4aafff88482875b53a53cfa934254aa50e4d658a388fa6cc474ab9e69a505700508dbcb6739558e4e47f027b60cb0e8961a7c94a82fcecf182323907ee8ea7e9b222fb54e95c5e34a9a4120ba0df2a542611b44b0dffd0f6efaf97d8b95e9dc1968efdf22896766f66c015de529b5982b1035d07a28d847"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0})
getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000100)=0x4)
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0aa1030000000000000056fbdee59cb03b2a552004c57754bda3aa1865d1ff9e3eb0172fe593b162bae760f37dba57dd6bfe0400000000000000a4edaee0a454c86b8dca00009a7a191e3e5522d66b5b1e8778a87da90853600000000000eb55ccc50b27d3f70dc826b206689c86a3a181b28d2cac72c2ee3bb8fb81bc5ec4b8b7c5fd62f2e68f1227b4e1e5ebd6edc57f8a61be873f4bac8e5f3a8160cda35d411cad1de5a1df736fcab6e2c8a07e9bc73dca7514c4"], 0x1, 0x0, &(0x7f0000000140)="0e"})
preadv(r2, &(0x7f0000000500)=[{&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000000280)=""/5, 0x5}, {&(0x7f0000000440)=""/167, 0x51}], 0x4, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000340)='stack\x00')
preadv(r5, &(0x7f0000000c40)=[{&(0x7f0000000580)=""/132, 0x84}, {&(0x7f0000000640)=""/129, 0x81}, {&(0x7f0000000700)=""/255, 0xff}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000000800)=""/254, 0xfe}, {&(0x7f0000000900)=""/71, 0x47}, {&(0x7f0000000980)=""/9, 0x9}, {&(0x7f00000009c0)=""/212, 0xd4}, {&(0x7f0000000ac0)=""/87, 0x57}, {&(0x7f0000000b40)=""/240, 0xf0}], 0xa, 0x0)

[  671.052778][ T4728] binder: BINDER_SET_CONTEXT_MGR already set
[  671.080174][ T4738] binder: 4735:4738 ioctl c0306201 0 returned -14
[  671.087791][ T4728] binder: 4727:4728 ioctl 40046207 0 returned -16
[  671.115221][ T4738] binder: 4735:4738 unknown command 6
[  671.157740][ T4738] binder: 4735:4738 ioctl c0306201 20000200 returned -22
[  671.179464][ T4751] binder: 4735:4751 unknown command 1707261957
[  671.211830][ T4751] binder: 4735:4751 ioctl c0306201 200002c0 returned -22
[  671.224719][ T4738] binder: 4735:4738 unknown command 0
[  671.236165][ T4738] binder: 4735:4738 ioctl c0306201 20000540 returned -22
[  671.281964][ T4738] binder: BINDER_SET_CONTEXT_MGR already set
[  671.301560][ T4738] binder: 4735:4738 ioctl 40046207 0 returned -16
06:07:14 executing program 1:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0})
write$ppp(r2, &(0x7f0000000080)="c17ac7e2369edf9f0663f850051a748ea06d855b11db36406467dd82", 0x1c)
socket$pptp(0x18, 0x1, 0x2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0xa0000, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000000040)={0x3}, 0x1)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="34010800000000000000000000000400c8800900c3c32fc87617b7352d4b4767ac25768e010073797a310000000006000240000000000500030021000000000000000000"], 0x34}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, 0x2, 0x8, 0x101}, 0x14}}, 0x0)

06:07:14 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x3c1, 0x3, 0x268, 0xc8, 0xc8, 0xc8, 0x0, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa4, 0xc8}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'bond_slave_1\x00', 'veth1_to_bond\x00'}, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34, 'SET\x00'}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x2c4)
getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f0000000100), &(0x7f0000000180)=0x40)
preadv(r3, &(0x7f00000017c0), 0x218, 0x0)

[  671.559992][ T4758] IPVS: ftp: loaded support on port[0] = 21
[  671.564622][ T4759] binder: 4756:4759 ioctl c0306201 0 returned -14
[  671.603908][ T4759] xt_TCPMSS: Only works on TCP SYN packets
06:07:14 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000040))
preadv(r3, &(0x7f00000017c0), 0x218, 0x0)

[  672.212053][ T4787] binder: 4786:4787 ioctl c0306201 0 returned -14
[  672.279341][ T4758] IPVS: ftp: loaded support on port[0] = 21
06:07:15 executing program 1:
r0 = socket$inet(0x2b, 0x801, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)
listen(r0, 0x0)

06:07:15 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x81)
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"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"})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = dup3(r1, r2, 0x0)
ioctl$KVM_SET_CPUID(r3, 0xc008ae88, &(0x7f0000000140)={0x1, 0x0, [{0xc0010209}]})
dup2(r4, r3)
r5 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)

06:07:15 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
dup2(r3, r2)
r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
r5 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="cd320552"], 0x0, 0x0, 0x0})
dup2(r5, r4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0)
r6 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r7, &(0x7f00000017c0), 0x218, 0x0)

06:07:15 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'gretap0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macsec0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r1 = dup2(r0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r2, &(0x7f00000017c0), 0x218, 0x0)
r3 = openat$vcsa(0xffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x30000, 0x0)
r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
r5 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r6 = dup2(r5, r4)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000040)={0x0, r6})

[  672.913896][ T4825] binder: 4823:4825 unknown command 1376072397
[  672.927916][ T4825] binder: 4823:4825 ioctl c0306201 20000200 returned -22
[  672.956426][ T4825] binder: 4823:4825 ioctl c0306201 0 returned -14
[  673.287842][ T4825] binder: 4823:4825 unknown command 1376072397
[  673.294908][ T4839] binder: 4823:4839 ioctl c0306201 0 returned -14
[  673.301894][ T4825] binder: 4823:4825 ioctl c0306201 20000200 returned -22
06:07:16 executing program 1:
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x4)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)="580000001400192340834b80043f679a10ff3d425f9cc3d8027f4e32f61bcdf1e422000000000100804824cabecc4b289277eb14cd2e688e41a1bbe35da95aaa000000c600000000000000feff2c707f8f00ff0000000000", 0x58}], 0x1)

06:07:16 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0b631000"], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r3, &(0x7f00000017c0), 0x218, 0x0)

[  673.546272][ T4848] binder: 4847:4848 ioctl c0306201 0 returned -14
06:07:16 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00')
writev(r0, 0x0, 0x0)

06:07:16 executing program 1:
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$xdp(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
close(r0)

06:07:16 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4)
sendmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="b917b34c79fa1fc6aab20732a0fb34b496b1b71a9d20cad73eeb69411609091c23e90d399a6a09e9f6ff7f20d0445f6ac9ed2803b15ac06387779d669c8d644b1cdf6fe621ad1045a06fd996", 0x4c}, {&(0x7f0000000080)="b7e0f7", 0x3}, {&(0x7f00000001c0)="9322d8b10c52a41207493f3648cd6ddf386b0108069a602211ed94bf7e9b85c88b0b2db6f7a573647f02c2752ffc8613a0f1a57534aa7f5584f3cf5666aa17d3091af1d5636cc122b4537769b0c7e2230ca0c70d5da37d0664f0c67cce84cbd8ac49c3", 0x63}, {&(0x7f0000000240)="526d6a4954b8ee495d4fa98461326530ffb719de3012358dfacebbb720c79cf09e6cd54affe038c447933820916e294b4a93b43c74199c4a965ebe6be17fa43609983444834b60a726dbe2fae2e6d66a73b49c6075e7cfb029519e22e4b94bd8fbb7f4e4fd0d7faab69069fb49452cedb1ebea38c0c3856e05f6b861a69a5f64689c11af856b51cbc1db516370c3529554f9feacf8262951b1717bf313a7a0a120d74a", 0xa3}, {&(0x7f0000000300)="0e69f5ab2b7f128afe59884ad35763a0e2ad5ffd52558216dd894c9b300960374e396a60a5923b558a229a691705424ffdeb0a09438f9635fa6c39391664569c98194c9711394898387f6731985208c66af0215372143def4e58ca7e5a22d0147d8a7e4c88e147a2a18d809d7f9494a9dd6d85e10741559c42d8caa05c502add6c74d7effff81665cdc56300b54a68c9085131df073368e39731c9e5055d73326af3b2e02e2efa2c2aca17f239cef69466054cc58e123acc82c00e839c1b7555c76e", 0xc2}, {&(0x7f00000004c0)="77f25e841d4fa48220ab1fabaae4a49627276b4e98bba646064b6610d976caac91419dc5afd2421c0cfed471982807167503befdf340709253ef7b4dad1b47ca063b4c8296fe5a90fa9bd24d5f51ebc521091ab3f2f0be28cd622122bfe40cb719892f060e911d453cce444dfa587ddfbaeaea54eadc926f7bd8885094d8d059be", 0x81}, {&(0x7f0000000640)="7adc6beee14eb003530957b5973f4714f1009f410ac3a6638025d3adb78a47c12d4e932ba791878448e109f1cd79d18ee717542cb31990ea743d7fcf41c68714", 0x40}], 0x7}}, {{0x0, 0x0, &(0x7f0000000f40)=[{0x0}, {&(0x7f0000000ac0)="1fb265fca63035adb84e01db567e726cd228a340175dfdb6eff2efcfcc62908e0f203976bb27a334a152a806effee5ee5f02179bf6344a7dd2eee418e95734b6df290e5ba55e54016c1fe2a1a20bc4adb7157f316d211870ed8546b046f9e1f039a85bb6000767f486cd8bcae32de2f289431a92b1120d31c85c9e7da1db16fef6bae51f54dde3351a7bfebfd88af8f1ba1108bcb42a00819a77659b6ce36533adb9d0c563e543f2b6afc0e4c0e0b21c4530ee9d683cc8f5f5eeb68cbac559c9004141bea99fad89", 0xc8}], 0x2}}], 0x2, 0x0)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)

06:07:16 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r3, &(0x7f00000017c0), 0x218, 0x0)
r4 = openat$bsg(0xffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2080, 0x0)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6, 0x100010, r4, 0x8)

[  674.137645][ T4863] binder: 4861:4863 ioctl c0306201 0 returned -14
06:07:17 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="03000000"], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r3 = gettid()
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r4, &(0x7f0000000a00)=[{0x0}], 0x1, 0x0)
perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x81, 0x40, 0x5, 0x0, 0x0, 0x100, 0x83010, 0xc, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x226, 0x2, @perf_config_ext={0x40, 0x68be}, 0x204, 0x80000001, 0x9f7, 0x1, 0x401, 0x8, 0xbff}, r3, 0xe, r4, 0x8)
r5 = syz_open_procfs(r3, &(0x7f0000000040)='net/ip6_mr_vif\x00')
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = socket$inet(0x2, 0x80000, 0x1)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x19, &(0x7f0000000240)={r8}, 0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000100)={r8, 0x2, 0x30}, 0xc)
r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r9, &(0x7f00000017c0), 0x218, 0x0)

[  674.535846][ T4869] binder: 4868:4869 ioctl c0306201 0 returned -14
06:07:17 executing program 1:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r6 = dup2(r5, r1)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000002400)=ANY=[@ANYBLOB="00000000f661a54ba14ee860adb356f9596f7e96e6002a47bffa13bf4e4ef9c58132bef9da30ba798acfd860344f1004dfc3fc3eec2cfba745aef3c9b4cfd5f0dfaa95b5b1b7823a7c97b7351292f2d78b4fe1029a865789ba0fd5ddcb59f9fd2607cbd384f241eaefdf8fe6981d99966685f2a0cc1468f5c96ee15876857baca5d9af52182b428deea1297b319f0f0279d8701b07625cee09bab2b44f1e9d4b76c5a062e9b59038805ce23b3d3bb459020226ec0e98b51f1e9bd78b1980075b1d7956fc8abe655e37abc2dfd8c0267b9728bee315c00888faa8ed70d21e70c13fa0297563a943661f690780c630"], 0x1, 0x0, &(0x7f0000000140)="0e"})
socket$kcm(0x29, 0x7, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0)
r7 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000003000/0x4000)=nil)
shmat(r7, &(0x7f0000000000/0x13000)=nil, 0x4000)
shmctl$IPC_INFO(r7, 0x3, &(0x7f0000003540)=""/4112)
shmctl$IPC_STAT(r7, 0x2, &(0x7f0000002300)=""/98)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
sendmsg$unix(r0, &(0x7f00000022c0)={&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000200)="f8bd4db9c034496baf8bf739b33d9760c1528d6717d0d308167f34870c31083d7e52ac6f998f33aecf8c7b58c3e11b3b48f8be1e449a523c935195bc8ee6c4e0f1b88e2778016f7544f965a488c7485cff0a1660abe091180f90fa2b924633530326fde2afa83cde6ef14d4b1b49908084b57aedec900bede0b0e5ca171426719698f7e864", 0x85}, {&(0x7f0000000040)="f74b5d06380968c4a7d7893c5c5c70b14cbb527741dcfbb27585cc1613", 0x1d}, {&(0x7f00000002c0)="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", 0x1000}], 0x3}, 0x4000)
r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r8, &(0x7f00000017c0), 0x218, 0x0)

[  674.761438][ T4876] binder: 4875:4876 ioctl c0306201 0 returned -14
[  674.890312][ T4869] binder: 4868:4869 ioctl c0306201 0 returned -14
06:07:17 executing program 2:
r0 = syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0xfff, 0x210443)
ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0x80104132, &(0x7f0000000100))
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x44, 0x0, &(0x7f00000001c0)=[@clear_death, @release={0x40046306, 0x1}, @register_looper, @acquire_done={0x40106309, 0x2}, @request_death={0x400c630e, 0x3}, @exit_looper], 0x0, 0x0, 0x0})
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000180)=0x4000000)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)
r3 = dup2(r2, r1)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x1, 0x0, &(0x7f0000000140)="0e"})
r4 = gettid()
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(0xffffffffffffffff, &(0x7f0000000a00)=[{0x0}], 0x1, 0xfffffefd)
perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x81, 0x40, 0x5, 0x0, 0x0, 0x100, 0x83010, 0xc, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x226, 0x2, @perf_bp={&(0x7f0000000240)}, 0x604, 0x80000001, 0x9f7, 0x1, 0x0, 0x800, 0xbff}, r4, 0xe, r5, 0x8)
getpriority(0x2, r4)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r6, &(0x7f00000017c0), 0x218, 0x0)

[  675.218855][ T4888] binder: 4886:4888 ioctl c0306201 0 returned -14
06:07:18 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r1 = dup2(r0, 0xffffffffffffffff)
ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r2, &(0x7f00000017c0), 0x218, 0x0)
r3 = accept4$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x2710, @my=0x0}, 0x10, 0x80800)
ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000040)={r3})

06:07:18 executing program 3:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000040)={0x2, "3d3971ee30976008a3b74d972c239e256bd5864687ab26aeacb225ceadfc362c", 0x2, 0x1})
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7ff}}}, 0x24}}, 0x0)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x104, r4, 0x109, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x200}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xba}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xff}]}, @IPVS_CMD_ATTR_DAEMON={0x70, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x39}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xc0}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xe}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x29}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x100, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}}, 0x0)
r5 = openat$snapshot(0xffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x210000, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x20, r7, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}}, 0x0)
sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, r7, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x400c044)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x76629d6d}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffc}]}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x401}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x100}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000004}, 0x8010)
sendmsg$SMC_PNETID_DEL(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r7, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r8, &(0x7f00000017c0), 0x218, 0x0)

06:07:18 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f0000000000)={0x0, {0x8, 0x5e8}})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
getpeername$packet(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x14)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r3, &(0x7f00000017c0), 0x218, 0x0)
keyctl$search(0xa, 0x0, &(0x7f00000001c0)='blacklist\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0)

06:07:18 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = getpgid(0x0)
syz_open_procfs(r1, &(0x7f0000000040)='mounts\x00')
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)
r3 = dup2(r2, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
write$binfmt_script(r7, &(0x7f0000000180)={'#! ', '.', [{0x20, '/dev/binder#\x00'}, {0x20, 'md5sum'}, {0x20, ')'}, {0x20, 'keyringeth0vmnet0Zmd5sumwlan1bdevmd5sum@keyring(}[vmnet1'}, {}, {0x20, '/dev/binder#\x00'}, {0x20, '/dev/binder#\x00'}], 0xa, "1fd6f4e7faaf729e7b5679d985655aeb8a39ed48b852a674ba7a270e59bd73c4ba20351c34faaf50a31a49fe3d087781a44c00d00fd4b7214770c802df23532c24cd3fd3150f627320942010c32ca9bb81fac59ca62c3eb2ee34218d8f4907ea19b8390aa270540c5d5697acb848da5ad92572f1d6211b1c0a5e42b2354fa504fac454ca0eb9bbc1ce8b2d38d912d51729e40a8cd3b3a8fadd85d9d711131726f80f02ef76292e19a2f07fd9db515b88b774c59d38299f12c00f55e9d13133402a22ba3b9f5c058ac69f465886a2aee7d15a4131a7537f31341d35b1c8fbeaeec1e7abab53a9da5507994dc0bff4df"}, 0x161)
preadv(r4, &(0x7f00000017c0), 0x218, 0x0)

06:07:18 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r1 = gettid()
ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000000c0)='gid_map\x00')
preadv(r2, &(0x7f00000017c0), 0x218, 0x0)

[  675.808606][ T4900] binder_alloc: 4899: binder_alloc_buf, no vma
[  675.820931][ T4900] binder: 4899:4900 ioctl c0305615 20000000 returned -22
[  675.847415][ T4902] binder: 4901:4902 ioctl c0306201 0 returned -14
06:07:18 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xda11)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r2, &(0x7f00000017c0), 0x218, 0x0)

06:07:19 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f0000000000)={0x0, {0x8, 0x5e8}})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
getpeername$packet(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x14)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r3, &(0x7f00000017c0), 0x218, 0x0)
keyctl$search(0xa, 0x0, &(0x7f00000001c0)='blacklist\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0)

[  676.609367][ T4929] binder_alloc: 4925: binder_alloc_buf, no vma
[  676.646805][ T4929] binder: 4925:4929 ioctl c0305615 20000000 returned -22
06:07:19 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r3, &(0x7f00000017c0), 0x218, 0x0)

[  676.797237][ T4933] binder: 4931:4933 ioctl c0306201 0 returned -14
06:07:19 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$FITHAW(r2, 0xc0045878)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x2000, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
tee(r1, 0xffffffffffffffff, 0x9, 0x8)
r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r4, &(0x7f00000017c0), 0x218, 0x0)

[  677.041699][ T4936] debugfs: Directory 'vcpu0' with parent '4936-5' already present!
06:07:19 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f0000000000)={0x0, {0x8, 0x5e8}})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
getpeername$packet(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x14)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r3, &(0x7f00000017c0), 0x218, 0x0)
keyctl$search(0xa, 0x0, &(0x7f00000001c0)='blacklist\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0)

[  677.218763][ T4941] binder_alloc: 4940: binder_alloc_buf, no vma
[  677.258399][ T4941] binder: 4940:4941 ioctl c0305615 20000000 returned -22
[  677.533479][ T4936] debugfs: Directory 'vcpu0' with parent '4946-5' already present!
06:07:20 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f0000000000)={0x0, {0x8, 0x5e8}})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
getpeername$packet(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x14)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r3, &(0x7f00000017c0), 0x218, 0x0)

06:07:20 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r1, &(0x7f00000017c0), 0x218, 0x0)
r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="04c75f630440bda66da4481ac0d14b096d6d0bf709871f502c232f095ff12acfc985a7b403c98ee49a91adaa24aa728cad3897e2023479fc0fc1206bb9d115085af762f4ff779689428843bcb49a18220b416a4925359bbc2a8aba51e9a204ef0c10faecc8d56b86fb8542919aa22f9249eb35a69ae16bd178ef33c17a1068f25cce65d8e92f4d5c106c3de82e27390752dab60d675ad309bb2751c55be4b638beb1d0900fb37c1802f0c85feb"], 0x0, 0x0, 0x0})
r4 = dup2(r3, r2)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000040))

[  677.948105][ T4954] binder_alloc: 4953: binder_alloc_buf, no vma
[  677.975207][ T4954] binder: 4953:4954 ioctl c0305615 20000000 returned -22
[  678.040961][ T4958] binder: BINDER_SET_CONTEXT_MGR already set
[  678.059148][ T4958] binder: 4955:4958 ioctl 40046207 0 returned -16
06:07:20 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
fcntl$notify(r4, 0x402, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r5 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
preadv(r6, &(0x7f0000000100), 0x0, 0x0)

[  678.214788][ T4962] binder: 4961:4962 ioctl c0306201 0 returned -14
06:07:21 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000040))
preadv(r3, &(0x7f00000017c0), 0x218, 0x0)
write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x8, {0x60000000000000}}, 0x18)

[  678.402173][ T4960] binder: 4955:4960 unknown command 1667221252
[  678.411775][ T4960] binder: 4955:4960 ioctl c0306201 20000200 returned -22
[  678.428646][ T4972] binder: BINDER_SET_CONTEXT_MGR already set
[  678.455293][ T4972] binder: 4955:4972 ioctl 40046207 0 returned -16
[  678.478182][ T4956] binder: 4955:4956 ioctl 227d 20000040 returned -22
06:07:21 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f0000000000)={0x0, {0x8, 0x5e8}})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
getpeername$packet(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x14)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')

[  678.501858][ T4974] binder: 4973:4974 ioctl c0306201 0 returned -14
[  678.524259][ T4974] binder: 4973:4974 ioctl 80044940 20000040 returned -22
[  678.625291][ T4979] binder: BINDER_SET_CONTEXT_MGR already set
[  678.653684][ T4979] binder: 4976:4979 ioctl 40046207 0 returned -16
[  678.678753][ T4980] binder: 4976:4980 ioctl c0305615 20000000 returned -22
06:07:21 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f0000000000)={0x0, {0x8, 0x5e8}})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
getpeername$packet(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x14)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')

06:07:21 executing program 3:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r3 = openat$cachefiles(0xffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x1400, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000007c0)={0xd8, 0x0, &(0x7f00000005c0)=[@dead_binder_done, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/81, 0x51, 0x0, 0x16}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/156, 0x9c, 0x1}}, &(0x7f00000002c0)={0x0, 0x28, 0x40}}}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x1, &(0x7f0000000300), 0x0, 0x1}, @fd={0x66642a85, 0x0, r4}, @flat=@weak_binder}, &(0x7f00000003c0)={0x0, 0x28, 0x40}}}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000500)={@flat=@weak_handle={0x77682a85, 0x10a}, @fd={0x66642a85, 0x0, r6}, @flat=@weak_handle={0x77682a85, 0x100, 0x1}}, &(0x7f0000000580)={0x0, 0x18, 0x30}}}], 0x38, 0x0, &(0x7f00000006c0)="f54339c4f10d62d6b78083053e16ca0bb33fa27e20661a4c6d0e59089e0c43fe4c0f07f8d49404e5e06b48d5421cc3da32fb91c7d9c69a801e974d49d25cdae1e7aab484efb910e19b0d09f5eea16a7728bcbee9e2251a3d12599749691a6fb688e66eb457cdce8f139abbb773272e222c78c71bdf4cf6c56e2cb020af98a6d7ec49b5cfb8fa6188e8fe2d63ca193a74e1443f3db5ba1964d4d3489ad67fba24afbe00216aa8935111df4392dbcd38ba5742fc7267898563c4d720da0be3ac07e063ea36fda48195d2c4dc"})
preadv(r2, &(0x7f00000017c0), 0x218, 0x0)

[  678.902834][ T4984] binder_alloc: 4982: binder_alloc_buf, no vma
[  678.914147][ T4984] binder: 4982:4984 ioctl c0305615 20000000 returned -22
06:07:21 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f0000000000)={0x0, {0x8, 0x5e8}})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
getpeername$packet(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x14)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)

[  679.015243][ T4986] debugfs: Directory 'vcpu0' with parent '4986-9' already present!
06:07:21 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r4 = dup2(r3, r2)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r4, 0x402c5342, &(0x7f0000000180)={0x0, 0xff, 0x1000, {0xffffffff, 0x6586}, 0xdb, 0x8})
r5 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r6, &(0x7f00000017c0), 0x218, 0x0)

[  679.125352][ T4993] binder: BINDER_SET_CONTEXT_MGR already set
[  679.155301][ T4993] binder: 4992:4993 ioctl 40046207 0 returned -16
[  679.183406][ T4994] binder: 4992:4994 ioctl c0305615 20000000 returned -22
06:07:22 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f0000000000)={0x0, {0x8, 0x5e8}})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
getpeername$packet(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x14)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)

[  679.260925][ T4996] binder: 4995:4996 ioctl c0306201 0 returned -14
[  679.316791][ T4996] binder: BINDER_SET_CONTEXT_MGR already set
[  679.343775][ T4996] binder: 4995:4996 ioctl 40046207 0 returned -16
[  679.392774][ T4996] binder: 4995:4996 ioctl 402c5342 20000180 returned -22
[  679.400198][ T5008] binder_alloc: 5002: binder_alloc_buf, no vma
[  679.450413][ T5011] binder: 5002:5011 ioctl c0305615 20000000 returned -22
06:07:22 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f0000000000)={0x0, {0x8, 0x5e8}})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
getpeername$packet(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x14)

[  679.657435][ T5014] binder_alloc: 5013: binder_alloc_buf, no vma
[  679.689152][ T5014] binder: 5013:5014 ioctl c0305615 20000000 returned -22
06:07:22 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f0000000000)={0x0, {0x8, 0x5e8}})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:22 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r4 = dup2(r3, r2)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
write$P9_RFSYNC(r4, &(0x7f0000000040)={0x7, 0x33, 0x1}, 0x7)
preadv(r1, &(0x7f00000017c0), 0x218, 0x0)

[  679.832651][ T5017] binder: BINDER_SET_CONTEXT_MGR already set
[  679.845464][ T5017] binder: 4995:5017 ioctl 40046207 0 returned -16
06:07:22 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
r4 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r5 = dup2(r4, r3)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$KVM_GET_DEVICE_ATTR(r5, 0x4018aee2, &(0x7f0000000100)={0x0, 0x2, 0x5, &(0x7f0000000040)=0xef})
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r6, &(0x7f00000017c0), 0x218, 0x0)

[  679.934168][ T5021] binder: BINDER_SET_CONTEXT_MGR already set
[  679.940184][ T5021] binder: 5019:5021 ioctl 40046207 0 returned -16
[  679.949310][ T5020] binder_alloc: 5018: binder_alloc_buf, no vma
[  679.967420][ T5020] binder: 5018:5020 ioctl c0305615 20000000 returned -22
06:07:22 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f0000000000)={0x0, {0x8, 0x5e8}})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})

[  680.022626][ T5025] binder: 5022:5025 ioctl c0306201 0 returned -14
[  680.039762][ T5025] binder: BINDER_SET_CONTEXT_MGR already set
[  680.056956][ T5025] binder: 5022:5025 ioctl 40046207 0 returned -16
[  680.089905][ T5025] binder: BINDER_SET_CONTEXT_MGR already set
[  680.117786][ T5025] binder: 5022:5025 ioctl 40046207 0 returned -16
[  680.144177][ T5030] binder: 5022:5030 ioctl 4018aee2 20000100 returned -22
[  680.144666][ T5029] binder_alloc: 5028: binder_alloc_buf, no vma
[  680.198872][ T5031] binder: 5028:5031 ioctl c0305615 20000000 returned -22
06:07:23 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f0000000000)={0x0, {0x8, 0x5e8}})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[  680.404429][ T5034] binder_alloc: 5033: binder_alloc_buf, no vma
[  680.426085][ T5034] binder: 5033:5034 ioctl c0305615 20000000 returned -22
06:07:23 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f0000000000)={0x0, {0x8, 0x5e8}})

[  680.576034][ T5025] binder: BINDER_SET_CONTEXT_MGR already set
[  680.590687][ T5025] binder: 5022:5025 ioctl 40046207 0 returned -16
[  680.599717][ T5037] binder: BINDER_SET_CONTEXT_MGR already set
[  680.633633][ T5037] binder: 5022:5037 ioctl 40046207 0 returned -16
[  680.638938][ T5039] binder: 5038:5039 ioctl c0305615 20000000 returned -22
[  680.649653][ T5025] binder: 5022:5025 ioctl 4018aee2 20000100 returned -22
06:07:23 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
dup2(r1, r0)
r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r4 = dup2(r3, r2)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000040))
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000100)='net/nf_conntrack\x00')
preadv(r5, &(0x7f00000017c0), 0x218, 0x0)

06:07:23 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:23 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000380))
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
write$P9_RXATTRWALK(r2, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x5}, 0xf)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000480)=ANY=[@ANYBLOB="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"])
fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000003c0)='security.ima\x00', &(0x7f0000000400)=@v1={0x2, "9d0599d3ecf867dd2fd3bd0e1f3f81e425"}, 0x12, 0x3)
preadv(r3, &(0x7f00000017c0), 0x218, 0x0)

[  680.844349][ T5045] binder: 5043:5045 ioctl c0306201 0 returned -14
[  680.862650][ T5045] binder: 5043:5045 ioctl 4008af30 20000380 returned -22
[  680.862942][ T5046] binder_alloc_new_buf_locked: 1 callbacks suppressed
[  680.862948][ T5046] binder_alloc: 5044: binder_alloc_buf, no vma
[  680.946784][ T5045] debugfs: Directory 'vcpu0' with parent '5045-8' already present!
06:07:23 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:23 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:24 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  681.460271][ T5059] binder: 5043:5059 ioctl 4008af30 20000380 returned -22
06:07:24 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  681.581783][ T5065] binder: BINDER_SET_CONTEXT_MGR already set
[  681.620148][ T5065] binder: 5041:5065 ioctl 40046207 0 returned -16
[  681.620245][ T5069] binder: BINDER_SET_CONTEXT_MGR already set
06:07:24 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  681.674358][ T5069] binder: 5041:5069 ioctl 40046207 0 returned -16
06:07:24 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:24 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:25 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:25 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:26 executing program 3:
r0 = pidfd_open(0x0, 0x0)
r1 = openat$nullb(0xffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x1, 0x0)
fcntl$dupfd(r0, 0x0, r1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r3, &(0x7f00000017c0), 0x218, 0x0)

06:07:26 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:26 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r3 = dup2(r2, r1)
ioctl$VIDIOC_G_PARM(r3, 0xc0cc5615, &(0x7f00000002c0)={0x6, @output={0x0, 0x0, {0x40, 0x2}, 0x1, 0xfffffffb}})
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0xc, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1c630840", @ANYRES64=0x0], 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x8, 0x0, 0x7, 0xa3, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x0, 0x7ca, 0x1, 0x6, r4})
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r5, &(0x7f00000017c0), 0x218, 0x0)

[  684.109491][ T5089] binder: 5086:5089 ioctl c0cc5615 200002c0 returned -22
[  684.156650][ T5089] binder: 5086:5089 ioctl c02064b2 20000100 returned -22
06:07:26 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:26 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r1, &(0x7f00000017c0), 0x218, 0x0)

06:07:27 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  684.481303][ T5100] binder: BINDER_SET_CONTEXT_MGR already set
[  684.512473][ T5100] binder: 5099:5100 ioctl 40046207 0 returned -16
[  684.583302][ T5089] binder: BINDER_SET_CONTEXT_MGR already set
[  684.596159][ T5089] binder: 5086:5089 ioctl 40046207 0 returned -16
[  684.608910][ T5102] binder: BINDER_SET_CONTEXT_MGR already set
[  684.610663][ T5092] binder: 5086:5092 ioctl c0cc5615 200002c0 returned -22
06:07:27 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r1 = dup2(0xffffffffffffffff, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  684.644948][ T5102] binder: 5086:5102 ioctl 40046207 0 returned -16
[  684.646382][ T5103] binder: 5086:5103 ioctl c02064b2 20000100 returned -22
06:07:27 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r1 = dup2(0xffffffffffffffff, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:27 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r1 = dup2(0xffffffffffffffff, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:27 executing program 3:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet(0x2, 0x80001, 0x84)
ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af14, &(0x7f0000000140)={0x2, 0x1})
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x19, &(0x7f0000000240)={r5}, 0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x40, 0x8200, 0x6, 0x0, r5}, &(0x7f0000000100)=0x10)
preadv(r2, &(0x7f00000017c0), 0x218, 0x0)

06:07:27 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$KDSETMODE(r0, 0x4b3a, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r1, &(0x7f00000017c0), 0x218, 0x0)

06:07:27 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:28 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:28 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:28 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r1 = dup2(r0, 0xffffffffffffffff)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:28 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r1 = dup2(r0, 0xffffffffffffffff)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:28 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000040)=""/10)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r2, &(0x7f00000017c0), 0x218, 0x0)

06:07:28 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r1 = dup2(r0, 0xffffffffffffffff)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  685.912763][ T5137] debugfs: Directory 'vcpu0' with parent '5137-5' already present!
06:07:28 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  686.237858][ T5148] binder_alloc: 5147: binder_alloc_buf, no vma
06:07:29 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:29 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r4 = dup2(r3, r2)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630451"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)='syzkaller\x00', 0x6, 0xb1, &(0x7f0000000180)=""/177, 0x41000, 0x6, [], 0x0, 0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x7}, 0x10, 0x0, r4}, 0x74)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r5 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000800001548ca04984100"], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r6, &(0x7f00000017c0), 0x218, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e21, 0x1000, @private2, 0x7}}, 0x8001, 0x9, 0x7fff, 0x5, 0x0, 0x3, 0x5}, &(0x7f0000000240)=0x9c)

[  686.398812][ T5150] binder_alloc: 5149: binder_alloc_buf, no vma
[  686.472110][ T5154] binder: 5152:5154 unknown command 1359241989
[  686.493479][ T5154] binder: 5152:5154 ioctl c0306201 20000280 returned -22
[  686.519271][ T5154] binder: 5152:5154 ioctl c0306201 0 returned -14
[  686.541121][ T5154] binder: BINDER_SET_CONTEXT_MGR already set
[  686.553960][ T5154] binder: 5152:5154 ioctl 40046207 0 returned -16
06:07:29 executing program 3:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = openat$zero(0xffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x4a8000, 0x0)
splice(r0, &(0x7f0000000040)=0x9, r2, &(0x7f0000000140)=0x800, 0x3, 0x6)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0), 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x1, 0x800)
r4 = openat$autofs(0xffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x600802, 0x0)
write$binfmt_misc(r4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0xe9)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
preadv(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/34, 0x22}, {&(0x7f0000000200)=""/44, 0x2c}, {&(0x7f0000000240)=""/126, 0x7e}], 0x3, 0xfffffffa)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r6, &(0x7f00000017c0), 0x218, 0x0)

[  686.805540][ T5156] binder: 5152:5156 ioctl c0306201 0 returned -14
[  686.829319][ T5154] binder: BINDER_SET_CONTEXT_MGR already set
[  686.840179][ T5154] binder: 5152:5154 ioctl 40046207 0 returned -16
06:07:29 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:29 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000056b8471c0924944641a49f09fc61bc10114349bdca9981adb63d50ba1d438a39bb602dc650f15"], 0x0, 0x0, 0x0})
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
r2 = mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYRESHEX=r2, @ANYRESOCT], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000ac0)={'filter\x00', 0x7, 0x4, 0x3b8, 0x2f0, 0x2f0, 0x0, 0x3d0, 0x3d0, 0x3d0, 0x4, &(0x7f0000000040), {[{{@arp={@dev={0xac, 0x14, 0x14, 0x1f}, @empty, 0x0, 0xff000000, 0x2, 0x4, {@mac=@dev={[], 0x1f}, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0xa2, 0x80, 0x7, 0x20, 0x8, 0xbbb, 'ip6tnl0\x00', 'bond_slave_1\x00', {}, {}, 0x0, 0x85}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @multicast1, 0x2}}}, {{@uncond, 0xbc, 0xec}, @unspec=@SECMARK={0x0, 'SECMARK\x00', 0x0, {0x1, 0x5, 'system_u:object_r:login_exec_t:s0\x00'}}}, {{@arp={@rand_addr=0x64010102, @remote, 0xff000000, 0xff000000, 0xe, 0xd, {@empty, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x7ff, 0xffff, 0x4, 0x7f, 0x0, 0x4, 'veth1_macvtap\x00', 'wg0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xbc, 0xe0}, @unspec=@AUDIT={0x24, 'AUDIT\x00'}}], {{[], 0xbc, 0xe0}, {0x24}}}}, 0xffffffffffffffd3)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0})
dup2(r3, r0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000002400)=""/4099, 0x1003}], 0x1, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0)

06:07:29 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="8b62ffed"], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r4 = openat$sequencer(0xffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0xfcf23dd9577d1356, 0x0)
setsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000100)=0x1000, 0x4)
preadv(r3, &(0x7f00000017c0), 0x218, 0x0)

[  686.939291][ T5159] binder_alloc: 5157: binder_alloc_buf, no vma
[  686.949341][ T5160] binder: 5158:5160 unknown command 808464432
06:07:29 executing program 1:
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  686.980730][ T5160] binder: 5158:5160 ioctl c0306201 20000200 returned -22
[  687.000809][ T5164] binder: 5158:5164 ioctl c0306201 0 returned -14
[  687.020572][ T5167] binder: 5163:5167 ioctl c0306201 0 returned -14
[  687.066012][ T5164] binder: 5158:5164 unknown command 808464432
[  687.097168][ T5164] binder: 5158:5164 ioctl c0306201 20000200 returned -22
06:07:29 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r3 = dup2(r2, r1)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000000040)={0x1ff, 0x576, 0x4d, 0xfffffff7, 0x10001, 0x4})
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r4, &(0x7f00000017c0), 0x218, 0x0)

[  687.117794][ T5175] binder: 5158:5175 ioctl c0306201 0 returned -14
06:07:29 executing program 1:
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  687.221788][ T5179] binder: BINDER_SET_CONTEXT_MGR already set
06:07:30 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00')
preadv(r1, &(0x7f00000000c0), 0x0, 0xa180)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000940)={'nat\x00', 0x2, [{}, {}]}, 0x44)
write$binfmt_aout(r2, &(0x7f0000000140)={{0xcc, 0x0, 0x7f, 0x28d, 0x14a, 0x200, 0x214, 0x7}, "c5ff9537458aa9e82ccd67d4b888acbc3a06f48de028f04f866925efb7430eaa72017b2d6ac056892f49cf3f6ef262c12ef68bdff691bf45dc69410b35cb51d635e432ae6e4839d4a80f7d4ddba18f9737d8c9266f7a070a3f235876d0c267e7c0d34057c7493ea8b8568cb4717902eec1c20d846cfe7776cd333349680eaad9c1da466e6734e4a6526d9b3669b78cb756b7c6fd0237450a1a", [[], [], [], [], [], [], []]}, 0x7b9)
r3 = openat$ttyprintk(0xffffff9c, &(0x7f00000000c0)='/dev/ttyprintk\x00', 0x10100, 0x0)
ioctl$TIOCGDEV(r3, 0x80045432, &(0x7f0000000100))
prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000900))

[  687.278759][ T5179] binder: 5178:5179 ioctl 40046207 0 returned -16
06:07:30 executing program 1:
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:30 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:30 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r0 = openat$mice(0xffffff9c, &(0x7f0000000180)='/dev/input/mice\x00', 0x0)
perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0x7, 0x7, 0x1, 0x7f, 0x0, 0x9, 0x2db44, 0x1c, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040), 0xf}, 0x92, 0x5, 0x1, 0x5, 0x6, 0x101, 0x5}, 0x0, 0xc, r0, 0x1)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r1, &(0x7f00000017c0), 0x218, 0x0)

06:07:30 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x803)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="ad01fa3e4b7d85cd7775e9928c07e7d51c4b406c63ac3373ee992f9adf3c62e1d60a911d886764551b40ce460e22336ed089b26267b9847eeeecf9784cea9946028cd29363952e407822cc7a43e1a4260fbc8ca69ba1fd20ee0e94094ce815e602d61c0f70a5b8a19c91ac0c1f336d007925bbf84d8b8faadad3679fa560ebed2644863559208b8d66f8f631fc1cc0fcc7af7fed0aea4a9ab5e7c4e69a2ca500e1548c3cf014788b3e882776f4b08e3b8b8269ef85d85a26c804e9cb9dcfea442ff63d1eae11f89a"], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r3, &(0x7f00000017c0), 0x218, 0x0)

[  687.630569][ T5179] binder: BINDER_SET_CONTEXT_MGR already set
[  687.640130][ T5179] binder: 5178:5179 ioctl 40046207 0 returned -16
[  687.652395][ T5198] binder: BINDER_SET_CONTEXT_MGR already set
[  687.674561][ T5198] binder: 5178:5198 ioctl 40046207 0 returned -16
[  687.695704][ T5179] binder: 5178:5179 ioctl 401845c0 20000040 returned -22
[  687.711865][ T5204] binder: 5202:5204 ioctl c0306201 0 returned -14
06:07:30 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:30 executing program 3:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000040))
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
r4 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r5 = dup2(r4, r3)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
getsockopt$sock_int(r2, 0x1, 0x26, &(0x7f0000000140), &(0x7f0000000180)=0x4)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r5, 0xc0305615, &(0x7f0000000100)={0x0, {0x0, 0x100}})
preadv(r2, &(0x7f0000000140), 0x0, 0x0)

[  687.917538][ T5211] binder: BINDER_SET_CONTEXT_MGR already set
[  687.951998][ T5211] binder: 5208:5211 ioctl 40046207 0 returned -16
06:07:30 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  688.022470][ T5211] binder: BINDER_SET_CONTEXT_MGR already set
[  688.056580][ T5211] binder: 5208:5211 ioctl 40046207 0 returned -16
[  688.056583][ T5214] binder: BINDER_SET_CONTEXT_MGR already set
[  688.056599][ T5214] binder: 5208:5214 ioctl 40046207 0 returned -16
[  688.083803][ T5216] binder: 5208:5216 ioctl c0305615 20000100 returned -22
06:07:30 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:30 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0)

06:07:31 executing program 3:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r4 = dup2(r3, r2)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
fstatfs(r5, &(0x7f0000000140)=""/104)
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$SNDCTL_DSP_GETOSPACE(r4, 0x8010500c, &(0x7f0000000040))
preadv(r1, &(0x7f00000017c0), 0x218, 0x0)

06:07:31 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:31 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="03f1b373"], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r3, &(0x7f00000017c0), 0x218, 0x0)

06:07:31 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r2 = dup2(r1, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x2000000000000200, 0x800)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r4 = socket$inet6(0xa, 0x3, 0x9)
r5 = socket(0x11, 0x800000003, 0x0)
bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80)
getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000340)={@dev, 0x0, r6})
ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0106434, &(0x7f0000000040)={0x2de, <r7=>0x0, 0x1, 0x8})
ioctl$DRM_IOCTL_AGP_UNBIND(r3, 0x40086437, &(0x7f0000000100)={r7, 0x5})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'erspan0\x00', r6})
preadv(r3, &(0x7f00000017c0), 0x218, 0x0)

[  688.468267][ T5228] binder: BINDER_SET_CONTEXT_MGR already set
[  688.494904][ T5228] binder: 5226:5228 ioctl 40046207 0 returned -16
06:07:31 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  688.566923][ T5228] binder: BINDER_SET_CONTEXT_MGR already set
[  688.599251][ T5237] binder: BINDER_SET_CONTEXT_MGR already set
[  688.599489][ T5228] binder: 5226:5228 ioctl 40046207 0 returned -16
[  688.621045][ T5240] binder: 5226:5240 ioctl 8010500c 20000040 returned -22
[  688.645953][ T5237] binder: 5226:5237 ioctl 40046207 0 returned -16
[  688.680810][ T5244] binder: 5241:5244 ioctl c0306201 0 returned -14
06:07:31 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4092, 0xfffffffffffffeb4}], 0x3d, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x218, 0x0)

06:07:31 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:31 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r1, &(0x7f00000017c0), 0x0, 0x10)

[  688.877856][ T5251] binder: 5249:5251 ioctl c0306201 0 returned -14
06:07:31 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:31 executing program 3:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
fsetxattr$security_ima(r0, &(0x7f0000000180)='security.ima\x00', &(0x7f00000001c0)=@v1={0x2, "dcf267c1"}, 0x5, 0x2)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r2 = openat$null(0xffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x20000, 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000000100)='ppp0systemsecurity!nodev\x00', &(0x7f0000000140)='./file0\x00', r0)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
r4 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r5 = dup2(r4, r3)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f0000000400)=""/31)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
write$UHID_CREATE2(r5, &(0x7f0000000200)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xdf, 0x20, 0xfff, 0x2, 0x5, 0x4, "9e0a8b4b437fbdf9949bc167024dc88b676a67d6cbd810f4614954aa66615d91b945c4dd383ac7da7bb20ba8d7d6c4f2e7c375a7a3b0ffdd94dd0c357109f981760181dc7077e0e7c35c9f177cb637366a64c0ca3a6bc9b610725eff3e5f5f1d6a88860cdce70fccaa46b9541e4c44f9784499446f7aaac503a0e37e64fec92606f92e199454441d7996793481d785db141fb63b6e74d7ce7831448db6f36c4a25fa6c1ba29a70c81bfa1313a13fd6a74c381460e8d51f41c298f956224ca3b0df8767221b1a9bb3c3b7363dbd7458b5d2bc0a247d3ae0ac4995484d261d0d"}}, 0x1f7)
preadv(r3, &(0x7f00000017c0), 0x0, 0x0)

06:07:31 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$VIDIOC_G_CROP(r2, 0xc014563b, &(0x7f0000000040)={0x8, {0x2, 0x0, 0xffe00000, 0x7}})
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r3, &(0x7f00000017c0), 0x218, 0x0)

[  689.037438][ T5259] binder: 5258:5259 ioctl c0306201 0 returned -14
[  689.050769][ T5261] binder: BINDER_SET_CONTEXT_MGR already set
06:07:31 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r1 = dup2(r0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r2, &(0x7f00000017c0), 0x218, 0x0)

[  689.099192][ T5261] binder: 5260:5261 ioctl 40046207 0 returned -16
06:07:31 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:31 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000240)=ANY=[], 0xfffffffffffffe2b, 0x0, 0x0})
r2 = dup2(r1, r0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440", @ANYRES32], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
openat$cgroup_subtree(r2, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0)
r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r4 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0)
dup2(r4, r3)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r5, &(0x7f00000017c0), 0x218, 0x0)

06:07:32 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4098, 0x1002}], 0x1, 0x5)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r1, &(0x7f00000017c0), 0x218, 0x0)

[  689.230330][ T5267] binder: 5265:5267 ioctl c014563b 20000040 returned -22
[  689.307858][ T5272] binder: 5269:5272 ioctl c0306201 0 returned -14
[  689.323825][ T5273] binder: 5270:5273 unknown command 0
06:07:32 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  689.355992][ T5273] binder: 5270:5273 ioctl c0306201 20000200 returned -22
[  689.381683][ T5277] binder: BINDER_SET_CONTEXT_MGR already set
[  689.427383][ T5273] binder: 5270:5273 ioctl c0306201 0 returned -14
[  689.428213][ T5277] binder: 5270:5277 ioctl 40046207 0 returned -16
[  689.498010][ T5279] binder: 5278:5279 ioctl c0306201 20000200 returned -14
[  689.544619][ T5279] binder: BINDER_SET_CONTEXT_MGR already set
[  689.580727][ T5279] binder: 5278:5279 ioctl 40046207 0 returned -16
06:07:32 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  689.880625][ T5284] binder: 5283:5284 ioctl c0306201 20000200 returned -14
06:07:32 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  690.002055][ T5288] binder: BINDER_SET_CONTEXT_MGR already set
[  690.049000][ T5288] binder: 5265:5288 ioctl 40046207 0 returned -16
[  690.052168][ T5289] binder: 5265:5289 ioctl c014563b 20000040 returned -22
[  690.056058][ T5287] binder: 5265:5287 unknown command 8
[  690.119907][ T5287] binder: 5265:5287 ioctl c0306201 20000280 returned -22
[  690.137813][ T5277] binder: BINDER_SET_CONTEXT_MGR already set
[  690.144883][ T5277] binder: 5270:5277 ioctl 40046207 0 returned -16
[  690.155494][ T5297] binder: 5295:5297 ioctl c0306201 20000200 returned -14
06:07:33 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:33 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r3 = dup2(r2, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00')
sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r4, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x2a}}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0={0xfc, 0x0, [], 0x1}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x2000000)
r5 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r6, &(0x7f00000017c0), 0x218, 0x0)

06:07:33 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x218, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$userio(0xffffff9c, &(0x7f0000000100)='/dev/userio\x00', 0x480000, 0x0)
r2 = gettid()
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r3, &(0x7f0000000a00)=[{0x0}], 0x1, 0x0)
perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x81, 0x40, 0x5, 0x0, 0x0, 0x100, 0x83010, 0xc, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x226, 0x2, @perf_config_ext={0x40, 0x68be}, 0x204, 0x80000001, 0x9f7, 0x1, 0x401, 0x8, 0xbff}, r2, 0xe, r3, 0x8)
fcntl$setownex(r1, 0xf, &(0x7f0000000040)={0x2, r2})

06:07:33 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r4 = dup2(r3, r2)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r6, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7ff}}}, 0x24}}, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r6, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20004040}, 0x8000)
preadv(r1, &(0x7f00000017c0), 0x218, 0x0)

[  690.347592][ T5301] binder: 5300:5301 unknown command 0
[  690.374532][ T5303] binder: 5302:5303 ioctl c0306201 0 returned -14
[  690.374726][ T5301] binder: 5300:5301 ioctl c0306201 20000200 returned -22
06:07:33 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  690.467864][ T5308] binder: BINDER_SET_CONTEXT_MGR already set
[  690.520087][ T5308] binder: 5307:5308 ioctl 40046207 0 returned -16
[  690.631705][ T5315] binder: 5314:5315 unknown command 0
[  690.638569][ T5315] binder: 5314:5315 ioctl c0306201 20000200 returned -22
06:07:33 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:33 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
openat$nvram(0xffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x101901, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r3 = dup2(r2, r1)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='?\x00\x00\x00'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r5 = dup2(r0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r6, &(0x7f00000017c0), 0x218, 0x0)

[  690.867375][ T5318] binder: 5316:5318 unknown command 63
[  690.883245][ T5318] binder: 5316:5318 ioctl c0306201 20000280 returned -22
[  690.896354][ T5319] binder: 5317:5319 unknown command 0
[  690.909103][ T5319] binder: 5317:5319 ioctl c0306201 20000200 returned -22
[  690.931199][ T5318] binder: BINDER_SET_CONTEXT_MGR already set
[  690.953022][ T5318] binder: 5316:5318 ioctl 40046207 0 returned -16
06:07:33 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  691.220331][ T5326] binder: 5323:5326 unknown command 0
[  691.249663][ T5326] binder: 5323:5326 ioctl c0306201 20000200 returned -22
[  691.298808][ T5338] binder: BINDER_SET_CONTEXT_MGR already set
[  691.332157][ T5338] binder: 5323:5338 ioctl 40046207 0 returned -16
06:07:34 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:34 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="df9f197e9301593a4642443df1630000"], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r3, &(0x7f0000001240)=[{&(0x7f0000000180)=""/143, 0x8f}, {&(0x7f0000000040)=""/18, 0x12}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/135, 0x87}, {&(0x7f0000000100)=""/62, 0x3e}, {&(0x7f0000002400)=""/241, 0xf1}], 0x6, 0x0)

[  691.610331][ T5342] binder: 5341:5342 unknown command 0
[  691.611968][ T5346] binder: 5343:5346 ioctl c0306201 0 returned -14
[  691.619764][ T5342] binder: 5341:5342 ioctl c0306201 20000200 returned -22
[  691.672484][ T5318] binder: BINDER_SET_CONTEXT_MGR already set
[  691.678724][ T5347] binder: 5316:5347 unknown command 63
[  691.690675][ T5318] binder: 5316:5318 ioctl 40046207 0 returned -16
[  691.718063][ T5347] binder: 5316:5347 ioctl c0306201 20000280 returned -22
06:07:34 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="0003ffa7"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="edfdd1da9cdf1300889de5af3bef4fdb28441b383a6f4e30ab74f8f74e9db7a4aa010100000000000010080f7f10b32d38a7eb092097d3487fd453f27dae5556fa819147aa1758599136ed331bbddf0d381b2d17ac020bd68f61f95f83a97603ab6744db98d1f296735f86be53ec63b44942c508db47462e128eae47d8b77f18234735247c9e84ecd02807236f5811638bceebbe19c6eea18d2d622a914350b4db8f46827d87dc201f891c2ef7e85112089355f1f3033da575163f5faeeb03"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040)=0x6, &(0x7f0000000080)=0x4)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r5, &(0x7f00000017c0), 0x218, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, 0xb, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_SKBMARK={0xc}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={[], [], @multicast2}}}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xff}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x24004010)

06:07:34 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:34 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r2, &(0x7f00000017c0), 0x218, 0x0)

[  691.924425][ T5355] binder: 5352:5355 unknown command 0
[  691.930315][ T5354] binder: 5351:5354 unknown command -1476459776
[  691.944681][ T5355] binder: 5352:5355 ioctl c0306201 20000200 returned -22
[  691.949742][ T5354] binder: 5351:5354 ioctl c0306201 20000200 returned -22
[  692.011808][ T5354] binder: 5351:5354 unknown command -623772179
[  692.017996][ T5354] binder: 5351:5354 ioctl c0306201 20000280 returned -22
06:07:34 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="0463"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  692.193117][ T5362] binder: 5361:5362 unknown command 25348
[  692.220236][ T5362] binder: 5361:5362 ioctl c0306201 20000200 returned -22
06:07:35 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="0463"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  692.433682][ T5366] binder: 5364:5366 unknown command 25348
[  692.463767][ T5366] binder: 5364:5366 ioctl c0306201 20000200 returned -22
[  692.487535][ T5369] binder: BINDER_SET_CONTEXT_MGR already set
[  692.518619][ T5369] binder: 5364:5369 ioctl 40046207 0 returned -16
[  692.542913][ T5359] binder: BINDER_SET_CONTEXT_MGR already set
[  692.587671][ T5359] binder: 5351:5359 ioctl 40046207 0 returned -16
[  692.613199][ T5370] binder: 5351:5370 unknown command -1476459776
06:07:35 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="0463"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  692.641880][ T5354] binder: BINDER_SET_CONTEXT_MGR already set
[  692.648108][ T5359] binder: 5351:5359 unknown command -623772179
[  692.654400][ T5370] binder: 5351:5370 ioctl c0306201 20000200 returned -22
[  692.664068][ T5354] binder: 5351:5354 ioctl 40046207 0 returned -16
[  692.672013][ T5359] binder: 5351:5359 ioctl c0306201 20000280 returned -22
[  692.722546][ T5374] binder: 5372:5374 unknown command 25348
[  692.728291][ T5374] binder: 5372:5374 ioctl c0306201 20000200 returned -22
06:07:35 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
io_submit(0x0, 0x6, &(0x7f00000006c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x7f, 0xffffffffffffffff, &(0x7f0000000100)="cef662c53e9b27b9bdfffb65ef2d1ac4353fa37be7382e600b85b9ce59a7735c5d9ca6917718e1af0e0bb11ddeea2bdc913a38ee260fb0c31aa3d621730a884bbbdeae195860c9117a8fc340e9444a273450b3efae1fd14a572a02a8d71dc2f76e45b50b776647f3f88a501179f70074abe6eab4a43e567ed5f2217cabd93fe74034d414da981e755434289ea5c4be828cefb9c3095072ebe4d68b6154d85d80e57088fe781ec5a0e40c9c17bd121446d0fa8346c0ee5562b124e4", 0xbb, 0x1}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x6, 0x6, 0xffffffffffffffff, &(0x7f0000000240)="d5bd85edc97f012e296ed765d0399adb4d3e97eb22c256637f6353ff57a0e6e3c88dcf52a4fae34631ba94a005ca1f506786b3172d1f3db30b6c9ec180a55301389df9fdf6bea9db78f8", 0x4a, 0x20, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x5, 0x7fff, 0xffffffffffffffff, &(0x7f00000003c0)="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", 0xfd, 0xffffffffffff0001, 0x0, 0x3}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x6, 0x4, 0xffffffffffffffff, &(0x7f0000000500)="03a08d0c6bec002aa26e42ceb141dfde7cf066ded0d6ed241a4593a9419375e128ce14a490e097c717a587ec3c01dcc20acfa416b0482028ca018eb51ce61bef29e220915d990192e2d97cc4f23d406ecb1f04c7d7", 0x55, 0x3, 0x0, 0x3}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x5bb3, 0xffffffffffffffff, &(0x7f00000005c0)="6c61148f743a0d4925cb7b1ec525ffc68bcd6594024ff54615456caf", 0x1c, 0x80000001, 0x0, 0x1}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x7, 0x8, r4, &(0x7f0000000640)="41e07448820cf2efcddc958072db214a106b314eb912386b0f11c0a8d5", 0x1d, 0x0, 0x0, 0x2, r0}])
preadv(r1, &(0x7f00000017c0), 0x218, 0x0)

06:07:35 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="046304"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  692.967802][ T5381] binder: 5380:5381 unknown command 287492
[  693.005713][ T5381] binder: 5380:5381 ioctl c0306201 20000200 returned -22
[  693.029647][ T5383] binder: BINDER_SET_CONTEXT_MGR already set
06:07:35 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x800)
r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="2f292be0"], 0x0, 0x0, 0x0})
r4 = dup2(r3, r2)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x9, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x18}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x9}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000041)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r5, &(0x7f00000017c0), 0x218, 0x0)

[  693.081543][ T5383] binder: 5380:5383 ioctl 40046207 0 returned -16
06:07:35 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="046304"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:35 executing program 3:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2)
r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r4, &(0x7f00000017c0), 0x218, 0x0)

[  693.195435][ T5386] binder: 5385:5386 unknown command -534042321
[  693.220443][ T5386] binder: 5385:5386 ioctl c0306201 20000200 returned -22
[  693.251762][ T5392] binder: 5390:5392 unknown command 287492
[  693.281616][ T5392] binder: 5390:5392 ioctl c0306201 20000200 returned -22
06:07:36 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="046304"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  693.556832][ T5402] binder: 5401:5402 unknown command 287492
[  693.596419][ T5402] binder: 5401:5402 ioctl c0306201 20000200 returned -22
06:07:36 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x68, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/57, 0x39, 0x2, 0x5}, @flat=@weak_binder={0x77622a85, 0x1000, 0x1}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}}, @exit_looper, @dead_binder_done, @release, @exit_looper, @release={0x40046306, 0x2}], 0x80, 0x0, &(0x7f0000000240)="088ed483bfad83c02fe82b112a64387b85e6caaf3b5c699223d04818dd430730b028fdd7494cc227f1d0fd8f7ea987a083d865713dd8edb27e7e3a304619008eb2ee3311f8d739266514f7acdcebf4da998c5c190c13737bcbbbcd74b9afa9c5b36db89c5bcdd4b2e76ad13d66ccbe05a330835dd88a9151037a75107ec5d2ea"})
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r3, &(0x7f00000017c0), 0x218, 0x0)

[  693.612332][ T5403] binder: BINDER_SET_CONTEXT_MGR already set
[  693.639403][ T5403] binder: 5401:5403 ioctl 40046207 0 returned -16
06:07:36 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(0xffffffffffffffff, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  693.773816][ T5393] binder: BINDER_SET_CONTEXT_MGR already set
[  693.786981][ T5393] binder: 5385:5393 ioctl 40046207 0 returned -16
06:07:36 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r1 = dup2(r0, 0xffffffffffffffff)
ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000040)=0x8231)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r3 = socket$inet6_dccp(0xa, 0x6, 0x0)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x8, @private0}, 0x1c)
preadv(r2, &(0x7f00000017c0), 0x218, 0x0)

06:07:36 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x218, 0x0)

06:07:36 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(0xffffffffffffffff, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:36 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(0xffffffffffffffff, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:37 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00')
sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, r1, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffff973}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x400c0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x16}, &(0x7f0000000200)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
timer_gettime(r2, &(0x7f0000000040))
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r3, &(0x7f00000017c0), 0x218, 0x0)

06:07:37 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, 0xffffffffffffffff)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:37 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r1 = dup2(r0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x3c1, 0x3, 0x268, 0xc8, 0xc8, 0xc8, 0x0, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa4, 0xc8}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'bond_slave_1\x00', 'veth1_to_bond\x00'}, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34, 'SET\x00'}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x2c4)
sendto$inet6(r2, &(0x7f0000000000)="50a478dd7f78cf3ba44981d95aa43c4d6be2e03ffc7dae4993f6f51852c639e5e0081b628d722440333e5d63f891a0208bfb23fdaa836ef8f729affdecc7f6a6f83e917266bc989e874e9ac2e462c6a2b9456f762b05dec88ffb14d1955e06a8c89412d0d43661f4", 0x68, 0x84, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @private1={0xfc, 0x1, [], 0x1}, 0x4}, 0x1c)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r3, &(0x7f00000017c0), 0x218, 0x0)

06:07:37 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, 0xffffffffffffffff)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:37 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r1, &(0x7f00000017c0), 0x218, 0x0)
r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r4 = dup2(r3, r2)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$UI_SET_ABSBIT(r4, 0x40045567, 0x4)

[  694.631947][ T5439] xt_TCPMSS: Only works on TCP SYN packets
06:07:37 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, 0xffffffffffffffff)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:37 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0})
r3 = dup2(r2, r1)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563044f"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
sendmsg$AUDIT_TTY_GET(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f8, 0x1, 0x70bd2c, 0x25dfdbfe, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40011}, 0x20000000)
r4 = dup2(r0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
ftruncate(0xffffffffffffffff, 0x1)
r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/config\x00')
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)=0x5)
preadv(r5, &(0x7f00000017c0), 0x0, 0x7fff)

[  694.826471][ T5445] binder: BINDER_SET_CONTEXT_MGR already set
[  694.845994][ T5445] binder: 5442:5445 ioctl 40046207 0 returned -16
06:07:37 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  694.934887][ T5450] binder: 5449:5450 unknown command -1421516028
[  694.973447][ T5450] binder: 5449:5450 ioctl c0306201 20000200 returned -22
[  694.993666][ T5451] binder: BINDER_SET_CONTEXT_MGR already set
[  695.025329][ T5451] binder: 5449:5451 ioctl 40046207 0 returned -16
[  695.041161][ T5450] binder: 5449:5450 unknown command 1325687557
[  695.047616][ T5450] binder: 5449:5450 ioctl c0306201 20000280 returned -22
06:07:37 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  695.114947][ T5450] binder: BINDER_SET_CONTEXT_MGR already set
[  695.121501][ T5451] binder: 5449:5451 unknown command 1325687557
[  695.133402][ T5451] binder: 5449:5451 ioctl c0306201 20000280 returned -22
[  695.144420][ T5450] binder: 5449:5450 ioctl 40046207 0 returned -16
06:07:38 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r1 = dup2(r0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r4 = dup2(r3, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="5282363bfd3c691ccd4014e0ff71def378ee04778529017a15fe6c64073fcdd5c07f26b228e0e27eca26da4dce1453eaa529120261c9654509ed4e90dce60705ae148933df294303a201f72a05a7cbf1f61dc72f8e89aa3ddd6e45b31f2a2de27eb1e4f159f4f58b8f90fdafa0c7d0f7bd947a1fa9740a270cfdc23f8cc5d0"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)=0xe2)
preadv(r2, &(0x7f00000017c0), 0x218, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x3c1, 0x3, 0x268, 0xc8, 0xc8, 0xc8, 0x0, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa4, 0xc8}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'bond_slave_1\x00', 'veth1_to_bond\x00'}, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34, 'SET\x00'}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x2c4)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000000)={0x0, 'veth1_to_bridge\x00', {0x1}, 0x7})

06:07:38 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:38 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r1, &(0x7f00000017c0), 0x218, 0x0)
r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r4 = dup2(r3, r2)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000040)={0x6, {0x7450, 0x0, 0x8, 0x10000, 0x25d8d1d2, 0x1}})

[  695.410078][ T5466] xt_TCPMSS: Only works on TCP SYN packets
[  695.444748][ T5467] binder: BINDER_SET_CONTEXT_MGR already set
[  695.489543][ T5467] binder: 5462:5467 ioctl 40046207 0 returned -16
[  695.810376][ T5471] xt_TCPMSS: Only works on TCP SYN packets
06:07:40 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x218, 0x0)
ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000100)={0x3, 0x5e, "5d441c852308630b50b3a2f92635e0698669dcf2dc0f7c91a9c45b5e9bc74d282f133915b9fa78daeb14fa989a21734fcf25ee999568a96d05ab901dafbbb8cceb36dd021905f86f4bb5d7beefbdb413f0a0aa62bc03b9ab02ff0a60188e"})

06:07:40 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:40 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x800)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r1 = dup2(r0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r3 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x5, 0x2)
ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f0000000040)={0x18808, 0xf000, 0xfffffffb, 0x5, 0xffffffff})
preadv(r2, &(0x7f00000017c0), 0x218, 0x0)

06:07:40 executing program 3:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r2, &(0x7f00000017c0), 0x218, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x82, &(0x7f00000001c0), 0x8)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000000000)='y', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000040)=0x8)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x65e}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r2}, {0x8}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8}, {0x8}, {0x8, 0x1, r0}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x19, &(0x7f0000000240)={r6}, 0x8)
getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000040)={r6, 0x7}, &(0x7f0000000100)=0x8)

06:07:40 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  697.716917][ T5487] binder: BINDER_SET_CONTEXT_MGR already set
[  697.744592][ T5487] binder: 5486:5487 ioctl 40046207 0 returned -16
06:07:40 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  697.922152][ T5490] binder: BINDER_SET_CONTEXT_MGR already set
[  697.948410][ T5490] binder: 5489:5490 ioctl 40046207 0 returned -16
06:07:40 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:40 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r1 = dup2(r0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r3 = dup2(r2, 0xffffffffffffffff)
openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/slabinfo\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
socket$inet6_dccp(0xa, 0x6, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000000))
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r4, &(0x7f00000017c0), 0x218, 0x0)

[  698.158348][ T5497] binder: 5495:5497 ioctl c0306201 0 returned -14
06:07:41 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:41 executing program 3:
r0 = open(&(0x7f0000000000)='./file0\x00', 0x4008040, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0)
pread64(r1, 0x0, 0x0, 0x0)
fcntl$getflags(r0, 0x401)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x6, 0x5e, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4c, 0x1, 0x1, 0x40, 0x50, 0x5, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x2, 0x6, 0x0, 0x20, {{0x6, 0x24, 0x6, 0x0, 0x0, 'H'}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x7, 0x5, 0xce}, [@acm={0x4, 0x24, 0x2, 0xc}, @acm={0x4}, @acm={0x4, 0x24, 0x2, 0x8}, @acm={0x4, 0x24, 0x2, 0x2}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0x0, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x0, 0x1f, 0x9}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x40, 0xff, 0x82, 0x20, 0x5}, 0x52, &(0x7f00000001c0)={0x5, 0xf, 0x52, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "228187d6deb4c2fba76dbe50e8f39b40"}, @ss_container_id={0x14, 0x10, 0x4, 0x49, "d882cac8b300c6dcc76e73226d2d1ff5"}, @wireless={0xb, 0x10, 0x1, 0x0, 0x49, 0x1e, 0xfb, 0x3ff, 0x5}, @ssp_cap={0x10, 0x10, 0xa, 0x20, 0x1, 0x800, 0xf00f, 0x7, [0x3f30]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x0, 0x0, 0xffff}]}, 0x2, [{0x5c, &(0x7f0000000240)=@string={0x5c, 0x3, "f3d45bc152aa253a83b8ed179dad517127b25319c3cc192e8fabfc47328fc14b0a5459e207f47d2fa1297721635e2136ee284081b5360814ce5d2553d0462a60412c58d7077992655d015f449dc030e32c4ef7a569db0b05c86a"}}, {0xda, &(0x7f00000002c0)=@string={0xda, 0x3, "b2a41f36e46ef63e720e033fda717f4956ee53214d1171b06d90f25f45bb70af20b2344f1a3ac46baa0034bf4091b02993f543d093c02459689401173e85f03fa7f9ff6c9c0527ab20d9b845a7e3034ab520b14453a015aff168995ff1bca70fa3433e40621ace78f6fdb8797e2fbf9d5c2aa5cbf944acf6e274f3e971acc0e1ad8dd1e37253bc76369ffa4cf579d56bef74892e5a23d7d3fe42175f5381e7dc9d9e1d251aac7b7621f9d406f52dcc8e79350ef286ec8254cbb675e357fd3d891e9e55239c41c6ea6f19941e4af926b09d82f10f7342f1ca"}}]})
r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='projid_map\x00')
preadv(r3, &(0x7f00000017c0), 0x218, 0x0)
ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f0000000040)={'vlan0\x00', {0x2, 0x4e24, @loopback}})

06:07:41 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f0000000040), 0x0, 0x0)

[  698.335233][ T5500] binder: 5499:5500 ioctl c0306201 0 returned -14
06:07:41 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:41 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r3 = dup2(r2, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00')
sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r4, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x2a}}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0={0xfc, 0x0, [], 0x1}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x2000000)
r5 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r6, &(0x7f00000017c0), 0x218, 0x0)

06:07:41 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x3c1, 0x3, 0x268, 0xc8, 0xc8, 0xc8, 0x0, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa4, 0xc8}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'bond_slave_1\x00', 'veth1_to_bond\x00'}, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34, 'SET\x00'}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x2c4)
recvfrom$inet6(r0, &(0x7f0000000200)=""/4096, 0x1000, 0xc0030000, &(0x7f0000001200)={0xa, 0x4e24, 0xff, @private0={0xfc, 0x0, [], 0x1}, 0x200}, 0x1c)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000001240)=@srh={0x2c, 0x2, 0x4, 0x1, 0x40, 0x64, 0x0, [@private0]}, 0x18)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r1, &(0x7f00000017c0), 0x218, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000040)='/dev/binder#\x00', &(0x7f0000000100)="f29079c402f63a8f978e5d240248e7c9ee309c7d96f81904431363a56241a35ffc06e30230f0857c5e6c56b69f9a1da3781d1b58ca755253bb6ea3f6916c941efedf4c9c556c4f3ab45307b810c5ea92e246bc4b3925da998a535f00d4ae90420daf3290fa84f86110434368579a07805dc1afe7a8436f2b24eed03506f3cc9beb1cb52328d7143cce08b3e1ef15ac7e4c657ad867be58fabb2615042f318564eeeab995c31fca3bb9709154e250a5b34b4ce5fba37c63a7691d4790bb617b6f25b008", 0xc3)

[  698.531693][ T5510] binder: 5509:5510 ioctl c0306201 0 returned -14
[  698.565396][ T5512] binder: 5511:5512 ioctl c0306201 0 returned -14
06:07:41 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  698.596634][ T5514] xt_TCPMSS: Only works on TCP SYN packets
[  698.736910][ T5518] binder: 5516:5518 ioctl c0306201 20000280 returned -14
06:07:41 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  698.929673][ T5521] binder: BINDER_SET_CONTEXT_MGR already set
[  698.954848][ T5521] binder: 5520:5521 ioctl 40046207 0 returned -16
[  698.983341][ T5524] binder: 5520:5524 ioctl c0306201 20000280 returned -14
06:07:41 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:41 executing program 3:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$VIDIOC_DQBUF(r0, 0xc0445611, &(0x7f0000000140)={0x0, 0x8, 0x4, 0x2, 0x50, {0x0, 0xea60}, {0x2, 0x2, 0x9, 0xff, 0x33, 0x3f, "838e9bd5"}, 0xfffffff7, 0x2, @planes=&(0x7f0000000100)={0xa172, 0xf5f, @mem_offset=0x2, 0x6}, 0x8, 0x0, r2})
r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
r4 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xff, 0xa402)
r6 = epoll_create(0x3)
ioctl$FICLONE(r6, 0x40049409, r5)
preadv(r5, &(0x7f00000017c0), 0x218, 0x0)

06:07:42 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f0000000000)={0x0, {0x8, 0x5e8}})

[  699.234350][ T5527] debugfs: Directory 'vcpu0' with parent '5527-6' already present!
[  699.263103][ T5527] binder: BINDER_SET_CONTEXT_MGR already set
[  699.289246][ T5527] binder: 5526:5527 ioctl 40046207 0 returned -16
06:07:42 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, r0)
syz_emit_ethernet(0x2a, &(0x7f0000000300)={@multicast, @random="dbda34c5a36f", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={0xac, 0x14, 0x14, 0x16}, @multicast, @multicast1}}}}, 0x0)
r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
r3 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, r2)
keyctl$KEYCTL_MOVE(0x1e, r2, r2, r3, 0x0)
r4 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
r5 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, r4)
keyctl$KEYCTL_MOVE(0x1e, r4, r4, r5, 0x0)
keyctl$KEYCTL_MOVE(0x1e, r4, r0, r2, 0x0)
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000040)={r1, 0xab, 0x9a}, &(0x7f0000000340)=ANY=[@ANYBLOB="656e633d706b63733120686173683d7368613338340000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000061855a0c1f26743865cdb19258c5fae5de730cb031a1e728238f2b7cad01bb22602aa5e31ead57bb470e73866e9a144d020986b0e42dbd"], &(0x7f0000000180)="760ea5f9224fda89ed223c2376fece60c825dd31f7afe8cd82870e9af41be243a0165052b49efc2adf1fce4762ee22998452d0db5e546a5b53d12770f1af2466bceb621bc02931d4a28e247013968ff78abaf787baaacca22a66fa67fbf1d92056218a626340680347438c7232d2cbcf16dd75a6832476371b26014f781a91d754c227180e6be61e7a7274584125e52c6bfc8593c55e8ac151f0b7e98204214fddf21dca2ec2509fae1014", &(0x7f0000000240)=""/154)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r6, &(0x7f00000017c0), 0x218, 0x0)

06:07:42 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x4)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r1, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/36, 0x24}, {&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/137, 0x89}, {&(0x7f0000000400)=""/167, 0xb2}, {&(0x7f0000000300)=""/140, 0x8c}], 0x2000000000000250, 0x0)

[  699.552784][ T5538] binder_alloc: 5535: binder_alloc_buf, no vma
[  699.581987][ T5538] binder: 5535:5538 ioctl c0305615 20000000 returned -22
[  699.606363][ T5543] binder: 5540:5543 ioctl c0306201 20000280 returned -14
06:07:42 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f0000000000)={0x0, {0x8, 0x5e8}})

06:07:42 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:42 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x3c1, 0x3, 0x268, 0xc8, 0xc8, 0xc8, 0x0, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa4, 0xc8}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'bond_slave_1\x00', 'veth1_to_bond\x00'}, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34, 'SET\x00'}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x2c4)
r1 = socket$inet6(0xa, 0x3, 0x9)
r2 = socket(0x2c, 0x4, 0xfffb)
bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000340)={@dev, 0x0, r3})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x3c1, 0x3, 0x268, 0xc8, 0xc8, 0xc8, 0x0, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa4, 0xc8}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'bond_slave_1\x00', 'veth1_to_bond\x00'}, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34, 'SET\x00'}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x2c4)
setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000040)={@mcast2, r3}, 0x14)
r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
openat$rfkill(0xffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x16040, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
fcntl$getown(0xffffffffffffffff, 0x9)
preadv(r6, &(0x7f0000000200)=[{&(0x7f0000000240)=""/20, 0x14}], 0x2000000000000208, 0x0)

[  699.803572][ T5548] binder: 5547:5548 unknown command 0
[  699.814707][ T5549] binder_alloc: 5546: binder_alloc_buf, no vma
[  699.825684][ T5548] binder: 5547:5548 ioctl c0306201 20000280 returned -22
[  699.845030][ T5549] binder: 5546:5549 ioctl c0305615 20000000 returned -22
06:07:42 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  699.930194][ T5554] xt_TCPMSS: Only works on TCP SYN packets
06:07:42 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f0000000000)={0x0, {0x8, 0x5e8}})

[  699.987559][ T5554] xt_TCPMSS: Only works on TCP SYN packets
06:07:42 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x67)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x218, 0x0)

[  700.037007][ T5558] binder: 5556:5558 unknown command 0
[  700.039191][ T5557] xt_TCPMSS: Only works on TCP SYN packets
[  700.061731][ T5558] binder: 5556:5558 ioctl c0306201 20000280 returned -22
[  700.076815][ T5554] xt_TCPMSS: Only works on TCP SYN packets
[  700.084705][ T5560] binder_alloc: 5559: binder_alloc_buf, no vma
[  700.114225][ T5560] binder: 5559:5560 ioctl c0305615 20000000 returned -22
06:07:43 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:43 executing program 3:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000100)={0x4, 0x8, 0xee3, {0x0, 0x7}, 0x5, 0x3ff})
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r2, &(0x7f00000017c0), 0x218, 0x0)

06:07:43 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  700.304558][ T5570] binder_alloc: 5567: binder_alloc_buf, no vma
[  700.334689][ T5572] binder: 5569:5572 unknown command 0
[  700.351553][ T5572] binder: 5569:5572 ioctl c0306201 20000280 returned -22
06:07:43 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:43 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  700.574137][ T5578] binder: 5576:5578 unknown command 0
06:07:43 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  700.615307][ T5578] binder: 5576:5578 ioctl c0306201 20000280 returned -22
06:07:43 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:43 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:43 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
sendto$isdn(r0, &(0x7f0000000100)={0x9, 0x8, "85d10db886b457cf037d8c0d6b813acef8b1aaf2081688908647d50291549103f1b88d40716c4d7dfa7c61844bc67d20d13b1f6164a79c5740740401e2cf758c0bf331b10bf768a914dd8df961590f77b8275237f316820d82010d5f58aa2fe6dfa97c113a9ec14ec11354737f324c0054a5daebbd0effb00efae88dc60861f38dc86061f86781707afebeea5c1098454f820979c7e481c5ca72d60a6090fa129d84f42bd7ccaa6610474a427207896d2db03dd6f02f168a12280fe2988bc4f76c5010051d713851e6e4d6969c43e85957c34c90a3357f340c14bfed6957f12013a0abd3a3ebc9323c65d90c6626a234869daae9a88512bb5a1c2e0bca3ecd21aaf35de173268b2b1e9f6c31271478619aafa609f0544a3722178cac74ef680850b8354d5c2f53096dcb80ab9d382a3c0d1c86a28bfd63b3c6ed8bb55127a1caaa57c331c4e2c29db15921b058ed7882e641c48c2c43ae131b8ee16dc14c4b4246d928853c635fef583d4854507e007244e99e4bb26b4963ffb65966e84a9b95b8b27695244eace827185e2065d4c9535128d5771893c190d79c1345ef977afa6bd03b58eaf76b051b2da7551076544b37168c4b0107c7393dc72899ff6d95aed29a3b0176e38ce8fd243b7068f297e41de08876d3cf039112e0cab509a8f419fb3feb701fceb295e20dd0e14d94fcd53ec0f7671bb25f4fa1d679260e6fad5219b35b6d45a862f915dcae38ea9767bd859008880d581d7912519a6acfb7741557acdf550432f5ed52b801f24a5621dc91e5d53954c4062606994a92d1f4dc917b8f9921959715ef41f1e71313a65056f16ab6094eb47836c14c68c56dfa1bfd53f4fa4b408312b190a89c4ceefc1a43f4f1cc319cc5f3e6362d3fd9a8e281f12ad2290fb700e844e0603ba52c656a6dd1d813da3cc1a6ec5c2b1a40f0da61d44682dae06f813cd56d6595759eff0e3221bd072e6e6d05ed06298d0000405c34f4b327c7e9c355894c923aa8cb4c6eea54ac86f81075949be2e5b20278cae525ac7e4180dd543f7e8fd1cb27c6a2ee449c05b8b254a1937c07b818307148a69a5a32ecce33c5196f97ec18ec2d98dcda03568a4c9c5b32742224bf47c4af8ed40d969626f945a9045de9e736aeb711cbd9a43c828b8467010212a56b493c76357d3cb879241ef6428ce0a5b1b87328632f257942a6a753700c6ffcb152e1c7fb494f4b292fdae096d62e7e90d9e55cb6adf9fdea9f8abb34c81d54113c56046afb2a3e2860f0ce60b2b7d9dd11d31e8f0eb075b50c1bb3af326b158cccce3014c49509d8bdfe5e58467edc722e685d48160b0e07241d9458644ed257c1e941540c4a434492ce5c5d2b4e7dde7e00b2a11e92ffda323326543fa6f822f267e2269cca41aa47bc5ebcb3400618d6421d374e82f55a149fe4161aa216babe409c5914d75da3a9c0a6afa9ae0e28a7c593ddb0e67eeed6faff5736c085185ac346ae753e58003029442f995d9527395c93acb5950c69f6fdd6bce4279ff1dea3d10c0ac4145b513d194a0fd3f3f3ff4612b5f574a3d32b846d97180506b42065c642168b93beea09a0694cbaa8e648ba9e4d8b52d759824d53f2e771984e474dfbb3628c4f021d95780eedc90f9e675d339650d16392ec6616d5f9fc49aad1ee659a1ea8d20a4d220bf5a0197f28321c25227f7a9e588c353520a5af43496d4966b03c10564f8a36cf2501009bc153dc2d3545d87bdf0986b4938a6a2826c000f2dc7348a2b7da1b7806b57a4b25885cd4b3ffb0a57d6beda9bbe7ce81f6f3371664b9286365db5174527bb018b4b9cd73be171b06cb10aeadadd837ae0e6803fa8891d8ad68b12b834be971685164c8ad9b5bfc376876c5c426154c5f0ef11f81402af716e9bd357b668db04f6593cde76e11c37669fce4ba20022704643ba6e06ce7e243d79844f3058330f1344cfd40c999a1d72f1a1d7dc28d0b016d96d78eabe32279d19e2b51b1dccea746065919d4589e0fdb8685977b20933459dbde93b0d3084a88b0e3a8a2b59fae021dfa5194c097ea79b1a09217659dcbd10afa186f71cba4ce326dcc0b4f233f1d2fc9ff13aa39fbf6da466b98435511d718584729608301dccfd7e7674b634839f9df8f008de9fdafd28ecaaa72ca0717f4b97199490888627cca45f03ac340af5f507f2d6fc830878370a9d8a14e07da9efb217f095a5f989a6d0cd8fb55152d0f1aa5181b91b2e09cd880c3f2e2945bb847ee4a659ca67e25d58178671c6435500f56d0c220512a89a24c9608a36a0da53026fc456f66202aa39464cf1050ab2acf84915365d019d1979c2ac509494bf793acb607f1a208595f4d172023323bca29844341ef8b6fce75e736d97bc086e9d76524996dfa60199fcfa74e1386349fed93882577db760c1e7bc1a8bb53ce68e33d68205356d582520aded10e84148ba847a4c24924261b865fb47ce771876b2b7d61a0f93b188c5254596152f479354bee97fac316ee43e6ade164950e19285f7aada960f34bd2de836bc3f1f33a3419dbf114e7611598b1ebeaa07e0daef8c500bc3dc617babe5296abd93c0f5bb6cc316758843a691f4f019743237bd52d01f71960bd488dfc14de363e3d081db88dfbeefb0b19126bcf906946e812576d667310f925862d7bfdf4c846215824da18ee3d174c3b77cfd7506c9b7e1fb8af2558156901ce814555e3869c2e5aad14a52e07b23e5a19cd1d8563637f31245b4c69af3b57d949a549db75e628e05353d14577e70fd7f745d3c0d1ce5278c2da80597b6b684e74bb0023fff29aef9fcca8acd609f78371f3001597ead37b1aeb1a542bc63b1ac3526d373c82242e77e08500d600b0d4c19d24ce74ec96abcf57c8fcc19f454cc7d1eb89628012972b1479f33a4593d9a5eb64f5e9088ec3fe344c884dbcb9b6938265bd3a0edf9b3d78f8d9aaf538bdf1002aead901ea1427b3fdf591eb5960094106b64cfb8b5d75b5bc0285025e6d1b1bc6be51004555fcd6292644f6846e95dcb0c0ca2d879871a8ed94e3d829ad099d25d695164dfbf61ffc97f89877e5d5e5dbb04cc1b0ab2ed3543d73a71be26a59c618d568308913f503f094a358bc80ee4e95ed7fc8b58134b11c2bcf8c8262ebf1dfe418513585837acd8be74e30019ad9378fe21efea3925e11ade13b821f0c572ae8083be6e733785fb4c8abffdcd0401735ba1c0f4543705e961a52aae8383aa310b742ab184f46a99943fa11ee616ccb1d8772cb4bbdeb5121387bbb58e54dad311ed4e0000f51e2138e9c695bf8f543c7f78ca24ea67cf04a96e1dfd219e2193a217f670769f5597aa43151494455834c2cf5644a73a195f0550247a3efeee81ae109a586d42f6aabe5f5a93ff99f328242f47f8916b11b3b2c579a0647c79b60483a359137a8a9d1a9f0e46c5c34d0afd226a8b2c25064f07cd2e10424e672f4703d86d82fcb6d9e31f0a8de7e38fc5713714e41a0f0f1ec9fbd6b28507eb7dcd6921f22e8a7c2155155b9fd60e0ba25057175109e72b7e5d822c600d8eb45d30e02d7adc8ea747aafafbcc775efddc61662e9fa8d618011f223c4ccfa56a47bb5ec416a91ac1f99eef49b4f3214af8a399796fee995be91a91af256c1213e99700035a5cb1666bc8a87ef7759084c9fcc0d74ada8bc28eb0b110d5c5b0d8d2e9a72a68e69fba8b786b0a4323f511e9b5e50f7488c69cc592a79f2ef6d12c96fe3d8c5bc1370633435a1c9198f7850682c7934ba00c86ab03fbe9b95a4ef883a1105f2b4d69fffd8f4e2eb1c6c0401a940e478ad8910539f0a66e2e596460ed19ae74e5cb0b8e25049dddb220bda336e80ceb33b95325070fd9e0bc4a53d89fd9c686d246bc734e8700d5347d91048e4636e03c80f7c8a9b3eff5f57233775d0730167950c366a4f5dbdf7abdc89370783b931ab02065e1b96911a168d8dc546f7a076defe7ef62469afa4b31b904323436a6d751cadd8ee267057874111f9c8db6e1d1a78b720a5dfd91b8c2ff9b121b86ea3c804dcc448f80ca7fbce83f154dab3f5a7250870f1970beede9c7343484baab8eafec891c3093199dd6ce362d5de0a68478e35020f543c67545b382f51e2ae2382a764929cb0f1faaf663caa6e3c0d79440ce2dcf84ca81a938be8b67fc7b4549931c7ea95b9d4b505ff853f2329a8ebe1a3e28bf7d05cb0263a1a933ac7ff31c2fe45a837529181cb10f3f414772654876a00dd3666a7de0563d7c0ccf11cf184d6860260400a149b0f7471911f99ff3b70b94e348b226bbb8cf4e648f71cb42ae67126e7223ec21b914f7da7450992617670a5900b3f70994f89e4d8b746e116ceef6a95e1d5d7f431d36c19b5638c551ddec32a44e06eb767fb37ff39507fbb8c309df8c7a5daf47875ccbf24901c6bb3795773f7b5d31cebac4a08b7c3ae8309a51963145cd8e83440eef8348c144a961e617fb7a580cbf21c6d9b6d750852dc4dc7ab29469229759ad2a0511854ef990e211c23a06853b8b3dc777cb0ba220035cee70a5a0475a0191651f26e43be95d97e70465e06f5571e219e7421f0774a6f3cb670c34b1e39038a77138dbb4432617addd91cab1144615c218eace05450d5b01cf5013c82f4eb12d1d1e4d1c824d55ef7432b2780a0111eb2759847884bc358599b6d0801029ac6812f457864e3c8c170c5fd61cdf5c4bdfe75f8452893c7e0a22f170415d6d8868140256a4cde03d7daa3351cb0057ab8d087b92b9cd1a8790129a43891eeddccaa00a1e58cf2f780fab6be51b67daf7d5078553b1e711195ee0512cb61a9b0f242a82da2ac01ffc98313b90ff37977643262a20231f76f0c88f00e2cc2dcebe4480a8a8f810afdf2a68545d3c22226bc8b0ef4e059cc5e571928ca9c37d7aa07b62a7258e02a712665f3f938a1e9e46261fbaa584286279c88a2df3c73d8b9f4ffa8dd687fad4d7f91f2d817a75669546c25371063a9c4fd2acfd3cc124eefd0992e07f0ed362ccdfdc40f94c86aab6bd986267e028f0e6b18cbf8312605df35475a6179ea6bd7bb28b54c94421c96d58d80610776aa8b00140146c971c1ead93424c980b02870fe46490d1d67ed97a5789e32a941d3e16317e5b8d02c25770bd76987f49c5520dc0524945fc486d525c4c6b4cccbfd19dfa23978dae206fb57c25a0bb6b28f16a2a12d75ab1aea8e88aa888944709b6b94ab58eaad40c7e5901996eff7200fbb9951685ec693bd14ea1e9989461cb2a7f6ba4c5f394b38efe5e01b2a6093d223d24fcefce687e421b2bf7ad8f5618643d43bc2cbe26ce2d8dc96ed10f4ef60e8a7532d22aa2e8f45556175b12f45cc74f8a9d784018c412909a6857a26a972cbe021cb382684c52a664d4ae92af0220414d857c88535e180fc5d47c9e413dc0d7fb177d2ed8844267da9694ad9c45aa88d2cec006ace45a60de81b3ca63ad72469d930ad570dd31e0c67e0051ed085d88df347868f1253ff68765d6ffacd1732d8a7430c38713d43298170b0104060ae7978722c96625e4c5755093f19af94be89a4a09a46d0a7c3f9ccbb9f3349796fb9d1b8318b81f37110c8cff3d62273734637e1759bb3bb7fb618d3c18cc9c889bdc3f5a0f0b5708abeebbf7f16391432a1ac799d16b7fbb53f5e355649d1a56711d7619a5d9038d7645bed1c84f6604fc6e7f4d1bf5be3460b3f38f041ec5e6c70976259e58719738e5fec04323a42bf1b7eeeab4723b3fdb4189a66d4f207c9e509eb6770fe2fcde191bfa2c95461496a07"}, 0x1008, 0x10, &(0x7f0000000040)={0x22, 0x6, 0x4d, 0x40, 0x20}, 0x6)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r1, &(0x7f00000017c0), 0x218, 0x0)

[  700.834895][ T5588] binder: 5587:5588 unknown command 0
[  700.858295][ T5588] binder: 5587:5588 ioctl c0306201 20000280 returned -22
06:07:43 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:43 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  701.080374][ T5597] binder: 5595:5597 unknown command 0
[  701.090819][ T5597] binder: 5595:5597 ioctl c0306201 20000280 returned -22
06:07:43 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:43 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  701.279405][ T5603] binder: 5600:5603 unknown command 25349
[  701.311158][ T5603] binder: 5600:5603 ioctl c0306201 20000280 returned -22
06:07:44 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:44 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:44 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:44 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0xfffffffd)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000040)={0x80000001, 0x20, 0xffff, 0x44bd5d8d, 0xff, 0x2})
preadv(r0, &(0x7f00000017c0), 0x218, 0x0)

[  701.517398][ T5609] binder: 5608:5609 unknown command 25349
[  701.544085][ T5609] binder: 5608:5609 ioctl c0306201 20000280 returned -22
06:07:44 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:44 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:44 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  701.760405][ T5619] binder: 5616:5619 unknown command 25349
[  701.790415][ T5619] binder: 5616:5619 ioctl c0306201 20000280 returned -22
06:07:44 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:44 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  701.982570][ T5627] binder: 5625:5627 unknown command 287493
06:07:44 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x40010, r0, 0xbd19d000)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000340)={@dev, 0x0, r1})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@bridge_setlink={0x48, 0x13, 0x20, 0x70bd2b, 0x25dfdbfe, {0x7, 0x0, 0x0, r1, 0x100, 0x4000}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x1}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x4}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8, 0x1, 'ppp\x00'}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r4}}}}]}, 0x48}}, 0x20000860)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r5, &(0x7f00000017c0), 0x218, 0x0)

[  702.029146][ T5627] binder: 5625:5627 ioctl c0306201 20000280 returned -22
06:07:44 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:44 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  702.230594][ T5635] binder: 5634:5635 unknown command 287493
[  702.242816][ T5635] binder: 5634:5635 ioctl c0306201 20000280 returned -22
06:07:45 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:45 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  702.474771][ T5646] binder: 5643:5646 unknown command 287493
[  702.509830][ T5646] binder: 5643:5646 ioctl c0306201 20000280 returned -22
06:07:45 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r1 = dup2(0xffffffffffffffff, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:45 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:45 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r3 = dup2(r2, r1)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_GET_UNIQUE(r3, 0xc0086401, &(0x7f0000000200)={0x31, &(0x7f0000000180)=""/49})
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x1406, 0x400, 0x70bd2f, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x40001}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0xffffffff}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004090}, 0x40000)
preadv(r4, &(0x7f00000017c0), 0x218, 0x0)

06:07:45 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r1 = dup2(0xffffffffffffffff, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:45 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  702.835618][ T5659] binder: 5658:5659 ioctl c0086401 20000200 returned -22
06:07:45 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r1 = dup2(0xffffffffffffffff, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:45 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:45 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  703.044043][ T5668] binder: BINDER_SET_CONTEXT_MGR already set
[  703.072054][ T5668] binder: 5667:5668 ioctl 40046207 0 returned -16
06:07:45 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)

06:07:46 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  703.261806][ T5674] binder: 5672:5674 ioctl c0306201 0 returned -14
[  703.271109][ T5659] binder: BINDER_SET_CONTEXT_MGR already set
[  703.308041][ T5659] binder: 5658:5659 ioctl 40046207 0 returned -16
[  703.316477][ T5677] binder: 5658:5677 ioctl c0086401 20000200 returned -22
06:07:46 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)

06:07:46 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:46 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
clock_gettime(0x6, &(0x7f0000000040))
preadv(r0, &(0x7f00000017c0), 0x218, 0x0)

06:07:46 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r1 = dup2(r0, 0xffffffffffffffff)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  703.539631][ T5685] binder: 5683:5685 ioctl c0306201 0 returned -14
06:07:46 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)

06:07:46 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r1 = dup2(r0, 0xffffffffffffffff)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  703.734226][ T5693] binder: BINDER_SET_CONTEXT_MGR already set
[  703.763071][ T5693] binder: 5691:5693 ioctl 40046207 0 returned -16
06:07:46 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r1 = dup2(r0, 0xffffffffffffffff)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  703.786548][ T5695] binder: 5691:5695 ioctl c0306201 0 returned -14
06:07:46 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

06:07:46 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:46 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0xdf, 0x5, 0xe0, "27b2b919691456d08509a4342dec37f2", "744796ddd5c8d74d6db23bb385f23b9d40b60c86dbad2fac4e459ff8ca72f4996203087f1201d37faf4684ba040679fd0cd7d459fe5b2a48030a421c450a35acd2eadf16fc9fdb6d6269e3832d1f3f36f50b361ad33b6cdedde11634d2689cbde0f57d1286c0118b71a2ad227b7558970beea9d3f87dba971cc94fa5ed02cd0417a1d41d1df814a9a673689198964f7ed139d76af88f57dd574f90197c6c96c1f3977245a243c93ae8f1cf0bfa2e605713fd63778de07fca0c7bd4cfa58480dbfc383930409024a29836"}, 0xdf, 0x1)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r1, &(0x7f00000017c0), 0x218, 0x0)

[  704.039158][ T5705] binder_alloc: 5703: binder_alloc_buf, no vma
06:07:46 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

06:07:46 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:46 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  704.228947][ T5713] binder_alloc: 5712: binder_alloc_buf, no vma
06:07:47 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:47 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0})

[  704.429567][ T5719] binder_alloc: 5718: binder_alloc_buf, no vma
06:07:47 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0})

06:07:47 executing program 4:
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:47 executing program 4:
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:47 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0})

06:07:47 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r3 = dup2(r2, r1)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r4 = openat(r3, &(0x7f0000000040)='./file0\x00', 0x40, 0x40)
ioctl$KVM_PPC_GET_SMMU_INFO(r4, 0x8250aea6, &(0x7f0000000100)=""/144)
preadv(r0, &(0x7f00000017c0), 0x218, 0x0)

06:07:47 executing program 4:
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:47 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:47 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:47 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:48 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:48 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  705.358179][ T5738] binder: BINDER_SET_CONTEXT_MGR already set
[  705.373386][ T5738] binder: 5736:5738 ioctl 40046207 0 returned -16
[  705.382545][ T5752] binder: BINDER_SET_CONTEXT_MGR already set
06:07:48 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  705.408815][ T5752] binder: 5736:5752 ioctl 40046207 0 returned -16
06:07:48 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x48, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0c6300000c630000106308400000000000deffff0e6306000000000000000000000000000863cfc64437eceecd104003000000000000000000000000000000066304400200000004"], 0x1b, 0x0, &(0x7f0000000040)="518c706414e041f8d71db8fa45a059395c29de4c6eabf44390b110"})
syz_open_dev$binderN(0x0, 0x0, 0x0)
openat$cgroup_int(r0, &(0x7f00000001c0)='cpuset.mem_hardwall\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="056304c06b52676b18d4d2667b6aeb9bbf9fdd813f3e134d0fefbe5a3f8e6629975a716185ca75afa2e509a72b04c01ac5a2674c2c0679aa4905f4ebecfd768ba3298c1454ec50bc69308b95205b146bb3a876efce9425e07c41f2009a1411e2e77b93"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r3, &(0x7f00000017c0), 0x218, 0x0)

06:07:48 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:48 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f0000000000)={0x0, {0x8, 0x5e8}})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[  705.651917][ T5761] binder: BINDER_SET_CONTEXT_MGR already set
[  705.659509][ T5761] binder: 5760:5761 ioctl 40046207 0 returned -16
[  705.681943][ T5763] binder: BINDER_SET_CONTEXT_MGR already set
[  705.689314][ T5761] binder: 5760:5761 ioctl c0305615 20000000 returned -22
[  705.700089][ T5763] binder: 5762:5763 ioctl 40046207 0 returned -16
06:07:48 executing program 1:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)
r3 = dup2(r2, r1)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
r6 = socket(0x11, 0x0, 0x0)
bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80)
getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000100)=0xe4)
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r4, 0x0, r7, r5}, 0xb8fb, 0x0, 0x3, 0x8000})
r8 = socket$key(0xf, 0x3, 0x2)
r9 = socket$l2tp(0x2, 0x2, 0x73)
sendmsg$netlink(r3, &(0x7f0000002380)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfc, 0x40}, 0xc, &(0x7f00000022c0)=[{&(0x7f0000000180)={0x570, 0x1c, 0x100, 0x70bd27, 0x25dfdbfb, "", [@nested={0x18f, 0x36, 0x0, 0x1, [@generic="b3fcf900a8fb265406df948d9408e92547457902177acf3ec9548891f6fc463c27d3d002e19decafcb0cf9b563ecf49af083bf387bba042f436be3b137088df7d7c0537e0be94a87655479463988f71a461be1973ace79b8dd8bd980759e51cedf118e4bfbd5bd0c3b3a07884c49cc81619fcf6be821cd601a7cbd5d80c13420ab922fd99dd2461b6fa0b0b434f0d6e3763ca587", @typed={0x8, 0x56, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x8a, 0x0, 0x0, @u32=0x1}, @typed={0xc, 0x64, 0x0, 0x0, @u64=0x1}, @typed={0x8, 0x82, 0x0, 0x0, @fd}, @generic="69736430f3a87a0823f2b15d6e325f6bde21967b797a9f41dfc7b0539e6bee02317ed1a62bfeb5b29f259044f7b15dac63302b", @typed={0x99, 0x8, 0x0, 0x0, @binary="1f4f3442b89f32c8e490ae65ac38540030ee938c79cb73262a8accad87b36de94bad874b99ec0feba1d9dd93719db87e1f5f3bb7eb8e8f4ad649183f9035f8b76ef035618984410f11f94e29b6db217291637dc57b68c3b241a437971f8b26da4436518b3c4e89804133458bc85ccf7cc95f47e913ae0b6c531a58176935d5d81c7763c2c0c871f5b513cd5efb513d97bfa7963935"}, @typed={0x4, 0x1d}]}, @typed={0x4, 0x5c}, @nested={0xe1, 0x58, 0x0, 0x1, [@typed={0xc, 0x90, 0x0, 0x0, @u64=0x4}, @generic="c55e6a9a02604755bf92dcfda7cf36570447f3cafad8befaf1ac21356a32bcf34ea64d9c9498da9e0c4480c983f9bff4d92a66b323bdd072527ebe38ec6e3155eb5c1b2ecde1ab472590860a4690f368783197a6efbdb28fa5649db464cf6bd9a305271b7318b916bf19ec45c9e408b2efdf44a045407518c50e6a5f1d9be90c5d75f25e791baa2101debb2f17576b009537b8d8603ba195a5eeed762632252cd5023a3a78f46dddc31f7c42b7ca8ae0f1dc4f0fd6a528069b56ff7aa58fbd3ca6b31e713926cdc8a2ef3414452506844e"]}, @nested={0xb9, 0x70, 0x0, 0x1, [@generic, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="ade8016a16e53e5a393a4e71f1ed6d99cbf0c2cd2e3e2bc254a4ef70a4303895e4413fb31d3b48b1db463986c882d6d88cb4434933b8a19cd4ca8491922a0982c78187af74179857d23c099b6ebef98a59442b985764e4a7c54337ae3466d007f722237ce199fd15d910fbed88270031f778ecc3ebbc82f1043f74f429babb066416f9d1963d0e4c6e1908a25c4dd75dd94a75c5c99154275589151465100c96c6ff3c2f3f5c5c2c80094f7853"]}, @nested={0x13b, 0x64, 0x0, 0x1, [@generic="5b7efa34a250a1dfbb07436bc6b0fae15489cde493219714a56778520cb153aead65f031174f7a3e099c6a17fe21407ea84439a88b3df6f287f4047db66c253cc630340a47db6eeac48f4fa072184c986a27c1ae59103249e26003d6ae1f7c3978ce721712", @generic="472841b9bf9c84054372803b3e5dfca4959ca7d01b1c447a70b74ca0bf9b1e56134d5d6475b246d522eb3dae1227a691bdc8e047b4f90eda52674485dc8f68f7352ce0345a38d0c0cd8d8bf6134e7abec26ed57e864d82ac66b29dadcad6f47a42c3774a1f240c902622ccd752aeb52d32183ee5d813de24daf675f4e2c617185cab918cde93ceca50e17391cef3c7e6101313ae81c62f9db7583db22e390ce0b6f1c0e858a4515a169c5248549c9693f4a0676738b394b949525693c54263f48154f8ec1529cff5529becffd7bb85494821"]}, @generic="ff6ad82a3be5fae3b92630c91beccdd40af0d88bf1edcc9cb35d9e2ee34383c7f4ee3ff914c2bb5193ae2ff2bab3bf414dc94671fe053d2d0e639017a4834ecf6afc1abfb65d553f988f4243c44fc75f494c0e10e3c737d7353ad704a151a620a93be2ea5cfa2811a8a2063a81ee477fcc40d5dd50cd5136257357a288ff274065fec520da558e2ddcfeb68659cd860974e98876397f193dad", @nested={0x53, 0x48, 0x0, 0x1, [@generic="9ed33665a249b195b8141c799399ef004d26f1b070c08f395222cb7dfeb7b27a89f01643c7aa11298892c11d26df586eaaa726d0cc7374b2ec98194684d15859ad6a96682a31afb3d551bb3716962a"]}]}, 0x570}, {&(0x7f0000002400)={0x14d8, 0x1a, 0x400, 0x70bd2b, 0x25dfdbfe, "", [@nested={0x1237, 0x8a, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @uid}, @typed={0x8, 0x59, 0x0, 0x0, @pid}, @generic="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", @generic="6cda326688b219a79ebd9e30c524c06991e5cd2ed46aaba45748d12e90ecc2ad0f045e76b6d738ad6e8c1bb34d0303d2faf0e5aa33e7e5315434ed14b344017100bf5456742bf68f5c5dbcf4fb93601f3668f1b218cdd3bc1e8b8c430cb82289eef192e1fec9444f49e4c1a43fe184e208870253c3336c0e008ea3147f0805c8435c277007525f0b83298f185603b31312ec20602fdecc2c640187dc5a861158311b502f7d051feed92fd385aa8d0ec402bba09edfa756d5a407736b75439abdd7a391d0a3c7470b97", @generic="aedb51f3bbd04cbe941d738ee4a178a901aa4c9031cbf48a158de6fed6935f268aa7388711e919f605adaed173794d8ea42655786124f9fc7f91c0aaba374cbad3d07ee56c1c10bb190ddc006b70ca9c48577f5e603daef2f122cbbd31e8087629081bd5b00fb7dc240ea0e1", @generic="f667d0539c174e3c15f1f02cbc4291e30e9452e9e05b1d7dcc06fac773f871e54fae9eaca6bfdef38d6d892d653ac6da983d9d705d5c7914a26be32ab569f8f436afcbd3e5daeac85eca91f6d5943e8dec2b00f9d4a8860a33f2e9e7fc0661f1b481431723eb98e167c2e6", @typed={0xc, 0x8d, 0x0, 0x0, @u64=0x3}, @generic="a9254a725ba42d587a14a270b1fc0c78f2a397ca0beede7fe55713e38db7fc57d02007a6805fc0fefc09b80e9d71a41473802abd26e612a35493a19bebc9407b476f8a75c601599b80671a5d4660e38649913d38a2358e0067e1f97b27f8d6aa6ac5d5fd4674a3cfe1fd57", @typed={0xc, 0x49, 0x0, 0x0, @u64=0x8001}]}, @nested={0x1c4, 0x5, 0x0, 0x1, [@generic="ea76e70874951b62e677b91a1646af78e0d625f78e23936014b41c55ba8e84067e20a2663097a1aa746f083d8c8d0dc7f7182e84ad0bf46a84ff4b80", @generic="cb7aa491984285ab413ab39dced5bf95fc46b0c24b0a815241302c71fa93fcdc7e5ee978445ac256ec48e2634e8cdc4bfa3495a30c588e9ece7bfd4844489daa70d57dfd614f6ac98a53df8635e07c6865a31d0a0c0796b816d310b721db0dc81a35edc380815f385da93473d3ea1d6ae8ed699d0915fb5d8443383e43bfa4c21ea00ab719aa1bf43403d5c65c572005f9059d36888dbcfcb27b3cf365a4f8b19c426e036e016a3284d898685ea02dbbec6aa85f67d86158c559cdfa37fea97c131452b0fe8c2689b77ac23a833c0ff0e0e999485b82c223c0883cef1b3f10422e0aa181e02edade6731939a8871cb", @generic="5a200dd7fb33e902f3ce687b3a7fffe9c2d65f", @generic="1e73a0d5fc8f199613da1b8567fbae7b12118d4fb51c12d486ec726c05dced8fe793190ccd1711c8e379265c70b53f11058bf488232c8069b98361faddd23226db6cec5ba5bd5c401554ff33675943a1795526c56020a9db32f79af39e4a9482e316cde55fa8e640ba031de9c9e17314baa1c1585e6ccc842ccedb359f64d7be3843"]}, @generic="fbccb876603ef58d4fd8302d4171f990b6f51116292b248707a15abcd9bdb8db3f543fc6d48e0810b3e399966468583c585e0fbdd3e7031f7eab6b714fcb9f4467dc54cef76d169c4fb9d45ebbea576d3741cc1f91ecbffac6f6163d57fd388b6927e04beba604d725dbd4627b86c9187f7096920abc9baab4530925835978c0ecb011bb9ec19a890cd1e5f3cbf66a55818ac124fafc1710618acba765fbcc8ab45c1269fb28704da49cb06fc75c9c17", @generic="8c8d0757ea8575933214b03a4761d1b1e6a8e8c79dabdbb76cbe5f"]}, 0x14d8}, {&(0x7f0000000700)={0x4b0, 0x40, 0x100, 0x70bd2c, 0x25dfdbfd, "", [@generic="84659ea47c61438b38605c9d040fe53bb7c6b8c271e78d2d02a639368bddd6e6b6a28579ca1ac6cb087fe02f5f660ebed95f34d4001d1dbfe33b5b18597c97e686d2112c17bf4833c766bae7566c8181d24029c2fb18d2ce458762", @generic="30f38dbde472936e7913614a9f258031b5dbf05072d57854ad4ee9727602e97ce14faed5cdd72a4e4c56d888b0bd443302a941b68328d0fd6b6b146003824e41232cd58cd53e610f47c54b5104cf0b6930dbe74a3e1bd31da6bc20d8999d79e6e7763dfa9455def398d506d77f373639e192a63a2aa1242963883b40ed7843fcad4e30393123a811535e6be5114bb0b3fbd7f6c002d63f4d9323671796687ba810adf43b91934fbfc2eab08469cd", @typed={0x8, 0x55, 0x0, 0x0, @fd=r2}, @nested={0x175, 0x91, 0x0, 0x1, [@generic="53dd132692309b3327ccf784ac3173096c82d406f4c086b7990c56cec79f68b241c75128fdb8247e2641d62e16e0a1bc4882077c40b5d84d06fe0f05f89b7ca98c7ecafb4533ba62a4898a9de8f4ad6ea0b123d052c1a2af6ca64684eca180d1d6f113d0bfc23a992bee290c9efedc55678b6c4954a99b5be69a1493e5a3e56e8a930c6ef39d0cc3703d682a0c587c5e619b0ad92dc65487481f8c0b3b650965b6e6ceb0dad1e31f01a62174a1ca999cad2bb3539ab2bfabab26aac0342ee5fe", @typed={0xc, 0xd, 0x0, 0x0, @u64=0x3}, @typed={0x4, 0x72}, @typed={0xc, 0x7c, 0x0, 0x0, @u64=0x13}, @typed={0x14, 0x19, 0x0, 0x0, @ipv6=@loopback}, @generic="6e23b280833ad876ad0642fc006637815effb8ca925090485ce286dd1c211d788f48aec8fb8fe03c5cbbef10b3c4bf0588f4d7daef7614a9e3c5e5538f5a6cd91ca41f0c8b26f08f13bec181ec86c97e50c6b556d91c1a7005290254b7aec0b6ed81e1833761807b0ea07a47a1", @typed={0x14, 0x43, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, [], 0x2b}}]}, @generic="9c105d10abb7712bf6ed49f61d2391998055affc98856cdea801c08a0ae3a244d8bbf50460e8b4f3d72de9b82dbc2192f5cf7e4cc3ee2072245ee9f8869c5c00612e4e7abe9f9afa5f3671e338c2f32bb2e55a4b52260c1e3fec46c2606f5791b06c931ee1a1f56a83cd661c48", @generic="d7ccfe76979520ee0ab78d57531d7659b6cb0d9024b41630ae5c9cf67c308908b0df2aeb0d53c4a267704a697e8d2887085eb9c52ab045859025b02a700b3cd577ed4f3fcf76af7089f1c1f431ceff3911c289e540a6dd091608f54534c88c95005ed87ecfa7471d5c63ec47877450423cfcadaf862bb82d38c288d543be181a88656f42e60abca22a5e59062571d5cf01436b31216da27a26c39eb4788e22316cab1555ac2861fea9c1e88f2ad78535230af398f145f30c8fccd2134cac920feb1f3fe1a5e0b98ae4ebfea87a67564c811edc1c4b9f4387fd91a83da122f842", @generic="331ea30e258d6ba56481448564691a0f67a4ce856db949c67489b5f6a0b13d78cf83eb07ac50527e41ed2c175987f9419f413131ce19be0b270913c8217f618c41bf0ab34a2043533abdd25699249b210932e140ad1a1d6789e529f356ff5322b4fe755c794d3387c00c14e8747d10924c89b7a8e8c5aa0bfed8e44aa0a47dbddb7335144b2dc88878800d3f399c425bd8e40729a61c152e7e9818bcac24c2dacad0a4a44775e78a836524fa74d578762307a60f44970239497c3a1ab894e696fb8b", @typed={0x7, 0x49, 0x0, 0x0, @str='!u\x00'}]}, 0x4b0}, {&(0x7f0000000bc0)={0x60, 0x3c, 0x400, 0x70bd25, 0x25dfdbff, "", [@generic="ff2327c38a9c5fa8037e44fea971545e12cc8f9453f8876dea8fcf0512d762c28813de06ba1817a8ec10ad2d6f7ad4d0572cf9cf5ca641d8b737deded9390aabfe0ebf0c290546048d61a3", @generic="b792"]}, 0x60}, {&(0x7f0000000c40)={0x308, 0x3f, 0x100, 0x70bd29, 0x25dfdbfd, "", [@nested={0x12f, 0x52, 0x0, 0x1, [@generic="b764f4bf417c8729e2aaa5b3a052015f1b4f3e006cb10ee1908a66c3a8c9bf05a90a15ef19c62d692ca9aa9016667ead0cc19fc50add88057a1529356d2511fb8ea2f9726225b74599b716993559f76b187c732c7b1eccd7a269975cc8158c04f266ff1e95c7acfcaa24920315b1a6a036fc8785880cd5e5d6ffde34a3164693c78de6b0061fa84deba7a96e2516f47dbdd4f32906f5ce8015a5f96ac24825cdec35fdfc3f694e33964c8e78c6fb678c9a0e480111adb008ede01d3dfa418d217ce93be4ef9b87e7b871c2c2cad7e285", @generic="402b052191a4d0e9a1e7d54058b4bca8afa01201faeef07f927f26f6a8cf831567238ee68b42b5acb9c960d5697defdd6ce23b62f4ee5ca13032c5f63cfccebe7bb8821bc85a1478bf72ab7a0a72e470be62f8f3ceeb44d48607fb"]}, @nested={0x1c5, 0x5e, 0x0, 0x1, [@generic, @typed={0x14, 0x58, 0x0, 0x0, @ipv6=@local}, @generic="e61e0f76177783f47141fd429fdb434157d050621d17aa38f9400cb6b5c425518d0c1132a09b61f0a09103d3caae1943303fb8f3a9ab4862d7a68a7a46541b2d99acb7c102bc287c42aff3fbeb40715e5f71b7d78d88109df1590e5b6518b1927200360b6bed2a6c6b2ba93dfe52d7dfbd13d1e299a8277158f7bae9c1abae494a02eea48aeb4a557d73eefc387eb02223e1a93a17e5dd8bad240fe8cf93133b3353254351fca82880ec8abdf59269e1e87fbbad89cf803b36d39befe31b339e302c9576bf39122313192ccc3b7a6a3c70f44bbbdbe781fe87a92afe6aa6c2293d3e70860ec18d3e43d428f05755182e86012dd5", @generic="71aeff9e4aedf1258e45e8a091a5da328a30e77c5ab7d62bb7c49e82043658f30a1e54eba3f53f2e45a1731f8f638ac9b91a8acb727a5d8de45637172721b9628f59cc3bad63e01598f03d0057b8b389d06752bbb3afb47a2d29284fb13465e1e0c2db670995219968c977ee2a0409a6dc7493c2a5b82d2d3d976566362a00b4d768164f3c4113047e7ff410586821b5fd572ff6981e65c1f5dc128fd455910bf3a2691a976b5d94a4a0e0b69c641edbab0cc2ca085392db39"]}]}, 0x308}, {&(0x7f0000000f80)={0x33c, 0x3b, 0x400, 0x70bd27, 0x25dfdbfd, "", [@typed={0x8, 0x50, 0x0, 0x0, @pid}, @typed={0x8, 0x6b, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0x22, 0x0, 0x0, @u32=0x5}, @typed={0x8, 0x7a, 0x0, 0x0, @u32=0x2}, @nested={0x17d, 0x78, 0x0, 0x1, [@generic="66147327ff8835ec005ce45b0ea4c00b6bcbf65e7b04b3e6ce8f6739b226389761105b1d41e481cf3ded6137ef0b007167edad99ef", @generic="2cb45f36ad9f9eeb6e854f7cec8acc0dad0b3a68facd86074149b1d5dae475b8337bc2dbb15daedf38140a9554e6fa73b3b8c18f50a27b0c53b6149a07daa3e9b439f0ba05798a5423984c5888f8fc1e7564a339d5dbf6960fa067529a8b937f69474665f6d1ea5a8d20b7d7d67003aac0e9a24f33f912f8931ecb0fab267c64d0f88180d463fae745f6bc1beda1adafdef765ae68797ed61f7f0253682470f80bf50a22987ecc9555e14c120c4bc4275055d5cf8e5c631ef3ac3def2a660d885e9a3d2790036254c90c3c572f1020b1bc504caafe1c6a56a9d84bf2b66068a5000cef2fccaf90", @generic="e7e18ede097d9ca8bde9540a9a0854b02dc1c8fb85482a41aef673d81e825b63a8d14cd1cbbe8d3d430cc0200e15a73a3c7e5e8b28dc773f6abac741a9139d062f5843475b3bb3bafaf5a15b0f25ff34f286332b8223626da8e78cc642"]}, @nested={0xeb, 0x12, 0x0, 0x1, [@generic="26eeac919d5e8b6c71b705516b77606f4be6294dcb2cc2d59cce5cf61520fcdceef45cbd7a341bd4c7807b5ce923d775edcd29a85301363846a2856469ee17afb1968cad152a752c90bd27d1bb8cc0679751d01fb562b6ed102f6934b0fd711f55c38f9591604fc5640b0ec22a5882cc435f81f7dc79aa01d6540381e84409074d7f3f450262cf7a5799dd8f03e47a54ccbc18362dc2e9ef52e9b8c5b51a50529bafa01961ae967a251002cee0dfb8a140652f4449ed24c1fb49801a10583cd6b1a3d3a7d341074afaf199b2e4357e290955752a1a623c06937829395b9a785f884c15df9464aa"]}, @typed={0x3a, 0xe, 0x0, 0x0, @binary="5b51336bb5fabf10c4a497f28c38aa3bd13bd6d2dd6c239ed5b0a59285125c32e1194a16397f65118cd4722ef6532773fea006a74a54"}, @generic="8bce2c70c8108802ce3a33341d797479f1fa20e0bdee0910db2f57be5524f4913a05ba25f96eb26d29af328b75f4629c5d2e61718707fd41809099b07a16f4420aaf50b04c6937bfc90eccf7647a8c7cdf3cf3a0c2eb24d17e", @typed={0x8, 0x8c, 0x0, 0x0, @pid}]}, 0x33c}], 0x6, &(0x7f0000003980)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r1, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, r5}}}, @rights={{0x28, 0x1, 0x1, [r0, r2, r3, r1, r8, r9, r1]}}], 0xc8, 0x44}, 0x480c0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r10 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r10, &(0x7f00000017c0), 0x218, 0x0)

06:07:48 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  705.855530][ T5767] binder: 5765:5767 ioctl c0306201 0 returned -14
06:07:48 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:48 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x218, 0x0)

06:07:48 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:48 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="f80d584c4e7f8d987a09332e920b14887f40591f1da1502289082ced7fdcbe1b207e93c49af9373ef3cce4a04909968c6807f767f06b203c699b52ccedfcc5fbbe4958dbb3e4499668ba12162e1772be78c1b54eb94a9e155cb2fd8c3907eefadd3cde71ae0480858aa6a6384bec0635a6944d28f476379f695accf6552862ed7c2ba0f9be", @ANYRESOCT, @ANYRESOCT, @ANYRESHEX], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r1 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x200, 0x0)
ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)={0x0, 0x4, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0xfffffffffffff000}, {0xffffffffffffffff, 0x0, 0x8000, 0x8000}, {r1, 0x0, 0x1000000000000, 0x1000000}, {r0, 0x0, 0x1000000, 0x8000}]})
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
preadv(r3, &(0x7f00000023c0), 0x0, 0x9)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r4, &(0x7f00000017c0), 0x218, 0x0)

06:07:49 executing program 1:
unshare(0x40000000)
socket$inet(0x2, 0x4, 0x8c1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, r1, 0x0)
socket$pptp(0x18, 0x1, 0x2)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0xa0, 0x0, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0xffff}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x400}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x4a}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0xffffff5e}]}]}, 0xa0}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, 0x2, 0x8, 0x101}, 0x14}}, 0x0)

[  706.249925][ T5777] binder: 5775:5777 ioctl c0306201 0 returned -14
06:07:49 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  706.313181][ T5781] IPVS: ftp: loaded support on port[0] = 21
[  706.313943][ T5778] debugfs: Directory 'vcpu0' with parent '5778-8' already present!
[  706.473352][ T5796] binder: 5793:5796 ioctl c0306201 0 returned -14
06:07:49 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x218, 0x0)
openat$vcsa(0xffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x101000, 0x0)

06:07:49 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  706.689970][ T5817] binder: 5815:5817 ioctl c0306201 0 returned -14
06:07:49 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  706.874449][ T5820] binder: 5818:5820 ioctl c0306201 20000200 returned -14
[  706.913761][ T5820] binder: BINDER_SET_CONTEXT_MGR already set
[  706.940506][ T5820] binder: 5818:5820 ioctl 40046207 0 returned -16
06:07:49 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
sendmsg$AUDIT_TTY_GET(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f8, 0x4, 0x70bd25, 0x25dfdbfd, "", ["", "", ""]}, 0x10}}, 0x20000084)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='personality\x00')
preadv(r3, &(0x7f00000017c0), 0x218, 0x0)

06:07:49 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:49 executing program 5:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000140)=""/125, 0x7d}, {&(0x7f00000001c0)=""/46, 0x2e}], 0x3, 0x3)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r3 = dup2(r2, r1)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x802)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0106434, &(0x7f0000000000)={0x9b, <r4=>0x0, 0x2, 0x1ff})
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, &(0x7f0000000040)={0x404, r4, 0x2, 0x9})
preadv(r0, &(0x7f00000017c0), 0x218, 0x0)

[  707.137607][ T5828] binder: 5826:5828 ioctl c0306201 20000200 returned -14
[  707.144648][ T5827] binder_alloc: 5825: binder_alloc_buf, no vma
[  707.153730][ T5824] binder: BINDER_SET_CONTEXT_MGR already set
[  707.173561][ T5828] binder: BINDER_SET_CONTEXT_MGR already set
[  707.179950][ T5827] binder: 5825:5827 ioctl c0106434 20000000 returned -22
[  707.188674][ T5824] binder: 5822:5824 ioctl 40046207 0 returned -16
[  707.207485][ T5828] binder: 5826:5828 ioctl 40046207 0 returned -16
06:07:50 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  707.242006][ T5833] binder_alloc: 5825: binder_alloc_buf, no vma
[  707.276056][ T5827] binder: 5825:5827 ioctl c0106434 20000000 returned -22
[  707.387996][ T5838] binder: 5837:5838 ioctl c0306201 20000200 returned -14
06:07:50 executing program 5:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
syz_open_dev$vcsu(&(0x7f0000000100)='/dev/vcsu#\x00', 0x7fd1, 0x56eeda7ee7757194)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000180)={0x3, 0x7f, 0x1ff})
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x400002, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000001c0)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e24, @empty}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)='veth0_to_team\x00', 0x3, 0x5, 0x3})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000040)={0x7}, 0x49)
preadv(r1, &(0x7f00000017c0), 0x218, 0x0)

06:07:50 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:50 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x4, 0x1, 'syz0\x00'}]}]}, 0x24}}, 0x0)
sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xc8, r3, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xbaf}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff}]}, @TIPC_NLA_MEDIA={0x24, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xf67}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x80}, 0x801)
preadv(r0, &(0x7f00000017c0), 0x218, 0x0)

[  707.594915][ T5843] binder: 5842:5843 unknown command 0
[  707.634284][ T5843] binder: 5842:5843 ioctl c0306201 20000200 returned -22
06:07:50 executing program 1:
unshare(0x40000000)
socket$inet(0x2, 0x4, 0x8c1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, r1, 0x0)
socket$pptp(0x18, 0x1, 0x2)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0xa0, 0x0, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0xffff}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x400}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x4a}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0xffffff5e}]}]}, 0xa0}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, 0x2, 0x8, 0x101}, 0x14}}, 0x0)

06:07:50 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  707.882616][ T5854] IPVS: ftp: loaded support on port[0] = 21
[  707.896346][ T5856] binder: 5855:5856 unknown command 0
[  707.921604][ T5856] binder: 5855:5856 ioctl c0306201 20000200 returned -22
[  707.949855][ T5860] binder: BINDER_SET_CONTEXT_MGR already set
[  707.987814][ T5860] binder: 5855:5860 ioctl 40046207 0 returned -16
06:07:50 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:51 executing program 5:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x218, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0x9a, 0x2, 0x5, "5e50e6fbbade320b2ada200e9237591d", "55ca5553700d3f20600f84870588caee9b5495b90555b7323db09ac3f4257b422df9cb85ba564daba07b471c195c57c8e2d862bd42e6702e2f3f414a93a6c36a8418c30406b92884df571dd7a6c12ed25497f9af0d64510ca028f43c506b7e8f0d84d03a09afc73545aee1c154b1214f67a3d8c83e38870dfad51dd5ad8ef377b60be2c339"}, 0x9a, 0x1)

[  708.225858][ T5892] binder: 5890:5892 unknown command 0
[  708.247199][ T5892] binder: 5890:5892 ioctl c0306201 20000200 returned -22
06:07:51 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:51 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04a70440"], 0x0, 0x0, 0x0})
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x19, &(0x7f0000000240)={r3}, 0x8)
setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={r3, 0x80}, 0x8)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r4, &(0x7f00000017c0), 0x218, 0x0)

[  708.419353][ T5904] binder: 5901:5904 unknown command 0
[  708.445073][ T5904] binder: 5901:5904 ioctl c0306201 20000200 returned -22
06:07:51 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  708.673515][ T5916] binder: 5914:5916 unknown command 0
[  708.699405][ T5916] binder: 5914:5916 ioctl c0306201 20000200 returned -22
[  708.731252][ T5918] binder: BINDER_SET_CONTEXT_MGR already set
[  708.765956][ T5918] binder: 5914:5918 ioctl 40046207 0 returned -16
06:07:51 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:51 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x218, 0x0)

06:07:51 executing program 5:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000240)={0x3ff, 0xbe67, 0x4})
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05638203"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x90, 0x0, 0x2, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_TUPLE={0x28, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'snmp\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x80000000}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'sane-20000\x00'}]}, 0x90}, 0x1, 0x0, 0x0, 0x31}, 0x100)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r3, &(0x7f00000017c0), 0x218, 0x0)

[  708.965434][ T5923] binder: 5922:5923 unknown command 0
[  708.989234][ T5923] binder: 5922:5923 ioctl c0306201 20000200 returned -22
06:07:51 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="0463"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  709.049604][ T5928] binder: 5926:5928 unknown command 58876677
[  709.089513][ T5928] binder: 5926:5928 ioctl c0306201 20000280 returned -22
[  709.198096][ T5932] binder: 5930:5932 unknown command 25348
[  709.234164][ T5932] binder: 5930:5932 ioctl c0306201 20000200 returned -22
06:07:52 executing program 1:
unshare(0x40000000)
socket$inet(0x2, 0x4, 0x8c1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, r1, 0x0)
socket$pptp(0x18, 0x1, 0x2)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0xa0, 0x0, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0xffff}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x400}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x4a}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0xffffff5e}]}]}, 0xa0}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, 0x2, 0x8, 0x101}, 0x14}}, 0x0)

[  709.254423][ T5933] binder: BINDER_SET_CONTEXT_MGR already set
[  709.286610][ T5933] binder: 5930:5933 ioctl 40046207 0 returned -16
06:07:52 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="0463"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  709.415049][ T5935] IPVS: ftp: loaded support on port[0] = 21
[  709.478903][ T5940] binder: 5937:5940 unknown command 25348
[  709.519096][ T5940] binder: 5937:5940 ioctl c0306201 20000200 returned -22
[  709.537150][ T5947] binder: BINDER_SET_CONTEXT_MGR already set
[  709.573323][ T5947] binder: 5937:5947 ioctl 40046207 0 returned -16
[  709.580458][ T5928] binder: BINDER_SET_CONTEXT_MGR already set
[  709.588954][ T5928] binder: 5926:5928 ioctl 40046207 0 returned -16
[  709.604045][ T5929] binder: 5926:5929 unknown command 58876677
[  709.633180][ T5929] binder: 5926:5929 ioctl c0306201 20000280 returned -22
06:07:52 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="0463"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:52 executing program 5:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)=0x4)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
dup2(r1, r0)
r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
dup2(r3, r2)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r4, &(0x7f00000017c0), 0x218, 0x0)

06:07:52 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
openat$vhost_vsock(0xffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000240), &(0x7f0000000280)=0x4)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r2 = creat(&(0x7f0000000100)='./file0\x00', 0x21)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00')
sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000180001801400020076657468305f746f5f7465616d000000074be04e225d0a88c6601cfa6ef90c9db39b4906673551eec83594c7bdd57c39eac6663b2fdcedfcf47ff324e7e27c92cb11e2248de1894d1d01cc18562deea5760b2bcda5334e3da6249d8c779b788dde335e003dbc9d0686646b965fdf2628522d54d8ade8b53812d5507d19f49880a18534f2554cac2a5f"], 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40540a0}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r4, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000814}, 0x20000855)
preadv(r1, &(0x7f00000017c0), 0x218, 0x0)

[  709.789300][ T5969] binder: 5968:5969 unknown command 25348
[  709.808566][ T5969] binder: 5968:5969 ioctl c0306201 20000200 returned -22
06:07:52 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="046304"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  709.910206][ T5971] binder: 5970:5971 ioctl c0306201 0 returned -14
[  709.930095][ T5973] binder: 5972:5973 ioctl c0306201 0 returned -14
[  709.977028][ T5976] binder: 5974:5976 unknown command 287492
[  709.985384][ T5973] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[  710.014712][ T5976] binder: 5974:5976 ioctl c0306201 20000200 returned -22
06:07:52 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="046304"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  710.211974][ T5981] binder: 5978:5981 unknown command 287492
[  710.237219][ T5981] binder: 5978:5981 ioctl c0306201 20000200 returned -22
[  710.267353][ T5983] binder: BINDER_SET_CONTEXT_MGR already set
[  710.295371][ T5983] binder: 5978:5983 ioctl 40046207 0 returned -16
06:07:53 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="046304"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  710.512347][ T5990] binder: 5970:5990 ioctl c0306201 0 returned -14
[  710.524079][ T5987] binder: 5985:5987 unknown command 287492
[  710.560699][ T5987] binder: 5985:5987 ioctl c0306201 20000200 returned -22
[  710.602458][ T5973] binder: 5972:5973 ioctl c0306201 0 returned -14
06:07:53 executing program 5:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(r0, &(0x7f0000000000), 0x0, 0x6)
r1 = gettid()
ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000000c0)='net\x00')
preadv(r2, &(0x7f00000017c0), 0x218, 0x0)

06:07:53 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(0xffffffffffffffff, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:53 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x3c1, 0x3, 0x268, 0xc8, 0xc8, 0xc8, 0x0, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa4, 0xc8}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'bond_slave_1\x00', 'veth1_to_bond\x00'}, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34, 'SET\x00'}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x2c4)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000140)=0x100120, 0xff64)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x0, 0x0, 0x1, 0x9, 0x2, 0x8}, 0x20)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(r3, 0xae03, 0x5)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x400854d5, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{0x3, 0x7, 0xff, 0x8}, {0x40, 0x4, 0x40, 0x8}, {0x6, 0x4, 0x1, 0x3}]})
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r4, &(0x7f00000017c0), 0x218, 0x0)

06:07:53 executing program 1:
unshare(0x40000000)
socket$inet(0x2, 0x4, 0x8c1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, r1, 0x0)
socket$pptp(0x18, 0x1, 0x2)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0xa0, 0x0, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0xffff}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x400}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x4a}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0xffffff5e}]}]}, 0xa0}}, 0x0)

06:07:53 executing program 5:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x9], 0x0, 0x148c00})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
fcntl$setflags(r3, 0x2, 0x0)
preadv(r0, &(0x7f00000017c0), 0x218, 0x0)

06:07:53 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(0xffffffffffffffff, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  710.855832][ T6000] xt_TCPMSS: Only works on TCP SYN packets
[  710.933848][ T6000] debugfs: Directory 'vcpu0' with parent '6000-8' already present!
[  710.945027][ T6002] IPVS: ftp: loaded support on port[0] = 21
06:07:53 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(0xffffffffffffffff, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  711.012277][ T6009] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  711.053469][ T6009] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
06:07:53 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, 0xffffffffffffffff)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:54 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, 0xffffffffffffffff)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  711.380982][ T6014] xt_TCPMSS: Only works on TCP SYN packets
06:07:54 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sco\x00')
preadv(r0, &(0x7f00000017c0), 0x218, 0x0)

06:07:54 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, 0xffffffffffffffff)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:54 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="324045c0ce5c97ba863ad97707d58d94e25898202f91e3ad250eae68c5d225def6152b1cc966255a027d80f084032299f510c7d67063d0f9cf115e8f44326ba3776d1a6f5b0cd47aa17c987a85bd2f064d76aca78b9a73c6209988783cb21c399cc43646ba4a4ca561a456310eeea2fdf8d9e025635e12ddbdf8e4a3afbf4799a91d8eea959ea207f0945590f2351a969a00c719a8cfc64cb9ecb2f339eef73585eb1224ee99da3e68cc9e25cb"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$SNDRV_PCM_IOCTL_HW_FREE(r2, 0x4112, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r3, &(0x7f00000017c0), 0x218, 0x0)

06:07:54 executing program 5:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000000)=0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x450402, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000100)=""/66, 0x42}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000180)=""/97, 0x61}, {&(0x7f0000000200)}], 0x4, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r5, &(0x7f00000017c0), 0x218, 0x0)

06:07:54 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  711.917124][ T6062] binder: 6060:6062 unknown command -1069203406
[  711.930095][ T6061] debugfs: Directory 'vcpu0' with parent '6061-5' already present!
[  711.935947][ T6062] binder: 6060:6062 ioctl c0306201 20000280 returned -22
[  711.969640][ T6067] binder: 6060:6067 ioctl 4112 0 returned -22
06:07:54 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:54 executing program 1:
unshare(0x40000000)
socket$inet(0x2, 0x4, 0x8c1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, r1, 0x0)
socket$pptp(0x18, 0x1, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)

06:07:54 executing program 5:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000100)=""/186)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r3, &(0x7f00000017c0), 0x218, 0x0)
r4 = mq_open(&(0x7f00000001c0)='/sys/kernel/debug/binder/stats\x00', 0x80, 0x1, &(0x7f0000000240)={0x81, 0x0, 0x10000, 0xba5})
sendfile64(r3, r4, &(0x7f00000002c0)=0x92a91b7, 0x4)

06:07:54 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  712.202960][ T6078] IPVS: ftp: loaded support on port[0] = 21
[  712.233612][ T6081] binder: BINDER_SET_CONTEXT_MGR already set
[  712.259542][ T6081] binder: 6079:6081 ioctl 40046207 0 returned -16
[  712.288866][ T6086] binder: 6079:6086 ioctl 80404509 20000100 returned -22
06:07:55 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  712.333469][ T6081] binder: BINDER_SET_CONTEXT_MGR already set
[  712.349068][ T6081] binder: 6079:6081 ioctl 40046207 0 returned -16
[  712.363588][ T6094] binder: 6079:6094 ioctl 80404509 20000100 returned -22
[  712.427527][ T6067] binder: BINDER_SET_CONTEXT_MGR already set
[  712.441052][ T6067] binder: 6060:6067 ioctl 40046207 0 returned -16
06:07:55 executing program 5:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r3 = dup2(r2, r1)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
write$FUSE_GETXATTR(r3, &(0x7f0000000000)={0x18, 0x0, 0x3, {0x20400000}}, 0x18)
preadv(r0, &(0x7f00000017c0), 0x218, 0x0)

06:07:55 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:55 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r0, 0x40046602, &(0x7f0000000080)=0xa4022)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(r1, &(0x7f00000023c0), 0x1, 0xfffffffe)
r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d08952300c298260e458064c98b39299643"], 0x0, 0x0, 0x0})
r4 = dup2(r3, r2)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$VIDIOC_S_FMT(r4, 0xc0cc5605, &(0x7f0000000100)={0xb, @pix={0x8001, 0x10001, 0x20303159, 0x2, 0x7389, 0xaf, 0x6, 0x100, 0x1, 0xa, 0x0, 0x6}})
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r5, &(0x7f0000000300), 0x0, 0x0)

06:07:55 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  712.729591][ T6119] binder: 6116:6119 unknown command 596969485
[  712.760268][ T6119] binder: 6116:6119 ioctl c0306201 20000200 returned -22
[  712.797123][ T6119] binder: 6116:6119 ioctl c0cc5605 20000100 returned -22
[  712.844653][ T6122] binder: BINDER_SET_CONTEXT_MGR already set
[  712.855466][ T6120] binder: 6116:6120 unknown command 596969485
[  712.864051][ T6119] binder: BINDER_SET_CONTEXT_MGR already set
[  712.872849][ T6122] binder: 6121:6122 ioctl 40046207 0 returned -16
[  712.892145][ T6120] binder: 6116:6120 ioctl c0306201 20000200 returned -22
[  712.920177][ T6119] binder: 6116:6119 ioctl 40046207 0 returned -16
[  712.934074][ T6123] binder: 6116:6123 ioctl c0cc5605 20000100 returned -22
06:07:55 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:55 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
fgetxattr(0xffffffffffffffff, &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f00000002c0)=""/209, 0xd1)
preadv(r0, &(0x7f00000017c0), 0x218, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r3 = dup2(r2, r1)
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x7fff)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="07b9e19906406032679ab97e39613b96ae89d42ca9e0ff2c8620a4b83e4ed7ef0fab2b5f6262f96ad8e8e99cd225e6b36ea3c12ffd031b9edd618f7b1eabc59d328bac8630886f9814c2d47f14527845dc2facc57dea3eb5b98ebe56499f5bed2e81e4614743a4937cc5e5e711fe1a40d1dcdf4c08546b7a31cae1bb2318e14350dc3818644b9aadd3c7586414cce15af36586e32b53fff1a48fa3e2dfe6ba04778aed4087f8c8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f0000000040)=""/57)

[  713.083569][ T6117] binder: BINDER_SET_CONTEXT_MGR already set
[  713.093764][ T6131] binder: 6130:6131 ioctl c0306201 0 returned -14
[  713.108359][ T6117] binder: 6114:6117 ioctl 40046207 0 returned -16
[  713.111785][ T6134] binder: BINDER_SET_CONTEXT_MGR already set
[  713.157459][ T6134] binder: 6114:6134 ioctl 40046207 0 returned -16
06:07:55 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  713.212536][ T6136] binder: BINDER_SET_CONTEXT_MGR already set
[  713.241660][ T6136] binder: 6135:6136 ioctl 40046207 0 returned -16
[  713.264766][ T6138] binder: 6135:6138 unknown command -1713260281
[  713.300454][ T6138] binder: 6135:6138 ioctl c0306201 20000280 returned -22
06:07:56 executing program 1:
unshare(0x40000000)
socket$inet(0x2, 0x4, 0x8c1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, r1, 0x0)
socket$pptp(0x18, 0x1, 0x2)

[  713.310485][ T6136] binder: 6135:6136 ioctl 8040450a 20000040 returned -22
[  713.329418][ T6140] binder: 6139:6140 ioctl c0306201 0 returned -14
[  713.365836][ T6136] binder: 6135:6136 unknown command -1713260281
[  713.389421][ T6136] binder: 6135:6136 ioctl c0306201 20000280 returned -22
06:07:56 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  713.422941][ T6142] IPVS: ftp: loaded support on port[0] = 21
06:07:56 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f0000001280)=[{&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/196, 0xc4}, {&(0x7f0000001200)=""/72, 0x48}, {&(0x7f00000022c0)=""/99, 0x63}, {&(0x7f0000002340)=""/125, 0x7d}, {&(0x7f0000000040)=""/52, 0x34}], 0x6, 0xfffffff8)

[  713.626293][ T6158] binder: 6148:6158 ioctl c0306201 0 returned -14
06:07:56 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
dup2(r2, r1)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ustat(0x6, &(0x7f0000000140))
recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000000340)=""/121, 0x79}], 0x3, &(0x7f00000003c0)=""/177, 0xb1}, 0x40010003)
getsockname(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000280)=0x80)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000040), &(0x7f0000000100)=0x4)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r4, &(0x7f00000017c0), 0x218, 0x0)

06:07:56 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  713.915973][ T6197] binder: BINDER_SET_CONTEXT_MGR already set
[  713.956511][ T6197] binder: 6195:6197 ioctl 40046207 0 returned -16
[  713.982266][ T6201] binder: 6195:6201 ioctl c0306201 20000280 returned -14
06:07:56 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  714.159079][ T6205] binder: BINDER_SET_CONTEXT_MGR already set
[  714.175448][ T6205] binder: 6204:6205 ioctl 40046207 0 returned -16
[  714.198976][ T6205] binder: 6204:6205 ioctl c0306201 20000280 returned -14
06:07:57 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:57 executing program 5:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r0 = socket(0x11, 0x0, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80)
getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000100)=0xe4)
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, 0x0, 0x0, r1}, 0xb8fb, 0x0, 0x3, 0x8000})
stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
r4 = socket(0x11, 0x0, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80)
getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000100)=0xe4)
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r2, 0x0, r5, r3}, 0xb8fb, 0x0, 0x3, 0x8000})
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="02000000010006000000000002000600", @ANYRES32, @ANYBLOB="02000300", @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRES32, @ANYBLOB="0400051c0000000008a47a00", @ANYRES32=0x0, @ANYBLOB="084004ef", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="0bd4e4e9890d828c06000000000000005f3a4089a8390445b745a85957a5", @ANYRES32=0xee00, @ANYBLOB="10000200000000002000060000000000"], 0x64, 0x2)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r6, &(0x7f00000017c0), 0x218, 0x0)

[  714.420125][ T6212] binder: 6211:6212 ioctl c0306201 20000280 returned -14
06:07:57 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  714.631645][ T6215] binder: 6214:6215 unknown command 0
[  714.655397][ T6215] binder: 6214:6215 ioctl c0306201 20000280 returned -22
06:07:57 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r1 = openat$vcsa(0xffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x1, 0x0)
r2 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x803)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0463044061d51a340d5f0bc465c356dd0286e7a09cab08931e7670e5a0a62e6f913df9e043ad5dadf980c282136ffd7106984e33c5e36fa4b2a3b2e49f3f26c5c3c8821a27aa605c018b7c30b8fe4d8922c92dc7c9f54e"], 0x0, 0x0, 0x0})
r4 = dup2(r3, r2)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="056b0440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r4)
preadv(r0, &(0x7f00000017c0), 0x218, 0x0)

06:07:57 executing program 1:
unshare(0x40000000)
socket$inet(0x2, 0x4, 0x8c1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, r1, 0x0)

06:07:57 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:57 executing program 5:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xfe, 0x0, 0x0, 0x0, 0xd, 0x0, 0x13})
ioctl$KVM_SET_CPUID(r2, 0xae80, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter\x00')
r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
r4 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0})
r5 = dup2(r4, r3)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYRESDEC, @ANYRES32=r0, @ANYRESDEC=r2], 0x0, 0x0, 0x0})

[  714.874795][ T6222] IPVS: ftp: loaded support on port[0] = 21
[  714.892284][ T6221] binder: 6219:6221 unknown command 1074031365
[  714.900108][ T6224] binder: 6223:6224 unknown command 0
[  714.923944][ T6221] binder: 6219:6221 ioctl c0306201 20000280 returned -22
[  714.935755][ T6224] binder: 6223:6224 ioctl c0306201 20000280 returned -22
06:07:57 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  715.042760][ T6228] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  715.107114][ T6228] binder: 6225:6228 unknown command 926363952
[  715.144888][ T6228] binder: 6225:6228 ioctl c0306201 20000200 returned -22
[  715.156355][ T6236] binder: BINDER_SET_CONTEXT_MGR already set
[  715.165595][ T6236] binder: 6225:6236 ioctl 40046207 0 returned -16
[  715.198356][ T6236] binder: 6225:6236 unknown command 875837489
[  715.222325][ T6249] binder: 6248:6249 unknown command 0
[  715.227130][ T6236] binder: 6225:6236 ioctl c0306201 20000180 returned -22
[  715.258133][ T6249] binder: 6248:6249 ioctl c0306201 20000280 returned -22
[  715.314932][ T6228] binder: 6225:6228 unknown command 926363952
[  715.321772][ T6259] binder: BINDER_SET_CONTEXT_MGR already set
[  715.335857][ T6228] binder: 6225:6228 ioctl c0306201 20000200 returned -22
[  715.350231][ T6259] binder: 6225:6259 ioctl 40046207 0 returned -16
[  715.369106][ T6236] binder: 6225:6236 unknown command 875837489
[  715.375193][ T6236] binder: 6225:6236 ioctl c0306201 20000180 returned -22
06:07:58 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:58 executing program 5:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r1, &(0x7f00000017c0), 0x218, 0x0)
flock(r0, 0x2)

[  715.506666][ T6266] binder: 6264:6266 unknown command 0
[  715.524802][ T6266] binder: 6264:6266 ioctl c0306201 20000280 returned -22
[  715.628478][ T6231] binder: 6219:6231 unknown command 1074031365
06:07:58 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  715.669223][ T6231] binder: 6219:6231 ioctl c0306201 20000280 returned -22
[  715.749033][ T6274] binder: 6272:6274 unknown command 0
06:07:58 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r1, &(0x7f00000017c0), 0x218, 0x0)

[  715.802290][ T6274] binder: 6272:6274 ioctl c0306201 20000280 returned -22
06:07:58 executing program 1:
unshare(0x40000000)
socket$inet(0x2, 0x4, 0x8c1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, r1, 0x0)

06:07:58 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:07:59 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
dup2(r1, r0)
r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
dup2(r3, r2)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r4, &(0x7f00000017c0), 0x218, 0x0)
setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=@random={'os2.', '\x00'}, &(0x7f0000000140)='/dev/binder#\x00', 0xd, 0x2)

06:07:59 executing program 2:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)
r3 = dup2(r2, r1)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r4 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r5 = dup2(r4, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0xa)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0106434, &(0x7f0000000040)={0x6, <r6=>0x0, 0x10000, 0xb59b})
ioctl$DRM_IOCTL_SG_FREE(r5, 0x40086439, &(0x7f0000000100)={0x9, r6})
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r7, &(0x7f00000017c0), 0x218, 0x0)

[  716.366942][ T6285] binder: 6282:6285 unknown command 0
[  716.404357][ T6284] IPVS: ftp: loaded support on port[0] = 21
[  716.405283][ T6285] binder: 6282:6285 ioctl c0306201 20000280 returned -22
[  716.476075][ T6294] binder: 6288:6294 ioctl c0306201 0 returned -14
06:07:59 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  716.714411][ T6308] binder: 6307:6308 unknown command 25349
[  716.740901][ T6308] binder: 6307:6308 ioctl c0306201 20000280 returned -22
06:07:59 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  717.062960][ T6321] binder: 6320:6321 unknown command 25349
[  717.088799][ T6321] binder: 6320:6321 ioctl c0306201 20000280 returned -22
06:07:59 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:08:00 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\rc\x00\x00'], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040800}, 0x800)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r3, &(0x7f00000017c0), 0x218, 0x0)

06:08:00 executing program 1:
unshare(0x40000000)
socket$inet(0x2, 0x4, 0x8c1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, r1, 0x0)

[  717.502486][ T6333] binder: 6328:6333 ioctl c0306201 0 returned -14
[  717.581372][ T6333] binder: 6328:6333 ioctl c0306201 0 returned -14
[  717.624961][ T6338] binder: 6327:6338 unknown command 25349
[  717.652958][ T6338] binder: 6327:6338 ioctl c0306201 20000280 returned -22
[  717.718262][ T6332] IPVS: ftp: loaded support on port[0] = 21
06:08:00 executing program 5:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
write$binfmt_elf64(r2, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x81, 0x2, 0x1, 0x5, 0x5, 0x3, 0x3e, 0x7, 0x148, 0x40, 0x159, 0xfffffff9, 0x0, 0x38, 0x2, 0x18, 0x7ff}, [{0x2, 0x1, 0x2, 0xfe, 0xff2, 0x5, 0x5, 0x2}, {0x60000000, 0xee, 0x2, 0x7, 0x4, 0x8001, 0x4, 0xffff}], "569bf55c3efc69fd30178fc67b93cbecdb48ec807326ab8f3e402689c20120ceb2a978b7ea47a6c32308f95dba16b47aac94538971e1e698d510162557f514f188fa40106471b1b43ffb5c1c67d5fee735a7035c40738caa2b2827844ea5535468e1206e950f02c7e82ea38aecbe951a3de73ca2e2e5220f7d274ca2d023d26abd59d32a4dd45eb251d318b28bc8967dd6e952effeb6eec1562bc398d36a85f382e3fb9bb47e37c74b3a09a7c644fc588ee9dcc5693dc7f6fb9c"}, 0x16a)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1d4e73051e8480dd31fe0407"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000340)={0x60, 0x0, 0x1, {{0xc8b, 0x3, 0x2da, 0x0, 0x23, 0x7, 0x5, 0x6}}}, 0x60)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000004c0)=""/87, 0x57}, {&(0x7f0000003400)=""/4097, 0x1001}, {&(0x7f0000000440)=""/17, 0x11}], 0x3, 0x0)
r4 = pidfd_getfd(r3, r0, 0x0)
ioctl$EVIOCGKEY(r4, 0x80404518, &(0x7f0000000100)=""/162)

06:08:00 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$VIDIOC_QUERYMENU(r2, 0xc02c5625, &(0x7f0000000040)={0x3, 0x1c51, @name="afa0c2b3b0e5b7ac33f90ba8ec56d055994db6414cb290ee1b9047aead40b880"})
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r3, &(0x7f00000017c0), 0x218, 0x0)

06:08:00 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r3, &(0x7f00000017c0), 0x218, 0x0)

06:08:00 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  718.063512][ T6358] binder: 6354:6358 ioctl c0306201 0 returned -14
[  718.100778][ T6357] binder: 6353:6357 ioctl c02c5625 20000040 returned -22
[  718.261938][ T6370] binder: 6369:6370 unknown command 287493
[  718.325159][ T6370] binder: 6369:6370 ioctl c0306201 20000280 returned -22
06:08:01 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  718.404203][ T6375] debugfs: Directory 'vcpu0' with parent '6371-5' already present!
06:08:01 executing program 1:
unshare(0x40000000)
socket$inet(0x2, 0x4, 0x8c1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$pptp(0x18, 0x1, 0x2)

[  718.675198][ T6380] binder: BINDER_SET_CONTEXT_MGR already set
06:08:01 executing program 5:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r0 = semget(0x1, 0x1, 0x2)
semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/86)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
dup(r2)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40046607, &(0x7f0000000100))
preadv(r1, &(0x7f00000017c0), 0x218, 0x0)

[  718.730798][ T6380] binder: 6379:6380 ioctl 40046207 0 returned -16
[  718.731642][ T6381] binder: 6379:6381 unknown command 287493
[  718.796401][ T6381] binder: 6379:6381 ioctl c0306201 20000280 returned -22
[  718.867252][ T6357] binder: BINDER_SET_CONTEXT_MGR already set
[  718.885876][ T6357] binder: 6353:6357 ioctl 40046207 0 returned -16
[  718.892994][ T6386] binder: BINDER_SET_CONTEXT_MGR already set
06:08:01 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  718.949225][ T6384] binder: 6353:6384 ioctl c02c5625 20000040 returned -22
[  718.969046][ T6386] binder: 6353:6386 ioctl 40046207 0 returned -16
[  719.005845][ T6387] IPVS: ftp: loaded support on port[0] = 21
[  719.082509][ T6397] binder: 6396:6397 unknown command 287493
[  719.114430][ T6397] binder: 6396:6397 ioctl c0306201 20000280 returned -22
06:08:02 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  719.316536][   T21] tipc: TX() has been purged, node left!
[  719.346842][   T21] tipc: TX() has been purged, node left!
06:08:02 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f0000000100)={[0x2, 0x4, 0x228, 0x758d9c2f, 0x7fff, 0x5, 0xfffffc01, 0x5, 0x915, 0x2, 0x100, 0x1, 0x0, 0x0, 0xbcc, 0x3, 0x5, 0x8001, 0x0, 0x9, 0x1, 0x2, 0x1, 0x1f, 0x2, 0x8001, 0x3, 0x80000000, 0x4, 0x0, 0x1, 0xa73, 0x7fff, 0x2, 0x1, 0x9, 0x0, 0x0, 0x7f, 0x8, 0x9, 0xffff, 0x4, 0xc1c, 0x5, 0x7f, 0x0, 0x9, 0x3, 0x8, 0x20, 0xffffffff, 0x8, 0xffff, 0x28, 0x7f, 0xfffffff7, 0x4, 0x400, 0x5, 0xffff, 0xbf3e, 0x2, 0x9, 0x4, 0x8, 0x10001, 0x4, 0x0, 0xffff, 0x8, 0x2000000, 0xfffffffb, 0x800, 0x1, 0xf53c, 0x9, 0x7, 0x4d, 0x80000000, 0x7fff, 0x2, 0x3ff, 0x9, 0x6a41, 0x80, 0x7, 0x76, 0x200, 0x401, 0x2, 0x40, 0x1, 0x0, 0x5, 0x7fffffff, 0x8, 0x8, 0x8000, 0x0, 0xe19631a, 0x9e, 0x6, 0xf8, 0x1, 0xc9, 0x0, 0x9, 0x3, 0x2, 0x2, 0xff, 0x7, 0x1, 0x5, 0xcc00, 0x8000, 0x1ea3fad0, 0x7, 0x5, 0x401, 0x40, 0x9, 0xcb69, 0x51a73471, 0x3, 0x4, 0x1ff, 0xfffffffe, 0x800, 0x4, 0x9, 0x2, 0x5, 0x7, 0xfffffff8, 0x80000000, 0x3ff6, 0x4, 0x3, 0x8, 0x6, 0x6, 0xff45, 0x6af, 0x6, 0x9, 0x2, 0x1, 0x6, 0x5, 0x4, 0xfffffff8, 0xfff, 0xffff, 0x4, 0x400, 0x2, 0x9, 0x0, 0x0, 0x2, 0x1, 0x33e9, 0x9, 0x0, 0xb55f, 0x1, 0x7f, 0x10001, 0x1, 0x0, 0x4, 0x0, 0x8, 0xa53, 0x401, 0x2, 0x0, 0x6, 0x2, 0xfffffff9, 0x8, 0x9cf3, 0x7, 0x40, 0x0, 0xffffffc1, 0x8001, 0x2, 0x0, 0x7, 0x9, 0x8, 0x6, 0xfff, 0x7ff, 0x0, 0x6, 0xffff, 0x3, 0x9, 0x307, 0x3, 0x4678, 0x0, 0x40, 0x5, 0x1, 0x10001, 0x80000000, 0x2, 0x0, 0x800, 0x9, 0x1, 0x100, 0x6, 0xe8a, 0x6, 0xfffff3c9, 0x20, 0x8, 0x4, 0xfff, 0x3, 0x1ff, 0x7, 0x6, 0x7, 0x2, 0x200, 0x9, 0x4, 0x80000001, 0x2, 0xffffffc0, 0x8000, 0x81, 0x6, 0x7, 0x403, 0x6, 0x65c0, 0x1, 0x1000, 0xc7b7, 0x100, 0x4a67, 0x0, 0x2, 0x2, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7, 0x5, 0x80000001, 0x7c, 0xff, 0x2, 0x492, 0x2, 0x7ff, 0x3, 0x101, 0x2549, 0x8, 0x7, 0x1, 0x62, 0x6ce, 0x3, 0xbf3a, 0x5e85c652, 0x7, 0x20, 0x1, 0x7, 0x5240, 0x81, 0x1, 0x800, 0x4, 0x0, 0x8, 0x7ff, 0x4, 0x0, 0x0, 0x1, 0x401, 0xfa6, 0xffffff35, 0x3, 0x1, 0xe0, 0x5, 0x1, 0xfff, 0x8, 0x6, 0x4, 0x4, 0x80, 0x6, 0x800, 0x5, 0x3, 0xc8, 0x7, 0x7c, 0x4e1, 0x1, 0x5, 0x6, 0x5, 0xffffffc1, 0x0, 0xfffff6a7, 0x3, 0x101, 0x5, 0xd7, 0x9, 0x5, 0x6, 0x1, 0x3f, 0x1, 0x8001, 0x0, 0x0, 0x4df, 0x4, 0x3, 0x7, 0x0, 0x34, 0x2, 0x7fffffff, 0x1, 0x4, 0x94e, 0xff, 0x1f, 0xc, 0x401, 0x8, 0x5, 0x0, 0xffff0000, 0x2287, 0xfed, 0x2, 0x101, 0x4, 0x3, 0xa8bfa414, 0xed6, 0x1, 0x3, 0x118f, 0x80000001, 0x1f, 0x73e4, 0x80000000, 0x2c4e, 0x3a5ac157, 0xffffffff, 0x80, 0x7, 0x1f, 0x8, 0x8, 0x400, 0xfffffffa, 0x8, 0x0, 0x7, 0x7, 0x1f, 0xfff, 0x2, 0x81, 0x1, 0xfc, 0x5, 0x1, 0xfff, 0xffff, 0x3f, 0x6, 0x6, 0x80, 0x4, 0x5d3b, 0x38, 0x200, 0xffff, 0x21, 0x3, 0xfffffffb, 0x7, 0x0, 0x4e, 0x2, 0x5, 0x6, 0x6, 0x2, 0x81, 0x6, 0x401, 0x7, 0xffffff01, 0x1ff, 0x3f, 0xcc, 0x0, 0x8, 0x8001, 0x1, 0xcd, 0x10000, 0x81, 0x3f, 0x2, 0x5, 0x5, 0xb2e, 0x200, 0x7f, 0xfffff000, 0x86, 0x4, 0xc9, 0x8, 0x9, 0x5fee, 0x1ff, 0x2, 0x5130d974, 0x800, 0x6560, 0xff, 0xffff, 0x8, 0x1000, 0x5, 0x0, 0x1, 0x54, 0x5, 0x2, 0x1ff, 0x9, 0x9, 0x83, 0x96, 0xff, 0x7f, 0x6, 0x0, 0x3, 0x2, 0x7, 0x718, 0x0, 0xca, 0x0, 0xffffffff, 0xfffffff8, 0x12, 0x6, 0x6c, 0x8, 0x20, 0x401, 0x3, 0x21a, 0x1, 0x5c, 0x800, 0x5, 0x7fff, 0x1f, 0x0, 0x81, 0x7f, 0x2, 0xcc60, 0x6, 0x40b, 0x8, 0x40, 0x7, 0x5, 0x7fff, 0x1, 0x63a, 0x9, 0x0, 0x8, 0x0, 0x2, 0xfe68, 0xce, 0x101, 0xff, 0x1, 0x7, 0x3, 0x5446b691, 0xfffffff9, 0x20, 0x5, 0x939, 0x88, 0x81, 0x4, 0x3, 0x8999, 0x2, 0x810, 0x1f, 0x5d, 0x7f, 0xffffffff, 0x1, 0x87ca, 0x7f, 0x1, 0x1, 0xc6f, 0xffff0d86, 0x7f, 0x2, 0x4, 0x7ff, 0x1, 0x80, 0x8, 0x7, 0x8000, 0x4, 0x1000, 0x5, 0x80000001, 0x100, 0x20, 0x52bd, 0x6, 0x1ff, 0x10000, 0x10001, 0x10000, 0x0, 0x3000, 0x100f, 0x4, 0x1, 0x7, 0x2, 0x3, 0x6, 0xfffffff9, 0xb0, 0xfffff001, 0x24a, 0x9, 0x1, 0x6, 0x87, 0x800, 0x4, 0x8001, 0x2fa0, 0x0, 0xf7d7, 0x1000, 0x8, 0x7a9, 0x3, 0x9f4, 0x101, 0x1f, 0x5, 0xfe7, 0x7, 0x49, 0x6, 0xc44, 0x13, 0x9256, 0x1, 0x5, 0x9, 0x5, 0x9, 0xfffffff8, 0xa290, 0x2, 0xc13, 0x8, 0x0, 0xbf9b, 0x800, 0x3, 0x6, 0x3, 0xf3f, 0xff, 0x8, 0x8, 0x8, 0x4, 0xffff, 0xffff, 0x0, 0x9, 0x4, 0x80, 0x81, 0x3ff, 0x1, 0x4000000, 0x2, 0xffffff3d, 0x200, 0x1ff, 0xff, 0x8, 0xffffffff, 0x3ff, 0x4f4f06a9, 0x7, 0x8, 0xde93, 0x3, 0x7f, 0x8000, 0x7fffffff, 0x8001, 0x7, 0x8001, 0x0, 0x3, 0x4, 0x2, 0x3, 0xcb0, 0x49a, 0x200, 0x3f, 0x400, 0x81, 0x3, 0xffffff01, 0xd4f5, 0x4, 0x1f, 0x7, 0x7, 0x0, 0x5c1, 0x7, 0x9, 0x8000, 0xe78, 0x9, 0x5, 0x8, 0xa0c, 0x1000, 0x8, 0x3, 0x3ff, 0x9770, 0x5, 0x7, 0x80000001, 0x4, 0x3, 0x0, 0x1, 0x1ff, 0x792, 0x1, 0x8, 0x24c, 0x3, 0x7, 0x0, 0x3, 0x8, 0x7ff, 0x3, 0xfffffffc, 0x5211eb57, 0x2, 0x100, 0x800, 0x9, 0xd20, 0x129a91d, 0x4, 0x9, 0xffffffff, 0x245e, 0x7fffffff, 0x80, 0x80000001, 0x10001, 0xffffff80, 0x5, 0x4, 0x74b, 0x3, 0x5, 0xfd, 0x5, 0x2, 0x3, 0x7, 0x3, 0xfffffff8, 0x80, 0x200, 0x9bc, 0xffffffff, 0xfff, 0x6, 0x5, 0x80000000, 0x8, 0x9, 0x1f, 0x3, 0x80000001, 0xd1, 0x3f, 0x4, 0x2, 0x2800000, 0x5, 0x1f, 0x3, 0x3ff, 0x7, 0x6d39, 0x0, 0xe3b, 0x1000, 0xff, 0xfff, 0x7, 0x7, 0x7, 0x58d, 0x7096, 0x1, 0x36ce, 0xbe, 0x5, 0x5, 0x0, 0xaa4, 0x6, 0x401, 0xfffff8c1, 0x2, 0x2d, 0x20, 0x2, 0x0, 0xffffffff, 0xffff8a3c, 0x9, 0xffffffc0, 0x1f, 0x7f, 0x401, 0x4, 0x5, 0x97c, 0x1, 0x800, 0x7, 0xffffffc1, 0x0, 0x4, 0x2, 0x1, 0x1, 0x1, 0x9, 0x2, 0xfffffff8, 0xfffffe01, 0xe7fe, 0x3f, 0x20, 0x0, 0x9, 0x1, 0x6, 0x5, 0x7, 0x9, 0x2, 0x3, 0x8000, 0x7, 0x7, 0x884, 0x9, 0x8, 0x0, 0x18000, 0x4, 0x0, 0x4, 0x6, 0x5fb, 0xf3dc, 0x3, 0x1, 0x0, 0x5, 0x80000000, 0x6, 0x1539, 0x4, 0xffff, 0x1, 0x80, 0x8, 0xe93, 0x10000, 0x7, 0x5ae, 0x6, 0x65, 0x2, 0x6, 0x401, 0xb83, 0x2726, 0x10000, 0x3, 0x800, 0x9, 0x7, 0x0, 0x3, 0x4, 0x1ff, 0x0, 0x5c, 0x3727, 0xffffffff, 0x6f86, 0x1, 0x6, 0x0, 0x6, 0x6, 0x7, 0x4, 0x1, 0x2, 0x83, 0x81, 0x1, 0x0, 0x8, 0xa7b, 0x6, 0x8000, 0x9, 0x1, 0x40, 0x7, 0x5a192e53, 0x7, 0x80000000, 0x2, 0x7, 0x3, 0x401, 0x9, 0x400, 0x3, 0x1f, 0x4, 0x8, 0x4, 0x3, 0xb2, 0xe12, 0xffffffff, 0x101, 0x4, 0x5, 0x7, 0x9, 0x10000, 0x0, 0x0, 0x5, 0x6, 0x4, 0x0, 0xfe12, 0x1, 0xc8, 0x1, 0x10001, 0x1, 0x0, 0x9, 0x5, 0xfff, 0xfffffd60, 0x74, 0x2, 0x4, 0x0, 0xffffffff, 0x3, 0x3ff, 0x5, 0x1f, 0x7f, 0x9, 0x5, 0x60, 0x7, 0x100, 0x3654, 0x80, 0x400, 0x2, 0x0, 0x7f, 0xff, 0x1ff, 0x4, 0xc72, 0xe6, 0x5, 0x20, 0x81, 0x100, 0x8, 0x40f, 0xc1b, 0xc30, 0x6, 0x80000000, 0xffff, 0x594, 0x7, 0x5, 0x6, 0x80000001, 0x5, 0x3, 0x0, 0x2, 0x400, 0x0, 0xea53, 0xfffffff7, 0x9, 0x81, 0xfffffffe, 0x81, 0x0, 0x3, 0x401, 0xfff, 0x8, 0x7, 0xff, 0x5de, 0x3407, 0xffffff01, 0x1, 0x20, 0x9, 0x8000, 0x7fffffff, 0x1, 0x3, 0x9, 0x1ff, 0x400, 0x4, 0x5, 0x7fff, 0xff, 0x2f0c800, 0x5, 0x0, 0xffffffe0, 0xfff, 0x44c3, 0x9, 0x40000000, 0x1, 0x200, 0x7fffffff, 0x9, 0x100, 0x9, 0x6]})
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x218, 0x0)

[  719.385707][   T21] tipc: TX() has been purged, node left!
[  719.412472][   T21] tipc: TX() has been purged, node left!
06:08:02 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  719.452551][   T21] tipc: TX() has been purged, node left!
06:08:02 executing program 1:
unshare(0x40000000)
socket$inet(0x2, 0x4, 0x8c1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$pptp(0x18, 0x1, 0x2)

06:08:02 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  719.639131][   T21] tipc: TX() has been purged, node left!
06:08:02 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1c90202a"], 0x0, 0x0, 0x0})
r1 = dup2(r0, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0563e404a3fdeb2294d05b9d5a4929b131caf0c1218165290afc64b39c5d9dfecdcb87352a6301de7e4d263adbe3972570ec1b9386bb558ed59d5d70eeee3693f9d626d8a5c2a6378c71b7cef7e056a53736b1bc54eb166e1abaf98b38af0efa28fc2c26af6576bf5b05e51debf691855b58871fe9490dd3408f4f54e78ebea7195466234bbfa3ddaff4e99e94b678dc68354d4993aee70cc2736ae7e837c598ee28028a42ea94938c6b0700fb6017fcf8778274f05a068a8ad3ac9c253adfb89bc62d8c0bcade6f0ec237d5f7b1016987e448a17360e84f537ffa5babac09ffa492399185652f3d64cdc848dab0790bf4ac4a478ec924c812f97205ce97b854fe6370d32cbe5ca2f836a01dceb8d75ac1d849531824c9350a12a6932b6ce0d3cbd78d9419122f9374a9d45ea9e8530fa7da8f27b070234c1442d4ae6fee5c38961c427cef8161fda5368a7a04e35a96996b13616dcb545f9068dc348bb33b4c48400bd66de75d200f00000000000068421905d4ca9e76fd9af0c2b3a08915a908dcd9a01bdcfae4872040cb5a1ceaed141fb2dfd0fe5cfa98358b5a175ebb8435ae5c030ec374828f758cf06f9eb235d5618d50b504121fb457ad1d3f52221869ab3f78f1d59f8b2c630b856ecfde7c8cfd156189edc9d718a2e8c4f68eab0a8f"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r1, 0x28, &(0x7f0000000040)}, 0x10)
r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
socket$inet(0x2, 0x1, 0x80000000)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0)
r4 = dup2(r3, r2)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0004609f"], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r5, &(0x7f00000017c0), 0x218, 0x0)

[  719.720425][ T6433] IPVS: ftp: loaded support on port[0] = 21
[  719.788335][   T21] tipc: TX() has been purged, node left!
06:08:02 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)

[  719.851147][ T6443] binder: 6440:6443 ioctl c0306201 0 returned -14
[  719.859599][   T21] tipc: TX() has been purged, node left!
[  719.865703][   T21] tipc: TX() has been purged, node left!
[  719.899305][   T21] tipc: TX() has been purged, node left!
[  719.920983][   T21] tipc: TX() has been purged, node left!
06:08:02 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000100)={0x6}, 0x4)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800)
preadv(r3, &(0x7f00000017c0), 0x0, 0x0)

06:08:02 executing program 5:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x2, 0x2000)
ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000100)=""/139)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r1, &(0x7f00000017c0), 0x218, 0x0)

[  719.953098][   T21] tipc: TX() has been purged, node left!
[  720.017079][ T6460] binder: BINDER_SET_CONTEXT_MGR already set
[  720.056725][ T6467] binder: 6464:6467 unknown command 0
[  720.070192][ T6467] binder: 6464:6467 ioctl c0306201 20000200 returned -22
[  720.090899][ T6467] binder: BINDER_SET_CONTEXT_MGR already set
[  720.101504][ T6460] binder: 6455:6460 ioctl 40046207 0 returned -16
[  720.101805][ T6469] binder: 6455:6469 ioctl c0306201 0 returned -14
[  720.134218][ T6467] binder: 6464:6467 ioctl 40046207 0 returned -16
[  720.147850][   T21] tipc: TX() has been purged, node left!
[  720.206118][ T6472] binder: BINDER_SET_CONTEXT_MGR already set
[  720.245955][ T6443] binder: 6440:6443 ioctl c0306201 0 returned -14
06:08:03 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)

06:08:03 executing program 1:
unshare(0x40000000)
socket$inet(0x2, 0x4, 0x8c1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$pptp(0x18, 0x1, 0x2)

[  720.257390][ T6476] binder: BINDER_SET_CONTEXT_MGR already set
[  720.263496][ T6472] binder: 6464:6472 ioctl 40046207 0 returned -16
[  720.308438][ T6476] binder: 6440:6476 ioctl 40046207 0 returned -16
[  720.337910][   T21] tipc: TX() has been purged, node left!
06:08:03 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0})
r3 = dup2(r2, r1)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r5, &(0x7f00000017c0), 0x218, 0x0)
ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f0000000040)=0x8)

[  720.355084][ T6480] binder: 6478:6480 ioctl c0306201 0 returned -14
[  720.381813][ T6479] IPVS: ftp: loaded support on port[0] = 21
06:08:03 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)

06:08:03 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup2(r1, r0)
r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
r4 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
dup2(r4, r3)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000040)=[@decrefs={0x40046307, 0x3}], 0x16e, 0x0, &(0x7f0000000380)="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"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r5, &(0x7f00000017c0), 0x218, 0x0)

[  720.469429][ T6485] binder: 6482:6485 unknown command 0
[  720.478386][   T21] tipc: TX() has been purged, node left!
[  720.490114][   T21] tipc: TX() has been purged, node left!
[  720.503994][ T6485] binder: 6482:6485 ioctl c0306201 20000200 returned -22
[  720.532994][   T21] tipc: TX() has been purged, node left!
[  720.541865][ T6501] binder: 6493:6501 ioctl c0306201 0 returned -14
[  720.554654][   T21] tipc: TX() has been purged, node left!
[  720.557446][ T6497] binder: 6482:6497 ioctl c0306201 0 returned -14
[  720.597858][ T6504] binder: 6496:6504 ioctl c0306201 0 returned -14
[  720.608214][   T21] tipc: TX() has been purged, node left!
06:08:03 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

06:08:03 executing program 1:
unshare(0x40000000)
socket$inet(0x2, 0x4, 0x8c1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)

[  720.787819][   T21] tipc: TX() has been purged, node left!
06:08:03 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  720.905258][ T6518] IPVS: ftp: loaded support on port[0] = 21
[  720.947716][   T21] tipc: TX() has been purged, node left!
06:08:03 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  721.040377][   T21] tipc: TX() has been purged, node left!
[  721.048761][   T21] tipc: TX() has been purged, node left!
[  721.097427][   T21] tipc: TX() has been purged, node left!
[  721.127415][   T21] tipc: TX() has been purged, node left!
[  721.209829][   T21] tipc: TX() has been purged, node left!
[  721.216075][   T21] tipc: TX() has been purged, node left!
[  721.241647][ T6497] binder: BINDER_SET_CONTEXT_MGR already set
[  721.249534][ T6543] binder: 6482:6543 unknown command 0
06:08:04 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0})

[  721.270587][ T6497] binder: 6482:6497 ioctl 40046207 0 returned -16
[  721.270992][ T6548] binder: BINDER_SET_CONTEXT_MGR already set
[  721.307772][ T6543] binder: 6482:6543 ioctl c0306201 20000200 returned -22
06:08:04 executing program 5:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
sigaltstack(&(0x7f0000ffe000/0x2000)=nil, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/4096}, {&(0x7f0000000000)=""/25}, {&(0x7f0000001100)=""/175}, {&(0x7f00000011c0)=""/230}, {&(0x7f0000000040)=""/27}], 0x0, 0x3e)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x218, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630442"], 0x0, 0x0, 0x0})
r3 = dup2(r2, r1)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
sendto$unix(r3, &(0x7f0000001300), 0x0, 0x4000, &(0x7f0000001340)=@file={0x1, './file0\x00'}, 0x6e)

[  721.368341][ T6548] binder: 6482:6548 ioctl 40046207 0 returned -16
[  721.418584][   T21] tipc: TX() has been purged, node left!
06:08:04 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0})

[  721.497278][ T6558] binder: 6556:6558 unknown command 1107583748
[  721.522414][ T6558] binder: 6556:6558 ioctl c0306201 20000200 returned -22
06:08:04 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0x7a)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r3, &(0x7f00000017c0), 0x218, 0x0)

[  721.563421][ T6558] binder: BINDER_SET_CONTEXT_MGR already set
[  721.570182][   T21] tipc: TX() has been purged, node left!
[  721.620232][ T6558] binder: 6556:6558 ioctl 40046207 0 returned -16
[  721.620235][ T6560] binder: BINDER_SET_CONTEXT_MGR already set
[  721.620262][ T6560] binder: 6556:6560 ioctl 40046207 0 returned -16
06:08:04 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200f385542ffd947c2e7609fbd285609c378bdab6b7ad4a2a"], 0x2d, 0x0, 0x0})
r2 = dup2(r1, r0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="05630440fe3450a2e9b3f6d51589e9545490736cf4ab932c92375c5466fc4c0089e932ad00fb98eb85d67d890c665978f2c405aba318b7d5dc5cdb6db090c7dd072faef4413b58d7b9bb656ebecdce88fb5d7754aede365abf8bf427282134f03b9eca7519b0f6a48a"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r3 = openat$cgroup_ro(r2, &(0x7f0000000180)='memory.events\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x2, 0x5, 0x43, 0x1, 0x0, 0x2, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x800, 0x0, @perf_bp={&(0x7f0000000040), 0xc}, 0x4052, 0xfff, 0xd, 0x1, 0x20, 0xffffffe1, 0x3}, 0x0, 0x9, r3, 0x3)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r4, &(0x7f00000017c0), 0x218, 0x0)

[  721.680608][ T6565] binder: 6563:6565 ioctl c0306201 0 returned -14
[  721.717698][   T21] tipc: TX() has been purged, node left!
06:08:04 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0})

[  721.749922][ T6567] binder: 6566:6567 unknown command -2047672318
06:08:04 executing program 5:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r1, &(0x7f00000017c0), 0x218, 0x0)
fcntl$getown(r0, 0x9)

[  721.814133][ T6567] binder: 6566:6567 ioctl c0306201 20000200 returned -22
[  721.867648][   T21] tipc: TX() has been purged, node left!
06:08:04 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  722.007587][   T21] tipc: TX() has been purged, node left!
06:08:04 executing program 1:
unshare(0x40000000)
socket$inet(0x2, 0x4, 0x8c1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)

06:08:04 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  722.167785][   T21] tipc: TX() has been purged, node left!
[  722.249145][ T6582] IPVS: ftp: loaded support on port[0] = 21
[  722.269627][ T6583] binder: BINDER_SET_CONTEXT_MGR already set
[  722.289617][ T6583] binder: 6581:6583 ioctl 40046207 0 returned -16
[  722.317629][   T21] tipc: TX() has been purged, node left!
[  722.375317][   T21] tipc: TX() has been purged, node left!
[  722.381609][   T21] tipc: TX() has been purged, node left!
06:08:05 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  722.419527][   T21] tipc: TX() has been purged, node left!
[  722.463168][   T21] tipc: TX() has been purged, node left!
[  722.533348][ T6567] binder: BINDER_SET_CONTEXT_MGR already set
[  722.556407][ T6567] binder: 6566:6567 ioctl 40046207 0 returned -16
[  722.564599][   T21] tipc: TX() has been purged, node left!
06:08:05 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00')
sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01030000000000000000000018001400020077673000000000000000000000010000"], 0x28}}, 0x0)
sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r6, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x7ff}]}, 0x1c}}, 0x10)
preadv(r3, &(0x7f00000017c0), 0x218, 0x0)

[  722.608721][   T21] tipc: TX() has been purged, node left!
06:08:05 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
dup2(r1, r0)
r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
dup2(r3, r2)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r4, &(0x7f00000017c0), 0x218, 0x0)
setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=@random={'os2.', '\x00'}, &(0x7f0000000140)='/dev/binder#\x00', 0xd, 0x2)

06:08:05 executing program 5:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000000)={0x1, 0x0, {0x20e9, 0xe3, 0x80, 0x832}})
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x218, 0x0)

[  722.697632][ T6614] binder: 6613:6614 ioctl c0306201 0 returned -14
[  722.757713][   T21] tipc: TX() has been purged, node left!
[  722.927492][   T21] tipc: TX() has been purged, node left!
[  723.087500][   T21] tipc: TX() has been purged, node left!
[  723.248437][   T21] tipc: TX() has been purged, node left!
06:08:06 executing program 1:
unshare(0x40000000)
socket$inet(0x2, 0x4, 0x8c1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)

[  723.407546][   T21] tipc: TX() has been purged, node left!
06:08:06 executing program 5:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r3 = dup2(r2, r1)
r4 = mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
r5 = openat$vcsa(0xffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0xa0400, 0x0)
fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000240)='mand\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="50000000010701080000000000000000ff00000c0c00024000000000000080010c00064000000000000000000c000340000000000000007f0c00064000000000000000030900012073797a3100000000", @ANYRES64=r4], 0x50}, 0x1, 0x0, 0x0, 0x8800}, 0x400c010)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(r0, &(0x7f0000000040), 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r6, &(0x7f00000017c0), 0x218, 0x0)

06:08:06 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"})
r3 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000380)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000002640)={0xf0, 0x0, &(0x7f0000002480)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@weak_handle={0x77682a85, 0x0, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/148, 0x94, 0x2, 0x8}, @flat=@weak_handle={0x77682a85, 0xe53a40b5e4cdd354}}, &(0x7f0000000080)={0x0, 0x18, 0x40}}}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x68, 0x18, &(0x7f00000022c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/126, 0x7e, 0x1, 0x39}, @ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/4096, 0x1000, 0x0, 0x10}, @fd}, &(0x7f0000002680)={0x0, 0x28, 0x50}}}, @free_buffer={0x40086303, r3}, @release={0x40046306, 0x2}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000002400)={@fda={0x66646185, 0x5, 0x0, 0x35}, @fda={0x66646185, 0x2, 0x0, 0x1000000002e}, @flat=@weak_handle={0x77682a85, 0x0, 0x1}}, &(0x7f0000002380)={0x0, 0x1c, 0x38}}, 0x40}], 0xb3, 0x0, &(0x7f0000002580)="77bfcb655f2c70ee99314055579a5e09828f4d8e0604e94960ff303cf83a7d8cd366ae1930437aa0cf33ed921244db3d97fea31f163e7b34679beeb06dfa2328d6134b8d5b30f4c154da805f48756a2ade241ee724cdfaf01541a29728a400996b8c266d51582ae77617d134159c1d3e09fea95319c4cca18f43c5414285f4a61491ae449b18badaa1c944b62cbc5a5b8c56931c850181aff1ecd8b557c2309a0452154fc79d35978d8f1e37631c0f70b221dd"})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r4, &(0x7f00000017c0), 0x218, 0x0)

06:08:06 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup2(r1, r0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x6000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="040000000000000002000000233a65e10000000000000000c4a5000085010000000000000000000000000000000000000000000000000000080000000200000000000000000000001f000000ff0f0000000000000000000000000000000000000000000000000000ee00000001000000000000ff0000000009000000fdffffff430000007f00000000000000000000000000000000000000060000000300000000000000000000000500"/200])
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYRES16], 0x0, 0x0, &(0x7f0000000140)})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000240)='environ\x00')
preadv(r6, &(0x7f00000017c0), 0x218, 0x0)

[  723.538843][ T6628] IPVS: ftp: loaded support on port[0] = 21
[  723.567432][   T21] tipc: TX() has been purged, node left!
[  723.578502][ T6633] binder: 6630:6633 ioctl c0306201 0 returned -14
06:08:06 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00')
sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01030000000000000000000018001400020077673000000000000000000000010000"], 0x28}}, 0x0)
sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r6, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x7ff}]}, 0x1c}}, 0x10)
preadv(r3, &(0x7f00000017c0), 0x218, 0x0)

[  723.611909][   T21] tipc: TX() has been purged, node left!
[  723.630621][ T6634] binder: BINDER_SET_CONTEXT_MGR already set
[  723.648644][   T21] tipc: TX() has been purged, node left!
[  723.653178][ T6634] binder: 6631:6634 ioctl 40046207 0 returned -16
[  723.674641][   T21] tipc: TX() has been purged, node left!
[  723.682560][ T6638] binder: 6631:6638 unknown command 16
[  723.690645][ T6638] binder: 6631:6638 ioctl c0306201 20000280 returned -22
[  723.702501][ T6633] debugfs: Directory 'vcpu0' with parent '6633-9' already present!
[  723.718422][   T21] tipc: TX() has been purged, node left!
[  723.748289][   T21] tipc: TX() has been purged, node left!
[  723.759626][ T6656] binder: 6654:6656 ioctl c0306201 0 returned -14
06:08:06 executing program 5:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r2, &(0x7f00000017c0), 0x218, 0x0)

06:08:06 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0xc, 0x0, &(0x7f0000000040)=[@register_looper, @acquire={0x40046305, 0x2}], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r3, &(0x7f00000017c0), 0x218, 0x0)

[  723.902907][ T6672] binder: 6671:6672 ioctl c0306201 0 returned -14
[  723.909840][   T21] tipc: TX() has been purged, node left!
[  724.024958][ T6675] binder: 6674:6675 ioctl c0306201 0 returned -14
[  724.058199][   T21] tipc: TX() has been purged, node left!
[  724.217720][   T21] tipc: TX() has been purged, node left!
06:08:07 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04000400"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r3, &(0x7f00000017c0), 0x218, 0x0)

[  724.399202][   T21] tipc: TX() has been purged, node left!
[  724.557399][   T21] tipc: TX() has been purged, node left!
[  724.596276][ T6681] binder: 6680:6681 unknown command 262148
06:08:07 executing program 1:
unshare(0x40000000)
socket$inet(0x2, 0x4, 0x8c1)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, r0, 0x0)
socket$pptp(0x18, 0x1, 0x2)

06:08:07 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup2(r1, r0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x6000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="040000000000000002000000233a65e10000000000000000c4a5000085010000000000000000000000000000000000000000000000000000080000000200000000000000000000001f000000ff0f0000000000000000000000000000000000000000000000000000ee00000001000000000000ff0000000009000000fdffffff430000007f00000000000000000000000000000000000000060000000300000000000000000000000500"/200])
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYRES16], 0x0, 0x0, &(0x7f0000000140)})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000240)='environ\x00')
preadv(r6, &(0x7f00000017c0), 0x218, 0x0)

[  724.597435][ T6682] binder: 6671:6682 ioctl c0306201 0 returned -14
[  724.647814][ T6681] binder: 6680:6681 ioctl c0306201 20000200 returned -22
[  724.663536][ T6684] binder: 6680:6684 ioctl 80287010 20000040 returned -22
06:08:07 executing program 5:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r0 = gettid()
ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={<r1=>0x0}, &(0x7f0000000040)=0xc)
rt_tgsigqueueinfo(r0, r1, 0x3b, &(0x7f0000000100)={0x0, 0x5, 0x2})
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r2, &(0x7f00000017c0), 0x218, 0x0)

06:08:07 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x50, 0x0, &(0x7f00000002c0)=[@register_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x3, 0x1, 0x1c}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/188, 0xbc, 0x0, 0x2a}, @flat=@weak_binder={0x77622a85, 0xa, 0x1}}, &(0x7f0000000100)={0x0, 0x1c, 0x44}}}], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r3, &(0x7f00000017c0), 0x218, 0x0)

[  724.701232][   T21] tipc: TX() has been purged, node left!
[  724.750717][ T6689] binder: 6687:6689 ioctl c0306201 0 returned -14
[  724.764152][ T6688] IPVS: ftp: loaded support on port[0] = 21
[  724.837689][   T21] tipc: TX() has been purged, node left!
[  724.843998][   T21] tipc: TX() has been purged, node left!
[  724.865855][ T6698] binder: 6694:6698 ioctl c0306201 0 returned -14
[  724.879482][   T21] tipc: TX() has been purged, node left!
[  724.887290][ T6689] debugfs: Directory 'vcpu0' with parent '6689-9' already present!
[  724.914921][   T21] tipc: TX() has been purged, node left!
[  724.951078][   T21] tipc: TX() has been purged, node left!
[  725.047049][   T21] tipc: TX() has been purged, node left!
[  725.072035][   T21] tipc: TX() has been purged, node left!
06:08:07 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup2(r1, r0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x6000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="040000000000000002000000233a65e10000000000000000c4a5000085010000000000000000000000000000000000000000000000000000080000000200000000000000000000001f000000ff0f0000000000000000000000000000000000000000000000000000ee00000001000000000000ff0000000009000000fdffffff430000007f00000000000000000000000000000000000000060000000300000000000000000000000500"/200])
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYRES16], 0x0, 0x0, &(0x7f0000000140)})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000240)='environ\x00')
preadv(r6, &(0x7f00000017c0), 0x218, 0x0)

[  725.102160][   T21] tipc: TX() has been purged, node left!
[  725.196681][ T6730] binder: 6729:6730 ioctl c0306201 0 returned -14
[  725.318208][   T21] tipc: TX() has been purged, node left!
[  725.336273][ T6730] debugfs: Directory 'vcpu0' with parent '6730-9' already present!
06:08:08 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000040)={0x4000, 0x2000})
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r1, &(0x7f00000017c0), 0x218, 0x0)

[  725.498649][   T21] tipc: TX() has been purged, node left!
06:08:08 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup2(r1, r0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x6000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="040000000000000002000000233a65e10000000000000000c4a5000085010000000000000000000000000000000000000000000000000000080000000200000000000000000000001f000000ff0f0000000000000000000000000000000000000000000000000000ee00000001000000000000ff0000000009000000fdffffff430000007f00000000000000000000000000000000000000060000000300000000000000000000000500"/200])
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYRES16], 0x0, 0x0, &(0x7f0000000140)})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000240)='environ\x00')
preadv(r6, &(0x7f00000017c0), 0x218, 0x0)

06:08:08 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup2(r1, r0)
r3 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x400, 0x0)
ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0x6, 0x14, 0x60, &(0x7f0000000240)="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"})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b630000a85ba70ad2b63808404c078b7c936d568ccfdc3be4f98bab340d6c2858b9d98c0636ea4434612691df8ec3104006e5b31fab69b15073282009d541c280695babfee803a32c8da9583c9567219dd66ff4094d37c5f53dce2abd907255de756bb6cd7155bd90138d9913df2f4799220bc1c2f155ce2b8f749cec6a3dd72b1b57aba4eaf8e817be8119847d222a92394e31ca775f270300881d512bbb8c461073e24e4dfbe709a2e4e4796ce59a2289ab"], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r4, &(0x7f00000017c0), 0x218, 0x0)

06:08:08 executing program 5:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0), 0x2000000000000243, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')

[  725.687429][   T21] tipc: TX() has been purged, node left!
[  725.712555][ T6751] binder: 6749:6751 ioctl c0306201 0 returned -14
[  725.713982][ T6750] binder: 6748:6750 ioctl c0306201 0 returned -14
[  725.851274][ T6750] debugfs: Directory 'vcpu0' with parent '6750-9' already present!
[  725.859791][   T21] tipc: TX() has been purged, node left!
06:08:08 executing program 1:
unshare(0x40000000)
socket$inet(0x2, 0x4, 0x8c1)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, r0, 0x0)
socket$pptp(0x18, 0x1, 0x2)

06:08:08 executing program 5:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
fcntl$notify(r2, 0x402, 0x80000000)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r3 = dup2(r1, r0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056374e50460"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0), 0x49, 0x0, 0x0})
setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r4, &(0x7f00000017c0), 0x218, 0x0)

06:08:08 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup2(r1, r0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x6000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="040000000000000002000000233a65e10000000000000000c4a5000085010000000000000000000000000000000000000000000000000000080000000200000000000000000000001f000000ff0f0000000000000000000000000000000000000000000000000000ee00000001000000000000ff0000000009000000fdffffff430000007f00000000000000000000000000000000000000060000000300000000000000000000000500"/200])
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYRES16], 0x0, 0x0, &(0x7f0000000140)})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000240)='environ\x00')

06:08:08 executing program 3:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r4 = dup2(r3, r2)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000040)="d327b05fbdea783c8c253018a2b8bf51dc1c78eb72a93aabe5048d90c0", 0x1d, <r5=>0x2})
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r4, 0xc01064ac, &(0x7f00000001c0)={r5, 0x4e, &(0x7f0000000140)=""/78})
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r6, &(0x7f00000017c0), 0x218, 0x0)

[  726.037409][   T21] tipc: TX() has been purged, node left!
[  726.095966][ T6767] IPVS: ftp: loaded support on port[0] = 21
[  726.154315][ T6769] binder: 6766:6769 unknown command -445357307
[  726.164390][ T6778] binder: 6776:6778 ioctl c0306201 0 returned -14
[  726.177456][ T6769] binder: 6766:6769 ioctl c0306201 20000280 returned -22
[  726.186035][ T6782] binder: BINDER_SET_CONTEXT_MGR already set
06:08:09 executing program 2:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)
r3 = dup2(r2, r1)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYRESDEC=r4], 0x88, 0x0, &(0x7f0000000500)="0ec50c9d89fafac239408c988f672f786913c9a749d5cbbd147a7d65826d89686d4ab4d6659b779a0c5ce21f54b26076ea647fe9318397c7050e082450e7a1cf5c9c77d9afbd13785c22fce658b162d6fd551efc372098e3a374f47f7d641259472fa13db860d9d1c0097cc257cb3fcce7ce0622007c1c008e3c2c589c89fc093e7329f36103c9b9"})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r0, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0xfffffffffffffffa, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x5, 0x2}, 0x0, 0x0, &(0x7f0000000300)={0x0, 0xb, 0x3, 0xfe}, &(0x7f0000000340)=0x6d6, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x400}}, 0x10)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f0000000180)={0x1, 0x1, 0x1000, 0x23, &(0x7f0000000040)="bb68d9f21c6b3a46bfa538424487d4ddbfa79e68050ae4d90f7c127cbe3fdbbe241d86", 0xa, 0x0, &(0x7f0000000100)="3ec4c92b1f5d5e792a8a"})
preadv(r5, &(0x7f00000017c0), 0x218, 0x0)

[  726.216521][ T6786] binder: 6766:6786 ioctl c0306201 20000540 returned -14
[  726.223997][   T21] tipc: TX() has been purged, node left!
[  726.229890][ T6782] binder: 6774:6782 ioctl 40046207 0 returned -16
[  726.243032][   T21] tipc: TX() has been purged, node left!
[  726.255083][ T6778] debugfs: Directory 'vcpu0' with parent '6778-9' already present!
[  726.286328][   T21] tipc: TX() has been purged, node left!
[  726.369595][   T21] tipc: TX() has been purged, node left!
[  726.388001][   T21] tipc: TX() has been purged, node left!
06:08:09 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup2(r1, r0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x6000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="040000000000000002000000233a65e10000000000000000c4a5000085010000000000000000000000000000000000000000000000000000080000000200000000000000000000001f000000ff0f0000000000000000000000000000000000000000000000000000ee00000001000000000000ff0000000009000000fdffffff430000007f00000000000000000000000000000000000000060000000300000000000000000000000500"/200])
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYRES16], 0x0, 0x0, &(0x7f0000000140)})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)

[  726.412917][ T6809] binder: 6804:6809 ioctl c0306201 0 returned -14
[  726.481626][ T6809] binder: 6804:6809 unknown command 808464432
[  726.521191][ T6809] binder: 6804:6809 ioctl c0306201 200000c0 returned -22
[  726.589215][   T21] tipc: TX() has been purged, node left!
[  726.630962][ T6819] binder: 6818:6819 ioctl c0306201 0 returned -14
[  726.722427][ T6819] debugfs: Directory 'vcpu0' with parent '6819-9' already present!
[  726.747357][   T21] tipc: TX() has been purged, node left!
06:08:09 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup2(r1, r0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x6000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="040000000000000002000000233a65e10000000000000000c4a5000085010000000000000000000000000000000000000000000000000000080000000200000000000000000000001f000000ff0f0000000000000000000000000000000000000000000000000000ee00000001000000000000ff0000000009000000fdffffff430000007f00000000000000000000000000000000000000060000000300000000000000000000000500"/200])
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYRES16], 0x0, 0x0, &(0x7f0000000140)})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)

[  726.907201][   T21] tipc: TX() has been purged, node left!
[  726.914744][ T6829] binder: BINDER_SET_CONTEXT_MGR already set
[  726.953457][ T6829] binder: 6766:6829 ioctl 40046207 0 returned -16
[  726.970341][ T6786] binder: 6766:6786 unknown command -445357307
[  726.989183][ T6832] binder: 6766:6832 ioctl c0306201 20000540 returned -14
[  727.001102][ T6786] binder: 6766:6786 ioctl c0306201 20000280 returned -22
[  727.006099][ T6835] binder: 6831:6835 ioctl c0306201 0 returned -14
06:08:09 executing program 3:
r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r0)
keyctl$KEYCTL_MOVE(0x1e, r0, r0, r1, 0x0)
add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, &(0x7f0000000140)={0x5a, 0x7fffffff, 0x9, 0x3, 0x84000000})
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r3, &(0x7f00000017c0), 0x218, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r4 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="045d04405aa7a9b49a6854c031ad26c09da8168e7c3a611901010050c86d9ea7ff3f001a842dc75355ba2080584d0bdf0765075f594e855c580657bd0b00000000"], 0x0, 0x0, 0x0})
r5 = dup2(r4, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="164661cf"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc010643a, &(0x7f0000000180)={0x20000000, 0x400, 0x3d})

[  727.047406][   T21] tipc: TX() has been purged, node left!
06:08:09 executing program 5:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000100)=""/237)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r3, &(0x7f00000017c0), 0x218, 0x0)

[  727.161027][ T6809] binder: 6804:6809 ioctl c0306201 0 returned -14
[  727.162062][ T6835] debugfs: Directory 'vcpu0' with parent '6835-9' already present!
[  727.203752][ T6809] binder: 6804:6809 unknown command 808464432
[  727.217423][   T21] tipc: TX() has been purged, node left!
[  727.236900][ T6809] binder: 6804:6809 ioctl c0306201 200000c0 returned -22
06:08:10 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
dup2(r1, r0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x6000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="040000000000000002000000233a65e10000000000000000c4a5000085010000000000000000000000000000000000000000000000000000080000000200000000000000000000001f000000ff0f0000000000000000000000000000000000000000000000000000ee00000001000000000000ff0000000009000000fdffffff430000007f00000000000000000000000000000000000000060000000300000000000000000000000500"/200])
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYRES16], 0x0, 0x0, &(0x7f0000000140)})

06:08:10 executing program 1:
unshare(0x40000000)
socket$inet(0x2, 0x4, 0x8c1)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, r0, 0x0)
socket$pptp(0x18, 0x1, 0x2)

[  727.319496][ T6854] binder: 6853:6854 ioctl 8040450a 20000100 returned -22
06:08:10 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = socket$caif_stream(0x25, 0x1, 0x2)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000200)={{0x1, 0x0, @descriptor="a9bf2658288d4e5a"}})
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)
r3 = dup2(r2, r1)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
fsetxattr$trusted_overlay_nlink(r5, &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'L-', 0x6}, 0x16, 0x2)
preadv(r4, &(0x7f00000017c0), 0x218, 0x0)
r6 = openat$proc_capi20(0xffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x40, 0x0)
sendfile64(r6, r1, &(0x7f00000001c0)=0x77acc25, 0x7f)

[  727.397994][   T21] tipc: TX() has been purged, node left!
[  727.474592][ T6860] binder: 6857:6860 ioctl c0306201 0 returned -14
[  727.492496][ T6861] binder: 6859:6861 ioctl c0306201 0 returned -14
[  727.503149][ T6862] IPVS: ftp: loaded support on port[0] = 21
[  727.557166][   T21] tipc: TX() has been purged, node left!
[  727.576527][ T6860] debugfs: Directory 'vcpu0' with parent '6860-9' already present!
[  727.628201][   T21] tipc: TX() has been purged, node left!
[  727.656799][   T21] tipc: TX() has been purged, node left!
[  727.711361][   T21] tipc: TX() has been purged, node left!
[  727.750441][   T21] tipc: TX() has been purged, node left!
06:08:10 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
dup2(r1, r0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x6000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="040000000000000002000000233a65e10000000000000000c4a5000085010000000000000000000000000000000000000000000000000000080000000200000000000000000000001f000000ff0f0000000000000000000000000000000000000000000000000000ee00000001000000000000ff0000000009000000fdffffff430000007f00000000000000000000000000000000000000060000000300000000000000000000000500"/200])

06:08:10 executing program 3:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[r1], 0x1)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r2, &(0x7f00000017c0), 0x218, 0x0)

[  727.799319][   T21] tipc: TX() has been purged, node left!
[  727.826166][   T21] tipc: TX() has been purged, node left!
[  727.889269][ T6856] binder: BINDER_SET_CONTEXT_MGR already set
[  727.895276][ T6856] binder: 6853:6856 ioctl 40046207 0 returned -16
[  727.917171][   T21] tipc: TX() has been purged, node left!
[  727.924708][ T6897] binder: 6894:6897 ioctl c0306201 0 returned -14
[  727.952035][ T6900] binder: 6853:6900 ioctl 8040450a 20000100 returned -22
[  728.009109][ T6897] debugfs: Directory 'vcpu0' with parent '6897-9' already present!
06:08:10 executing program 5:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x40000, 0x81)
ioctl$FS_IOC_SETVERSION(r1, 0x40047602, &(0x7f0000000040)=0x2)
prctl$PR_SET_TSC(0x1a, 0x1)
preadv(r0, &(0x7f00000017c0), 0x218, 0x0)

[  728.078610][   T21] tipc: TX() has been purged, node left!
06:08:10 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
dup2(r1, r0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x6000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="040000000000000002000000233a65e10000000000000000c4a5000085010000000000000000000000000000000000000000000000000000080000000200000000000000000000001f000000ff0f0000000000000000000000000000000000000000000000000000ee00000001000000000000ff0000000009000000fdffffff430000007f00000000000000000000000000000000000000060000000300000000000000000000000500"/200])

[  728.227248][   T21] tipc: TX() has been purged, node left!
[  728.282475][ T6914] binder: 6913:6914 ioctl c0306201 0 returned -14
[  728.378100][   T21] tipc: TX() has been purged, node left!
06:08:11 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
dup2(r1, r0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="040000000000000002000000233a65e10000000000000000c4a5000085010000000000000000000000000000000000000000000000000000080000000200000000000000000000001f000000ff0f0000000000000000000000000000000000000000000000000000ee00000001000000000000ff0000000009000000fdffffff430000007f00000000000000000000000000000000000000060000000300000000000000000000000500"/200])

[  728.527643][   T21] tipc: TX() has been purged, node left!
06:08:11 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f0000000040)={'icmp\x00'}, &(0x7f0000000100)=0x1e)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r4 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0)
r5 = dup2(r4, r3)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r6, &(0x7f00000017c0), 0x218, 0x0)

06:08:11 executing program 5:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'veth1_macvtap\x00', 0x200})
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x218, 0x0)

06:08:11 executing program 3:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000240)=""/101)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000100)={0x789, 0x8})
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r2, &(0x7f00000017c0), 0x218, 0x0)

[  728.637201][ T6927] binder: 6925:6927 ioctl c0306201 0 returned -14
[  728.667101][   T21] tipc: TX() has been purged, node left!
[  728.691128][ T6930] binder: 6928:6930 ioctl c0306201 0 returned -14
[  728.716737][ T6930] binder: BINDER_SET_CONTEXT_MGR already set
[  728.747316][ T6930] binder: 6928:6930 ioctl 40046207 0 returned -16
[  728.793375][ T6930] binder: BINDER_SET_CONTEXT_MGR already set
[  728.816542][ T6942] binder: BINDER_SET_CONTEXT_MGR already set
[  728.823175][   T21] tipc: TX() has been purged, node left!
[  728.829317][ T6930] binder: 6928:6930 ioctl 40046207 0 returned -16
06:08:11 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
dup2(r1, r0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="040000000000000002000000233a65e10000000000000000c4a5000085010000000000000000000000000000000000000000000000000000080000000200000000000000000000001f000000ff0f0000000000000000000000000000000000000000000000000000ee00000001000000000000ff0000000009000000fdffffff430000007f00000000000000000000000000000000000000060000000300000000000000000000000500"/200])

[  728.840600][ T6942] binder: 6928:6942 ioctl 40046207 0 returned -16
06:08:11 executing program 1:
unshare(0x40000000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, r1, 0x0)
socket$pptp(0x18, 0x1, 0x2)

06:08:11 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b6300003a5aba9cb6994c8b3fcd077768cad993eb321fefd93463ef6ec598b237e3d4ac1086be83c495ca03367b1a848284f45807"], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
preadv(r4, &(0x7f00000023c0), 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r5, &(0x7f00000017c0), 0x218, 0x0)

[  728.977229][   T21] tipc: TX() has been purged, node left!
[  728.982056][ T6948] IPVS: ftp: loaded support on port[0] = 21
[  728.991180][ T6949] binder: 6946:6949 ioctl c0306201 0 returned -14
[  729.060391][   T21] tipc: TX() has been purged, node left!
[  729.066579][   T21] tipc: TX() has been purged, node left!
[  729.131253][ T6963] binder: 6956:6963 ioctl c0306201 0 returned -14
[  729.143976][   T21] tipc: TX() has been purged, node left!
[  729.150425][   T21] tipc: TX() has been purged, node left!
06:08:11 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
dup2(r1, r0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="040000000000000002000000233a65e10000000000000000c4a5000085010000000000000000000000000000000000000000000000000000080000000200000000000000000000001f000000ff0f0000000000000000000000000000000000000000000000000000ee00000001000000000000ff0000000009000000fdffffff430000007f00000000000000000000000000000000000000060000000300000000000000000000000500"/200])

[  729.222412][   T21] tipc: TX() has been purged, node left!
[  729.248145][ T6963] debugfs: Directory 'vcpu0' with parent '6963-7' already present!
[  729.259901][   T21] tipc: TX() has been purged, node left!
06:08:12 executing program 5:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r1, &(0x7f00000017c0), 0x218, 0x0)

[  729.296790][ T6982] binder: 6978:6982 ioctl c0306201 0 returned -14
[  729.306624][   T21] tipc: TX() has been purged, node left!
06:08:12 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r1, &(0x7f00000017c0), 0x218, 0x0)

06:08:12 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
dup2(r1, r0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="040000000000000002000000233a65e10000000000000000c4a5000085010000000000000000000000000000000000000000000000000000080000000200000000000000000000001f000000ff0f0000000000000000000000000000000000000000000000000000ee00000001000000000000ff0000000009000000fdffffff430000007f00000000000000000000000000000000000000060000000300000000000000000000000500"/200])

[  729.487103][   T21] tipc: TX() has been purged, node left!
[  729.577054][ T7003] binder: 7001:7003 ioctl c0306201 0 returned -14
[  729.637465][   T21] tipc: TX() has been purged, node left!
06:08:12 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
dup2(r1, r0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="040000000000000002000000233a65e10000000000000000c4a5000085010000000000000000000000000000000000000000000000000000080000000200000000000000000000001f000000ff0f0000000000000000000000000000000000000000000000000000ee00000001000000000000ff0000000009000000fdffffff430000007f00000000000000000000000000000000000000060000000300000000000000000000000500"/200])

06:08:12 executing program 5:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r3 = dup2(r2, r1)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000040)={0x4, 0x7, 0x8, 0x1, 0x40d, 0x2})
preadv(r0, &(0x7f00000017c0), 0x218, 0x0)

[  729.797037][   T21] tipc: TX() has been purged, node left!
[  729.811227][ T7012] binder: 7011:7012 ioctl c0306201 0 returned -14
[  729.925533][ T7017] binder: 7016:7017 ioctl 560a 20000040 returned -22
06:08:12 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
dup2(r1, r0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="040000000000000002000000233a65e10000000000000000c4a5000085010000000000000000000000000000000000000000000000000000080000000200000000000000000000001f000000ff0f0000000000000000000000000000000000000000000000000000ee00000001000000000000ff0000000009000000fdffffff430000007f00000000000000000000000000000000000000060000000300000000000000000000000500"/200])

[  729.987027][   T21] tipc: TX() has been purged, node left!
[  730.099718][ T7025] binder: 7024:7025 ioctl c0306201 0 returned -14
[  730.166971][   T21] tipc: TX() has been purged, node left!
06:08:12 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
dup2(r1, r0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="040000000000000002000000233a65e10000000000000000c4a5000085010000000000000000000000000000000000000000000000000000080000000200000000000000000000001f000000ff0f0000000000000000000000000000000000000000000000000000ee00000001000000000000ff0000000009000000fdffffff430000007f00000000000000000000000000000000000000060000000300000000000000000000000500"/200])

06:08:13 executing program 1:
unshare(0x40000000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, r1, 0x0)
socket$pptp(0x18, 0x1, 0x2)

[  730.296978][   T21] tipc: TX() has been purged, node left!
[  730.358008][ T7033] binder: 7031:7033 ioctl c0306201 0 returned -14
06:08:13 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
dup2(r1, r0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="040000000000000002000000233a65e10000000000000000c4a5000085010000000000000000000000000000000000000000000000000000080000000200000000000000000000001f000000ff0f0000000000000000000000000000000000000000000000000000ee00000001000000000000ff0000000009000000fdffffff430000007f00000000000000000000000000000000000000060000000300000000000000000000000500"/200])

[  730.447007][   T21] tipc: TX() has been purged, node left!
[  730.502190][ T7038] IPVS: ftp: loaded support on port[0] = 21
[  730.597057][   T21] tipc: TX() has been purged, node left!
[  730.603420][   T21] tipc: TX() has been purged, node left!
[  730.619812][ T7045] binder: 7042:7045 ioctl c0306201 0 returned -14
06:08:13 executing program 3:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r2, &(0x7f00000017c0), 0x218, 0x0)
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc044565d, &(0x7f0000000100)={0x9, 0xa, 0x4, 0x70000, 0xc0, {0x77359400}, {0x4, 0x8, 0x8, 0x4, 0x9, 0x40, "edfed86d"}, 0x9, 0x3, @offset, 0x9, 0x0, <r3=>r0})
setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4)

[  730.670377][   T21] tipc: TX() has been purged, node left!
[  730.726658][ T7073] binder: BINDER_SET_CONTEXT_MGR already set
[  730.746357][   T21] tipc: TX() has been purged, node left!
06:08:13 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
dup2(r1, r0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="040000000000000002000000233a65e10000000000000000c4a5000085010000000000000000000000000000000000000000000000000000080000000200000000000000000000001f000000ff0f0000000000000000000000000000000000000000000000000000ee00000001000000000000ff0000000009000000fdffffff430000007f00000000000000000000000000000000000000060000000300000000000000000000000500"/200])

[  730.780154][ T7073] binder: 7016:7073 ioctl 40046207 0 returned -16
[  730.787981][   T21] tipc: TX() has been purged, node left!
[  730.911566][ T7090] binder: 7088:7090 ioctl c0306201 0 returned -14
[  730.958358][   T21] tipc: TX() has been purged, node left!
06:08:13 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
dup2(r1, r0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="040000000000000002000000233a65e10000000000000000c4a5000085010000000000000000000000000000000000000000000000000000080000000200000000000000000000001f000000ff0f0000000000000000000000000000000000000000000000000000ee00000001000000000000ff0000000009000000fdffffff430000007f00000000000000000000000000000000000000060000000300000000000000000000000500"/200])

[  731.117071][   T21] tipc: TX() has been purged, node left!
[  731.148746][ T7096] binder: 7095:7096 ioctl c0306201 0 returned -14
06:08:14 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
dup2(r1, r0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="040000000000000002000000233a65e10000000000000000c4a5000085010000000000000000000000000000000000000000000000000000080000000200000000000000000000001f000000ff0f0000000000000000000000000000000000000000000000000000ee00000001000000000000ff0000000009000000fdffffff430000007f00000000000000000000000000000000000000060000000300000000000000000000000500"/200])

[  731.276915][   T21] tipc: TX() has been purged, node left!
[  731.386970][   T21] tipc: TX() has been purged, node left!
[  731.441301][ T7106] binder: 7105:7106 ioctl c0306201 0 returned -14
06:08:14 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
dup2(r1, r0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="040000000000000002000000233a65e10000000000000000c4a5000085010000000000000000000000000000000000000000000000000000080000000200000000000000000000001f000000ff0f0000000000000000000000000000000000000000000000000000ee00000001000000000000ff0000000009000000fdffffff430000007f00000000000000000000000000000000000000060000000300000000000000000000000500"/200])

[  731.537342][   T21] tipc: TX() has been purged, node left!
06:08:14 executing program 1:
unshare(0x40000000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, r1, 0x0)
socket$pptp(0x18, 0x1, 0x2)

[  731.663518][ T7112] binder: 7111:7112 ioctl c0306201 0 returned -14
06:08:14 executing program 3:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r2, &(0x7f00000017c0), 0x218, 0x0)
ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0)
r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
r4 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f0000000140))
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r5 = dup2(r4, r3)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r5, 0x5386, &(0x7f0000000040))

[  731.707678][   T21] tipc: TX() has been purged, node left!
[  731.766255][ T7117] IPVS: ftp: loaded support on port[0] = 21
[  731.838994][ T7124] binder: BINDER_SET_CONTEXT_MGR already set
[  731.857566][   T21] tipc: TX() has been purged, node left!
[  731.863924][   T21] tipc: TX() has been purged, node left!
[  731.881112][ T7124] binder: 7115:7124 ioctl 40046207 0 returned -16
[  731.918361][   T21] tipc: TX() has been purged, node left!
[  731.956181][   T21] tipc: TX() has been purged, node left!
[  731.993394][   T21] tipc: TX() has been purged, node left!
06:08:14 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
dup2(r1, r0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="040000000000000002000000233a65e10000000000000000c4a5000085010000000000000000000000000000000000000000000000000000080000000200000000000000000000001f000000ff0f0000000000000000000000000000000000000000000000000000ee00000001000000000000ff0000000009000000fdffffff430000007f00000000000000000000000000000000000000060000000300000000000000000000000500"/200])

06:08:14 executing program 5:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x218, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r3 = socket$inet6(0xa, 0x3, 0x9)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80)
getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000340)={@dev, 0x0, r5})
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@delchain={0x2c, 0x65, 0x800, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xf8548db10bebe119, 0x2}, {0xfff2, 0xfff6}, {0xfff2, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x6}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80000}, 0x11)

[  732.131356][ T7147] binder: 7146:7147 ioctl c0306201 0 returned -14
[  732.187003][   T21] tipc: TX() has been purged, node left!
06:08:15 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
dup2(r1, r0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="040000000000000002000000233a65e10000000000000000c4a5000085010000000000000000000000000000000000000000000000000000080000000200000000000000000000001f000000ff0f0000000000000000000000000000000000000000000000000000ee00000001000000000000ff0000000009000000fdffffff430000007f00000000000000000000000000000000000000060000000300000000000000000000000500"/200])

[  732.362389][ T7158] binder: 7157:7158 ioctl c0306201 0 returned -14
[  732.369183][   T21] tipc: TX() has been purged, node left!
06:08:15 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="040000000000000002000000233a65e10000000000000000c4a5000085010000000000000000000000000000000000000000000000000000080000000200000000000000000000001f000000ff0f0000000000000000000000000000000000000000000000000000ee00000001000000000000ff0000000009000000fdffffff430000007f00000000000000000000000000000000000000060000000300000000000000000000000500"/200])

06:08:15 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r1, &(0x7f00000011c0)=[{&(0x7f0000000040)=""/10, 0xa}, {&(0x7f0000000100)=""/140, 0x8c}, {&(0x7f00000001c0)=""/4096, 0x1000}], 0x3, 0x0)

[  732.547876][   T21] tipc: TX() has been purged, node left!
06:08:15 executing program 5:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r1 = openat$vhost_vsock(0xffffff9c, &(0x7f0000006cc0)='/dev/vhost-vsock\x00', 0x2, 0x0)
preadv(r1, &(0x7f0000000140)=[{&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/87, 0x44}, {&(0x7f0000000100)=""/29, 0x1d}], 0x3, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r2, &(0x7f00000017c0), 0x218, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r0, 0xc0fc4111, &(0x7f0000000180)={0x6, [0xffffffff, 0x7, 0x3], [{0x6, 0x32fd, 0x1, 0x0, 0x1}, {0x100000, 0x8, 0x0, 0x1, 0x1, 0x1}, {0x7, 0x101, 0x0, 0x0, 0x1}, {0x10001, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x8, 0x7}, {0x3, 0x3ff, 0x1, 0x0, 0x1, 0x1}, {0x7, 0xfffffffa, 0x0, 0x0, 0x0, 0x1}, {0x8000, 0x9, 0x0, 0x0, 0x1, 0x1}, {0x9, 0x10001}, {0x8, 0x4, 0x0, 0x1}, {0x0, 0x3, 0x1, 0x1, 0x1}, {0x6d14, 0x8001, 0x1, 0x1, 0x1}], 0x32b3})

[  732.638173][ T7169] binder: 7166:7169 ioctl c0306201 0 returned -14
06:08:15 executing program 3:
r0 = openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x10000, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00')
sendmsg$TIPC_NL_NET_GET(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000004}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x1dc, r1, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa1cf}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x12a22}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_LINK={0xac, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff97de}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6ae7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9ca}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffc0000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xac}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x10}, 0x40800)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r3, &(0x7f00000017c0), 0x218, 0x0)

[  732.726853][   T21] tipc: TX() has been purged, node left!
06:08:15 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="040000000000000002000000233a65e10000000000000000c4a5000085010000000000000000000000000000000000000000000000000000080000000200000000000000000000001f000000ff0f0000000000000000000000000000000000000000000000000000ee00000001000000000000ff0000000009000000fdffffff430000007f00000000000000000000000000000000000000060000000300000000000000000000000500"/200])

[  732.887934][   T21] tipc: TX() has been purged, node left!
06:08:15 executing program 1:
unshare(0x0)
socket$inet(0x2, 0x4, 0x8c1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, r1, 0x0)
socket$pptp(0x18, 0x1, 0x2)

06:08:15 executing program 5:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0084320, &(0x7f0000000040)={0x3, &(0x7f0000000000)="4148c399f096bb244039c393d11c"})
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r3 = dup2(r2, r1)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$SOUND_MIXER_READ_RECMASK(r3, 0x80044dfd, &(0x7f0000000100))
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
ioctl$VIDIOC_G_EDID(r3, 0xc0245628, &(0x7f0000000180)={0x0, 0x200, 0x7fffffff, [], &(0x7f0000000140)=0x7})
preadv(r4, &(0x7f00000017c0), 0x218, 0x0)

06:08:15 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="040000000000000002000000233a65e10000000000000000c4a5000085010000000000000000000000000000000000000000000000000000080000000200000000000000000000001f000000ff0f0000000000000000000000000000000000000000000000000000ee00000001000000000000ff0000000009000000fdffffff430000007f00000000000000000000000000000000000000060000000300000000000000000000000500"/200])

[  733.036779][   T21] tipc: TX() has been purged, node left!
[  733.053161][ T7194] binder: 7192:7194 ioctl 80044dfd 20000100 returned -22
[  733.108931][ T7202] binder: 7192:7202 ioctl c0245628 20000180 returned -22
06:08:15 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="040000000000000002000000233a65e10000000000000000c4a5000085010000000000000000000000000000000000000000000000000000080000000200000000000000000000001f000000ff0f0000000000000000000000000000000000000000000000000000ee00000001000000000000ff0000000009000000fdffffff430000007f00000000000000000000000000000000000000060000000300000000000000000000000500"/200])

[  733.186841][   T21] tipc: TX() has been purged, node left!
06:08:16 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="040000000000000002000000233a65e10000000000000000c4a5000085010000000000000000000000000000000000000000000000000000080000000200000000000000000000001f000000ff0f0000000000000000000000000000000000000000000000000000ee00000001000000000000ff0000000009000000fdffffff430000007f00000000000000000000000000000000000000060000000300000000000000000000000500"/200])

[  733.367445][   T21] tipc: TX() has been purged, node left!
[  733.436082][ T7202] binder: BINDER_SET_CONTEXT_MGR already set
[  733.447085][ T7202] binder: 7192:7202 ioctl 40046207 0 returned -16
[  733.456427][ T7213] binder: BINDER_SET_CONTEXT_MGR already set
[  733.488255][ T7213] binder: 7192:7213 ioctl 40046207 0 returned -16
[  733.503054][ T7194] binder: 7192:7194 ioctl 80044dfd 20000100 returned -22
[  733.504195][ T7202] binder: 7192:7202 ioctl c0245628 20000180 returned -22
06:08:16 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="040000000000000002000000233a65e10000000000000000c4a5000085010000000000000000000000000000000000000000000000000000080000000200000000000000000000001f000000ff0f0000000000000000000000000000000000000000000000000000ee00000001000000000000ff0000000009000000fdffffff430000007f00000000000000000000000000000000000000060000000300000000000000000000000500"/200])

[  733.556820][   T21] tipc: TX() has been purged, node left!
06:08:16 executing program 3:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000480)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r4 = dup2(r3, r2)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
bind$rds(r4, &(0x7f0000000440)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000040)={0xad6, 0x4c7, 0x1, 0x2, 0x100}, 0x14)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
preadv(r6, &(0x7f0000000380)=[{&(0x7f0000000100)=""/4, 0x4}, {&(0x7f0000000140)=""/85, 0x55}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000200)=""/180, 0xb4}, {&(0x7f00000002c0)=""/189, 0xbd}], 0x5, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0185649, &(0x7f0000000400)={0xa30000, 0x35e, 0x9, <r7=>0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x9b090b, 0x8, [], @value=0x4}})
dup(r7)

06:08:16 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="040000000000000002000000233a65e10000000000000000c4a5000085010000000000000000000000000000000000000000000000000000080000000200000000000000000000001f000000ff0f0000000000000000000000000000000000000000000000000000ee00000001000000000000ff0000000009000000fdffffff430000007f00000000000000000000000000000000000000060000000300000000000000000000000500"/200])

[  733.681149][ T7223] binder: BINDER_SET_CONTEXT_MGR already set
[  733.700888][ T7223] binder: 7222:7223 ioctl 40046207 0 returned -16
[  733.706650][   T21] tipc: TX() has been purged, node left!
06:08:16 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x44}}, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000040)=[@acquire={0x40046305, 0x1}], 0x6e, 0x0, &(0x7f0000000100)="bf352aafed0e6d5d0b9baf85f22152958a2e297dfa5013769e515c20aa928d7d50b8c3af35cf2a86e545be818b9887ba96a6877ac414af0dacd2d8b0479ca9eade69722027611015e56d98fd2d7a332e515d56ef8d1047a9db284a979a6d65d66b80484afd926c5c720ceb23dafb"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r3, &(0x7f00000017c0), 0x218, 0x0)

06:08:16 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="040000000000000002000000233a65e10000000000000000c4a5000085010000000000000000000000000000000000000000000000000000080000000200000000000000000000001f000000ff0f0000000000000000000000000000000000000000000000000000ee00000001000000000000ff0000000009000000fdffffff430000007f00000000000000000000000000000000000000060000000300000000000000000000000500"/200])

[  733.868491][   T21] tipc: TX() has been purged, node left!
06:08:16 executing program 5:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r1, &(0x7f00000017c0), 0x218, 0x0)

[  733.971101][   T21] tipc: TX() has been purged, node left!
[  733.981317][   T21] tipc: TX() has been purged, node left!
[  734.009917][   T21] tipc: TX() has been purged, node left!
06:08:16 executing program 4:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="040000000000000002000000233a65e10000000000000000c4a5000085010000000000000000000000000000000000000000000000000000080000000200000000000000000000001f000000ff0f0000000000000000000000000000000000000000000000000000ee00000001000000000000ff0000000009000000fdffffff430000007f00000000000000000000000000000000000000060000000300000000000000000000000500"/200])

[  734.042337][   T21] tipc: TX() has been purged, node left!
[  734.081333][   T21] tipc: TX() has been purged, node left!
06:08:16 executing program 1:
unshare(0x0)
socket$inet(0x2, 0x4, 0x8c1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, r1, 0x0)
socket$pptp(0x18, 0x1, 0x2)

[  734.090417][ T7233] binder: BINDER_SET_CONTEXT_MGR already set
[  734.096421][ T7233] binder: 7232:7233 ioctl 40046207 0 returned -16
06:08:16 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r3 = dup2(r2, r1)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$HIDIOCGRDESC(r3, 0x90044802, &(0x7f0000000100)={0x549, "6ddec9a653fa1c6d9fabd8ae92f414b3d58957c4c01c44b71781cba7d0236bc424ddb5ee4f809563cf22d42ed9b8a890441d4fc63afc5c4d92206d951e84dd0f31aed68a07dcf19c67a162a1d06b669a57f7be4b814eb5cca0970e084f06449467957b5a043ac682d16bee2b3085b7da2cd426032d43e54d79cc92498b1d76f2cc228f3158ba4c3889fb0eadfd20923554456da3b14d43a97600a7a7738084c90cdf9fa47593360edc050e8c9857e6fbfba36dc2a6c6c22734944ababc8d6570061c918cd6b76006782c51749e65b0cfd4c43ab7385363a9e45377b03f7704d8cf097a6caafa60fa279c9428d01c72558e781e05997f2228f5f6aee88691da16e2dcd844518e1dba3d187902eded86a58dfd9be0395f241f625e67ab7d78b09cb429522d9810fa374b7b160567a9e24283a4d026536510acae6797c4ebd46a4d77b4ee307067a67aa770e75dec189f999486c7c9dec3a0da05bfe7112f344104a4199568dc5135e3735cd52cf5b268b076a8c3daa374b2d65e7a59ab852154319a3625c22a3b7e98e8cb241ff06c018b5a75ca95254c8161e689f3e6704d533e074c72540d8bb774e0df0509766be3e66b992a581bc26f48385afbf0426b03c011eb4524da43d57eb27cb67b828750a66a2ff473cae94625cf7a6a3cb33b8dd3dd66b56fe822fe6dc0d375fae1b09f0adc7880a6423cb5d3390b13af4a836943de7440d7feced7a076c8f493fb810cad3b8dca6d64fb9739b89571e5ceae4aaeba518801b5ace2b188c5bd12a714428207293c655e9fe18027eaa7285a7a4b588482cde550b55a65629d41f77ba248faae13e94a84798f975be8efa2c0999f0c785d2d1ac3fa314086dd6d7a0544e8178dfcde558521094d653e03a64f61778c8d2b97135a38d781f833a832642eb2994ee9fc5fbe878911b9556143a3ce7c32393000d17117e8e903482ac452d7e8aa35c598f4a3c258570beee7550fbbff4b7be7f32f93e24541b426852b76f9462f9438ef7367c0904e4a44c64299f87a1dc9f9604c2e1721cf21de27685c4670e1184a0967bc2bcc756e677ae97b6679abe97b1cf539784a92d84898ac07317e64e74b37e69ec0f60b34c083b12160f212c9cd19a025c4010f650a090f4b7e7d1f73f409c0541856c705ff75fc8aaced128b8296e75fbf9a081cbc137745cccfdad1a288666472dd4f5b1085c78956b82bd686583bd9a133cdafd4eadc8f473e2d0a133e667ae81a939fed89ebf3b5e09c41e0297666805854c97b436a4f32a4fb305e52eb796be486e890f79406ce7b294d3d1a6dc765013182a0b34d5c436810b901f9de9512f1eea9eb595af993dc8dc3cb2e7545d8a5cbb3e01bdd07786c76f43fc296a345b8a4bb0dd20b4dcb2be066b9fa1aafe658781a6e63b7ae9a83d493938f8699af79075815c598b6b084772e8b9f16f2739fad547471f1555f4ce54414d438b8a9c182edd339db180bf190502d701129733ea888eb3c053872065c42bd41e48a6be9d189d047bc4bd8525b852864f1e35386169a7bfa57ad2ab7c98a0c29d8231592d314306b5dfaae10ad4f117986353c12541850a480499503f3b8a1f3bc3670dbec6321bab98bdaf5f87f9215f4135d9aa2585c0030003538e8c57d45881647007f3f70a39ee59b8a287efe43a2a0d3d047242a8873364fc8293d36889fe657fd5c19714374e7fb4fe06ee61cbdd9c65277cb17665e9ee1aa6a89a120b3964f260b0ab6866b3e7f04f9a18b521dcf7bc7b1d76340363900647aca6219b9a138f711ce7bb207852bcdbd049365009d82997c5083d917709e5aba3dc77f43d94acbaa9b3cc980ad54aac8cd3743671afdea75a972ffafd55e3b85c840a0d7d1b9c289ec4f2dd5feb290cf56a30a6ffbab3a0bb0"})
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r4, &(0x7f00000017c0), 0x218, 0x0)

06:08:16 executing program 4:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="040000000000000002000000233a65e10000000000000000c4a5000085010000000000000000000000000000000000000000000000000000080000000200000000000000000000001f000000ff0f0000000000000000000000000000000000000000000000000000ee00000001000000000000ff0000000009000000fdffffff430000007f00000000000000000000000000000000000000060000000300000000000000000000000500"/200])

[  734.261090][ T7248] binder: 7245:7248 ioctl 90044802 20000100 returned -22
[  734.269307][   T21] tipc: TX() has been purged, node left!
[  734.292707][ T7248] binder: BINDER_SET_CONTEXT_MGR already set
[  734.311700][ T7248] binder: 7245:7248 ioctl 40046207 0 returned -16
06:08:17 executing program 4:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="040000000000000002000000233a65e10000000000000000c4a5000085010000000000000000000000000000000000000000000000000000080000000200000000000000000000001f000000ff0f0000000000000000000000000000000000000000000000000000ee00000001000000000000ff0000000009000000fdffffff430000007f00000000000000000000000000000000000000060000000300000000000000000000000500"/200])

06:08:17 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000340)={@dev, 0x0, r1})
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001440)={{{@in6=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@local}, 0x0, @in=@private}}, &(0x7f0000001140)=0xe4)
r3 = socket$inet6(0xa, 0x3, 0x9)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80)
getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000340)={@dev, 0x0, r5})
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001580)={0x744, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x84, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x54, 0x4, [{0x5, 0x3f, 0x2, 0x4}, {0x9, 0x4, 0x5, 0x8}, {0x5, 0x0, 0x30, 0x101}, {0x3f, 0x81, 0x1f, 0x2}, {0x4, 0x49, 0x1, 0x9}, {0x1, 0x3f, 0x0, 0xffffffff}, {0x200, 0x81, 0x7f, 0x8}, {0x8000, 0x8, 0x5, 0xfffffff7}, {0x0, 0x4, 0x1, 0x31d04982}, {0x4, 0x1, 0x4, 0x7ff}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x34, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x4}}}]}}, {{0x8}, {0x1f8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x28ae}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x178, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x14, 0x4, [{0x8, 0x5, 0x4, 0x400}, {0x4, 0x5, 0x8, 0x8}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0x4, 0x6, 0x3, 0x1f}]}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x14, 0x4, [{0xff, 0x61, 0x1, 0xffff}, {0x3f, 0x58, 0x80, 0x3}]}}}]}}, {{0x8, 0x1, r2}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x80}}, {0x8, 0x6, r5}}}]}}]}, 0x744}, 0x1, 0x0, 0x0, 0x10}, 0x20000010)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4098, 0x1002}], 0x1, 0x4)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r6, &(0x7f00000017c0), 0x218, 0x0)

[  734.426780][   T21] tipc: TX() has been purged, node left!
06:08:17 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="040000000000000002000000233a65e10000000000000000c4a5000085010000000000000000000000000000000000000000000000000000080000000200000000000000000000001f000000ff0f0000000000000000000000000000000000000000000000000000ee00000001000000000000ff0000000009000000fdffffff430000007f00000000000000000000000000000000000000060000000300000000000000000000000500"/200])

[  734.596825][   T21] tipc: TX() has been purged, node left!
06:08:17 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="040000000000000002000000233a65e10000000000000000c4a5000085010000000000000000000000000000000000000000000000000000080000000200000000000000000000001f000000ff0f0000000000000000000000000000000000000000000000000000ee00000001000000000000ff0000000009000000fdffffff430000007f00000000000000000000000000000000000000060000000300000000000000000000000500"/200])

06:08:17 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000040))
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r3, &(0x7f00000017c0), 0x218, 0x0)

[  734.727508][ T7248] binder: BINDER_SET_CONTEXT_MGR already set
[  734.748383][ T7265] binder: 7245:7265 ioctl 90044802 20000100 returned -22
[  734.767097][   T21] tipc: TX() has been purged, node left!
[  734.786822][ T7266] binder: BINDER_SET_CONTEXT_MGR already set
[  734.792891][ T7248] binder: 7245:7248 ioctl 40046207 0 returned -16
[  734.809550][ T7266] binder: 7245:7266 ioctl 40046207 0 returned -16
06:08:17 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000080)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x14)
ioctl$UI_DEV_CREATE(r1, 0x5501)
write$uinput_user_dev(r1, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14]}, 0x45c)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r2, &(0x7f00000017c0), 0x218, 0x0)

[  734.885443][ T7271] binder: 7270:7271 ioctl 541c 20000040 returned -22
[  734.926664][   T21] tipc: TX() has been purged, node left!
06:08:17 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="040000000000000002000000233a65e10000000000000000c4a5000085010000000000000000000000000000000000000000000000000000080000000200000000000000000000001f000000ff0f0000000000000000000000000000000000000000000000000000ee00000001000000000000ff0000000009000000fdffffff430000007f00000000000000000000000000000000000000060000000300000000000000000000000500"/200])

[  735.020410][ T7279] input: syz1 as /devices/virtual/input/input8
[  735.086849][   T21] tipc: TX() has been purged, node left!
06:08:18 executing program 5:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000100)=""/237)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r3, &(0x7f00000017c0), 0x218, 0x0)

06:08:18 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="040000000000000002000000233a65e10000000000000000c4a5000085010000000000000000000000000000000000000000000000000000080000000200000000000000000000001f000000ff0f0000000000000000000000000000000000000000000000000000ee00000001000000000000ff0000000009000000fdffffff430000007f00000000000000000000000000000000000000060000000300000000000000000000000500"/200])

[  735.256665][   T21] tipc: TX() has been purged, node left!
06:08:18 executing program 1:
unshare(0x0)
socket$inet(0x2, 0x4, 0x8c1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, r1, 0x0)
socket$pptp(0x18, 0x1, 0x2)

06:08:18 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="040000000000000002000000233a65e10000000000000000c4a5000085010000000000000000000000000000000000000000000000000000080000000200000000000000000000001f000000ff0f0000000000000000000000000000000000000000000000000000ee00000001000000000000ff0000000009000000fdffffff430000007f00000000000000000000000000000000000000060000000300000000000000000000000500"/200])

[  735.404603][ T7296] binder: BINDER_SET_CONTEXT_MGR already set
[  735.406552][   T21] tipc: TX() has been purged, node left!
[  735.431218][ T7296] binder: 7295:7296 ioctl 40046207 0 returned -16
[  735.463816][ T7296] binder: 7295:7296 ioctl 8040450a 20000100 returned -22
[  735.472039][ T7301] binder: BINDER_SET_CONTEXT_MGR already set
[  735.506233][ T7301] binder: 7270:7301 ioctl 40046207 0 returned -16
[  735.533371][ T7310] binder: 7270:7310 ioctl 541c 20000040 returned -22
[  735.556610][   T21] tipc: TX() has been purged, node left!
06:08:18 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="040000000000000002000000233a65e10000000000000000c4a5000085010000000000000000000000000000000000000000000000000000080000000200000000000000000000001f000000ff0f0000000000000000000000000000000000000000000000000000ee00000001000000000000ff0000000009000000fdffffff430000007f00000000000000000000000000000000000000060000000300000000000000000000000500"/200])

06:08:18 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4085, 0xff5}], 0x1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r2, &(0x7f00000017c0), 0x218, 0x0)

[  735.645007][ T7314] input: syz1 as /devices/virtual/input/input9
[  735.709326][   T21] tipc: TX() has been purged, node left!
[  735.887660][   T21] tipc: TX() has been purged, node left!
06:08:18 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200f385542ffd947c2e7609fbd285609c378bdab6b7ad4a2a"], 0x2d, 0x0, 0x0})
r2 = dup2(r1, r0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="05630440fe3450a2e9b3f6d51589e9545490736cf4ab932c92375c5466fc4c0089e932ad00fb98eb85d67d890c665978f2c405aba318b7d5dc5cdb6db090c7dd072faef4413b58d7b9bb656ebecdce88fb5d7754aede365abf8bf427282134f03b9eca7519b0f6a48a"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r3 = openat$cgroup_ro(r2, &(0x7f0000000180)='memory.events\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x2, 0x5, 0x43, 0x1, 0x0, 0x2, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x800, 0x0, @perf_bp={&(0x7f0000000040), 0xc}, 0x4052, 0xfff, 0xd, 0x1, 0x20, 0xffffffe1, 0x3}, 0x0, 0x9, r3, 0x3)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r4, &(0x7f00000017c0), 0x218, 0x0)

06:08:18 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="0463"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  736.057058][   T21] tipc: TX() has been purged, node left!
[  736.079807][ T7325] binder: 7321:7325 ioctl c0306201 0 returned -14
[  736.086403][ T7328] binder: 7322:7328 unknown command 25348
[  736.092246][ T7328] binder: 7322:7328 ioctl c0306201 20000200 returned -22
[  736.115412][ T7329] binder: 7324:7329 unknown command -2047672318
[  736.134161][ T7332] binder: BINDER_SET_CONTEXT_MGR already set
[  736.145874][ T7329] binder: 7324:7329 ioctl c0306201 20000200 returned -22
06:08:18 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, 0x0)

[  736.168854][ T7332] binder: 7322:7332 ioctl 40046207 0 returned -16
06:08:19 executing program 5:
unshare(0x40000000)
socket$pptp(0x18, 0x1, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x34}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0)
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f00000005c0)={{0x2, 0x0, 0x80, {0x6000, 0x100000, 0x2}}, "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", "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"})

[  736.228419][   T21] tipc: TX() has been purged, node left!
06:08:19 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, 0x0)

[  736.346616][   T21] tipc: TX() has been purged, node left!
[  736.415485][ T7345] IPVS: ftp: loaded support on port[0] = 21
[  736.476755][   T21] tipc: TX() has been purged, node left!
[  736.482977][   T21] tipc: TX() has been purged, node left!
06:08:19 executing program 1:
unshare(0x40000000)
socket$inet(0x2, 0x0, 0x8c1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, r1, 0x0)
socket$pptp(0x18, 0x1, 0x2)

[  736.532130][   T21] tipc: TX() has been purged, node left!
06:08:19 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, 0x0)

[  736.597481][   T21] tipc: TX() has been purged, node left!
[  736.614901][   T21] tipc: TX() has been purged, node left!
[  736.640985][   T21] tipc: TX() has been purged, node left!
[  736.677144][   T21] tipc: TX() has been purged, node left!
[  736.697455][ T7364] IPVS: ftp: loaded support on port[0] = 21
06:08:19 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)=ANY=[])

[  736.817366][   T21] tipc: TX() has been purged, node left!
[  736.832716][   T21] tipc: TX() has been purged, node left!
[  736.874818][   T21] tipc: TX() has been purged, node left!
[  736.897272][ T7390] binder: 7321:7390 ioctl c0306201 0 returned -14
[  736.945794][   T21] tipc: TX() has been purged, node left!
06:08:19 executing program 5:
unshare(0x40000000)
socket$pptp(0x18, 0x1, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x34}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0)
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f00000005c0)={{0x2, 0x0, 0x80, {0x6000, 0x100000, 0x2}}, "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", "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"})

[  736.994114][   T21] tipc: TX() has been purged, node left!
[  737.028689][   T21] tipc: TX() has been purged, node left!
[  737.059836][   T21] tipc: TX() has been purged, node left!
06:08:19 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)=ANY=[])

06:08:19 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r1 = dup2(r0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x1002)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r4 = dup2(r3, r2)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0xffffffff)
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000100)=0x18)
openat$tun(0xffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x1000, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r5, &(0x7f00000017c0), 0x218, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f00000002c0)={'syz1', "52f3d04d27dc60d53467f0109ff58d30f91205325b3db15d8971f1149d8f0aa3401874517e7ecb73ed31ff9e2bade8cc61afc2038e7e85571f6df74c78b586aed4f5af76fbfe7f5cede91a1c118f19e764a4f49f2b54a8a15700e9f410046135c106388fa1d2a104249abfab265450c595d93463c3941fb11dc634941ef8d6f91f5d4b412e3b1ed86fe0562d8ae9f6be991a71d8051df35c29822d88898047b3435bb98a5ce2acb18aaa0f01ab36668eb0901d907d3282c56b7fe04ed39e1c874db082122e9152b04c4d920ebf5f91f16e0cc4a699690bcfc70fd97fe86035071969c8e03313f7192709797ad5b74f"}, 0xf3)

[  737.194568][ T7414] IPVS: ftp: loaded support on port[0] = 21
[  737.277464][   T21] tipc: TX() has been purged, node left!
06:08:20 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x2)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x218, 0x0)

06:08:20 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)=ANY=[])

[  737.333956][   T21] tipc: TX() has been purged, node left!
[  737.340100][   T21] tipc: TX() has been purged, node left!
[  737.386829][   T21] tipc: TX() has been purged, node left!
[  737.424024][   T21] tipc: TX() has been purged, node left!
[  737.506777][   T21] tipc: TX() has been purged, node left!
[  737.527187][   T21] tipc: TX() has been purged, node left!
06:08:20 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB])

[  737.564772][   T21] tipc: TX() has been purged, node left!
[  737.756475][   T21] tipc: TX() has been purged, node left!
06:08:20 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB])

06:08:20 executing program 5:
unshare(0x40000000)
socket$pptp(0x18, 0x1, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x34}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0)
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f00000005c0)={{0x2, 0x0, 0x80, {0x6000, 0x100000, 0x2}}, "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", "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"})

06:08:20 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='security.evm\x00', &(0x7f0000000140)=@v1={0x2, "3becedd5c67110ba6dd7e5241c2f"}, 0xf, 0x3)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x218, 0x0)

[  737.927777][   T21] tipc: TX() has been purged, node left!
[  738.013377][ T7465] IPVS: ftp: loaded support on port[0] = 21
06:08:20 executing program 1:
unshare(0x40000000)
socket$inet(0x2, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, r1, 0x0)
socket$pptp(0x18, 0x1, 0x2)

[  738.066467][   T21] tipc: TX() has been purged, node left!
06:08:20 executing program 3:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000480)='./file0\x00', 0x4008040, 0x0)
close(r1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000200)={0x13, 0x10, 0x8, {&(0x7f0000000000), r3, 0x1}}, 0x18)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000100)={0x15, 0x110, 0xfa00, {r3, 0x1, 0x0, 0x0, 0x0, @ib={0x1b, 0x2, 0x1, {"13246702e49380b91ea640f236e10552"}, 0xffffffff, 0x400, 0x4}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r4, &(0x7f00000017c0), 0x218, 0x0)

06:08:20 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB])

[  738.117661][   T21] tipc: TX() has been purged, node left!
[  738.130931][   T21] tipc: TX() has been purged, node left!
[  738.158475][   T21] tipc: TX() has been purged, node left!
[  738.193948][   T21] tipc: TX() has been purged, node left!
[  738.228438][ T7484] IPVS: ftp: loaded support on port[0] = 21
[  738.257531][   T21] tipc: TX() has been purged, node left!
[  738.370763][   T21] tipc: TX() has been purged, node left!
06:08:21 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="040000000000000002000000233a65e10000000000000000c4a5000085010000000000000000000000000000000000000000000000000000080000000200000000000000000000001f000000ff0f00"/100])

[  738.418490][   T21] tipc: TX() has been purged, node left!
06:08:21 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x1)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x14, 0x0, &(0x7f0000000100)="81d284454920c0f8ac33f15558f39df56acab518"})
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f0000000180)=0x5)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r3, &(0x7f00000017c0), 0x218, 0x0)

[  738.483988][   T21] tipc: TX() has been purged, node left!
[  738.541929][   T21] tipc: TX() has been purged, node left!
06:08:21 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB])

[  738.619259][   T21] tipc: TX() has been purged, node left!
[  738.625318][   T21] tipc: TX() has been purged, node left!
[  738.672890][   T21] tipc: TX() has been purged, node left!
[  738.717518][   T21] tipc: TX() has been purged, node left!
06:08:21 executing program 5:
unshare(0x40000000)
socket$pptp(0x18, 0x1, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x34}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="148fa00002e0370695f8729e480000000000000079ecac5d61398b63ae209b3421dc465504fd6fbda03472761850c80e9485d3837a76e945779caed0391b2fd70969e797884c4668fc8215f123d1622b8ee9ec5c587ea98464a344be42c5e13bd2e117f9831e0daf061ced3a89eb461bacb1d751176a9e1a9a4c8a02c7ff5cd7d900199b585fecf4573b367f9b7652cbbc632510e14ddf68297f1279bbb80cec0d97ddf84ef109bb93ff00a517c07910dd21ec4fe0703588babd7611be7d377816f4a469414f493737b93f4aca857af0118c10c2cc95a90b72e38b7498db5965f251c3eb9a65e6a59cf85aebeb0000596c8a7178214d9eedc4340775f1"], 0x14}}, 0x0)
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f00000005c0)={{0x2, 0x0, 0x80, {0x6000, 0x100000, 0x2}}, "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", "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"})

06:08:21 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB])

[  738.886331][   T21] tipc: TX() has been purged, node left!
[  738.911103][ T7551] IPVS: ftp: loaded support on port[0] = 21
[  739.036453][   T21] tipc: TX() has been purged, node left!
[  739.052673][   T21] tipc: TX() has been purged, node left!
06:08:21 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB])

[  739.087211][   T21] tipc: TX() has been purged, node left!
06:08:21 executing program 3:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
socket$inet_icmp(0x2, 0x2, 0x1)
r2 = dup2(r1, r0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000100)={0x100, 0x2, &(0x7f0000000000)=[0x3, 0xfffffc01], &(0x7f0000000040)=[0x5, 0x1f, 0x9, 0x7, 0xfffffffe, 0x0, 0x1], &(0x7f0000000080)=[0x1, 0x4d06, 0x101, 0xb706, 0x101, 0x1, 0xfc25, 0x1000, 0xa8a, 0x7], &(0x7f00000000c0)=[0xc0000000, 0x3, 0x2, 0x7, 0x2, 0xff, 0x8], 0x0, 0xbb})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x34}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, 0x2, 0x8, 0x101}, 0x14}}, 0x0)

[  739.134935][   T21] tipc: TX() has been purged, node left!
[  739.167145][   T21] tipc: TX() has been purged, node left!
[  739.241199][   T21] tipc: TX() has been purged, node left!
06:08:22 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="040000000000000002000000233a65e10000000000000000c4a50000850100"/50])

[  739.337658][ T7588] IPVS: ftp: loaded support on port[0] = 21
[  739.406323][   T21] tipc: TX() has been purged, node left!
[  739.414914][   T21] tipc: TX() has been purged, node left!
06:08:22 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r2 = gettid()
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r3, &(0x7f0000000a00)=[{0x0}], 0x1, 0x0)
perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x81, 0x40, 0x5, 0x0, 0x0, 0x100, 0x83010, 0xc, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x226, 0x2, @perf_config_ext={0x40, 0x68be}, 0x204, 0x80000001, 0x9f7, 0x1, 0x401, 0x8, 0xbff}, r2, 0xe, r3, 0x8)
r4 = syz_open_procfs(r2, &(0x7f00000000c0)='fd/3\x00')
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000100))
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
sendfile(r5, r1, &(0x7f0000000180)=0x101, 0x0)
r6 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x9, 0x280)
ioctl$RTC_AIE_ON(r6, 0x7001)
preadv(r4, &(0x7f0000000400)=[{&(0x7f0000000440)=""/174, 0xae}, {&(0x7f00000001c0)=""/232, 0xe8}, {&(0x7f00000002c0)=""/124, 0x7c}, {&(0x7f0000000340)=""/29, 0x1d}, {&(0x7f0000000380)=""/85, 0x55}], 0x5, 0x0)

[  739.476772][   T21] tipc: TX() has been purged, node left!
[  739.542280][   T21] tipc: TX() has been purged, node left!
[  739.555690][   T21] tipc: TX() has been purged, node left!
[  739.597466][   T21] tipc: TX() has been purged, node left!
06:08:22 executing program 1:
unshare(0x40000000)
socket$inet(0x2, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, r1, 0x0)
socket$pptp(0x18, 0x1, 0x2)

06:08:22 executing program 5:
unshare(0x40000000)
socket$pptp(0x18, 0x1, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x34}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0)

06:08:22 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB])

06:08:22 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x218, 0x0)
r1 = socket$caif_seqpacket(0x25, 0x5, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@private2, <r2=>0x0}, &(0x7f00000001c0)=0x14)
recvfrom(r1, &(0x7f0000000100)=""/130, 0x82, 0x2, &(0x7f0000000200)=@ll={0x11, 0x15, r2, 0x1, 0x5, 0x6, @broadcast}, 0x80)

[  739.758929][   T21] tipc: TX() has been purged, node left!
[  739.784349][ T7627] IPVS: ftp: loaded support on port[0] = 21
06:08:22 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB])

[  739.821152][ T7636] IPVS: ftp: loaded support on port[0] = 21
[  739.913322][   T21] tipc: TX() has been purged, node left!
[  739.962949][   T21] tipc: TX() has been purged, node left!
[  739.988654][   T21] tipc: TX() has been purged, node left!
06:08:22 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB])

[  740.025345][   T21] tipc: TX() has been purged, node left!
[  740.074688][   T21] tipc: TX() has been purged, node left!
[  740.111264][   T21] tipc: TX() has been purged, node left!
06:08:22 executing program 5:
unshare(0x40000000)
socket$pptp(0x18, 0x1, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x34}}, 0x0)

06:08:22 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="040000000000000002000000233a65e10000000000000000c4"])

06:08:23 executing program 0:
r0 = gettid()
ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000040)={'bridge_slave_1\x00', {0x2, 0x4e23, @multicast2}})
getpgid(r0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000001100)=""/4086, 0xff6}], 0x1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r2, &(0x7f00000017c0), 0x218, 0x0)

[  740.296956][   T21] tipc: TX() has been purged, node left!
[  740.320004][ T7702] IPVS: ftp: loaded support on port[0] = 21
[  740.396676][   T21] tipc: TX() has been purged, node left!
[  740.402883][   T21] tipc: TX() has been purged, node left!
[  740.438785][   T21] tipc: TX() has been purged, node left!
[  740.469428][ T7588] binder: 7587:7588 ioctl c03864bc 20000100 returned -22
[  740.479795][   T21] tipc: TX() has been purged, node left!
[  740.509417][   T21] tipc: TX() has been purged, node left!
[  740.532468][   T21] tipc: TX() has been purged, node left!
06:08:23 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="13000440b45343fab21baccf24baeeb6d81f5bed06b37ddc261021a362150e2c9b90a5c2ed6eee7a3ae52a0deb43e0bbcd1d83b43277f730f668f933aaf696eac016719605b60d55253fe105c659ba3e3db5bb4fefc118d3736caa802bf553a7d3c36ea324380f72b1d1cb6b587810966e33b34c7a116a6ea02c5c80a0d197b0e9c457995ac79dc2999d5df383feaa13d1a206"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="e0630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00'}, 0x10)
setsockopt$inet_mreqsrc(r2, 0x0, 0x28, &(0x7f0000000000)={@private=0xa010101, @remote, @local}, 0xc)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r5, &(0x7f00000017c0), 0x218, 0x0)

06:08:23 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x803)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x1002)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000280)=""/4101, 0x1005}, {&(0x7f00000001c0)=""/175, 0xaf}], 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
preadv(r3, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/4082, 0xff2}], 0x2, 0xfffffff7)

06:08:23 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB])

[  740.707330][   T21] tipc: TX() has been purged, node left!
06:08:23 executing program 1:
unshare(0x40000000)
socket$inet(0x2, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, r0, 0x0)
socket$pptp(0x18, 0x1, 0x2)

06:08:23 executing program 5:
unshare(0x40000000)
socket$pptp(0x18, 0x1, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)

06:08:23 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB])

[  740.827298][ T7743] binder: 7740:7743 unknown command 1074003987
[  740.838518][ T7743] binder: 7740:7743 ioctl c0306201 20000200 returned -22
[  740.856771][   T21] tipc: TX() has been purged, node left!
[  740.868147][ T7747] IPVS: ftp: loaded support on port[0] = 21
[  740.885365][ T7743] binder: BINDER_SET_CONTEXT_MGR already set
[  740.892679][ T7737] debugfs: Directory 'vcpu0' with parent '7737-8' already present!
[  740.910297][ T7743] binder: 7740:7743 ioctl 40046207 0 returned -16
[  740.927565][   T21] tipc: TX() has been purged, node left!
[  740.937130][   T21] tipc: TX() has been purged, node left!
[  740.947144][ T7758] binder: 7740:7758 unknown command 1074029536
06:08:23 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000040)={'icmp\x00'}, &(0x7f0000000100)=0x1e)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r2, &(0x7f00000017c0), 0x218, 0x0)

[  740.995217][ T7755] IPVS: ftp: loaded support on port[0] = 21
[  740.999269][ T7758] binder: 7740:7758 ioctl c0306201 20000280 returned -22
[  741.030643][   T21] tipc: TX() has been purged, node left!
[  741.075685][   T21] tipc: TX() has been purged, node left!
06:08:23 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB])

[  741.126433][   T21] tipc: TX() has been purged, node left!
[  741.170181][   T21] tipc: TX() has been purged, node left!
[  741.199582][   T21] tipc: TX() has been purged, node left!
06:08:24 executing program 5:
unshare(0x40000000)
socket$pptp(0x18, 0x1, 0x2)

[  741.248139][   T21] tipc: TX() has been purged, node left!
06:08:24 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="04000000000000000200000023"])

[  741.308156][   T21] tipc: TX() has been purged, node left!
[  741.333809][   T21] tipc: TX() has been purged, node left!
[  741.426332][ T7821] IPVS: ftp: loaded support on port[0] = 21
[  741.494664][   T21] tipc: TX() has been purged, node left!
[  741.500974][   T21] tipc: TX() has been purged, node left!
[  741.534675][   T21] tipc: TX() has been purged, node left!
06:08:24 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="04"])

06:08:24 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$TCSETXF(r2, 0x5434, &(0x7f0000000000)={0xfffc, 0x5, [0x200, 0x4, 0x800, 0x1, 0x5000], 0x2e1d})
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r3, &(0x7f00000017c0), 0x0, 0x488c)
read(r3, &(0x7f0000000040)=""/36, 0x24)

[  741.569577][   T21] tipc: TX() has been purged, node left!
[  741.602127][   T21] tipc: TX() has been purged, node left!
[  741.634173][   T21] tipc: TX() has been purged, node left!
[  741.665744][   T21] tipc: TX() has been purged, node left!
[  741.726692][   T21] tipc: TX() has been purged, node left!
[  741.732947][   T21] tipc: TX() has been purged, node left!
06:08:24 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB])

[  741.791220][ T7856] binder: 7849:7856 ioctl 5434 20000000 returned -22
06:08:24 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1acb8ecedc274ab4251f64b1de0608db9f7d33ab44e9d94b5c7d46cc23a5a090001a5bb20e8113ed4728c68cc87495d64020be44c54aa45e0925beb03acccde458f88a03c0fa29fde5c732522d855fc469699ee2b99d9eb7fba3d40c545167262e61f335e24a"], 0x0, 0x0, 0x0})
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x19, &(0x7f0000000240)={r4}, 0x8)
getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000040)={r4, 0x8001, 0xd66, 0x6547}, &(0x7f0000000100)=0x10)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r5, &(0x7f00000017c0), 0x218, 0x0)

06:08:24 executing program 5:
unshare(0x40000000)

[  741.926617][   T21] tipc: TX() has been purged, node left!
[  741.994230][ T7869] IPVS: ftp: loaded support on port[0] = 21
[  742.050895][   T21] tipc: TX() has been purged, node left!
[  742.058156][   T21] tipc: TX() has been purged, node left!
[  742.090585][   T21] tipc: TX() has been purged, node left!
06:08:24 executing program 1:
unshare(0x40000000)
socket$inet(0x2, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, r0, 0x0)
socket$pptp(0x18, 0x1, 0x2)

06:08:24 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$TCSETXF(r2, 0x5434, &(0x7f0000000000)={0xfffc, 0x5, [0x200, 0x4, 0x800, 0x1, 0x5000], 0x2e1d})
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r3, &(0x7f00000017c0), 0x0, 0x488c)
read(r3, &(0x7f0000000040)=""/36, 0x24)

06:08:24 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB])

06:08:24 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x2, 0x6, 0x201, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4041}, 0x40001)
preadv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f00000022c0)=""/4057, 0xfd9}], 0x1, 0xf6c3)
r1 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x7, 0x484001)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f00000003c0))
ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000200)={0x0, @bt={0x3, 0x9, 0x1, 0x1, 0x6, 0x9, 0x3, 0x42, 0x1, 0x9910, 0x9, 0x2, 0x2, 0x4477, 0x1d, 0x10, {0x3, 0xffffff47}}})
r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r3, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_MESH_PEER_AID={0x6}]}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x44, r3, 0x0, 0x70bd2a, 0x25dfdbfe}, 0x44}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000700)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)={0x380, r3, 0x304, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_IE={0x2e5, 0x2a, "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"}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x2}}, @NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0x29}}, @NL80211_ATTR_BSSID={0xa, 0xf5, @local}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x60, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @dev={[], 0x3f}}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @local}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xb, 0x1, "eef63b3b1c135a"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="61a83312999e"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x24, 0x1, "0027fe3dcad0332791e549a715ea518fa7d139adec4a0a950920053c4f7c7ead"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8}]}]}, 0x380}, 0x1, 0x0, 0x0, 0x8000}, 0x24004041)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r5, &(0x7f00000017c0), 0x218, 0x0)

[  742.243554][ T7894] binder: 7885:7894 ioctl 5434 20000000 returned -22
06:08:25 executing program 5:
unshare(0x0)

06:08:25 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB])

06:08:25 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$TCSETXF(r2, 0x5434, &(0x7f0000000000)={0xfffc, 0x5, [0x200, 0x4, 0x800, 0x1, 0x5000], 0x2e1d})
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r3, &(0x7f00000017c0), 0x0, 0x488c)
read(r3, &(0x7f0000000040)=""/36, 0x24)

[  742.350085][ T7904] IPVS: ftp: loaded support on port[0] = 21
06:08:25 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x3c1, 0x3, 0x268, 0xc8, 0xc8, 0xc8, 0x0, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa4, 0xc8}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'bond_slave_1\x00', 'veth1_to_bond\x00'}, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34, 'SET\x00'}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x2c4)
ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000040)={'bond_slave_1\x00', 0x1ff})
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x1, 0x4)
preadv(r1, &(0x7f00000017c0), 0x218, 0x0)

06:08:25 executing program 5:
unshare(0x0)

[  742.499503][ T7922] binder: 7921:7922 ioctl 5434 20000000 returned -22
[  742.503407][ T7928] xt_TCPMSS: Only works on TCP SYN packets
06:08:25 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$TCSETXF(r2, 0x5434, &(0x7f0000000000)={0xfffc, 0x5, [0x200, 0x4, 0x800, 0x1, 0x5000], 0x2e1d})
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r3, &(0x7f00000017c0), 0x0, 0x488c)
read(r3, &(0x7f0000000040)=""/36, 0x24)

06:08:25 executing program 5:
unshare(0x0)

06:08:25 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$TCSETXF(r2, 0x5434, &(0x7f0000000000)={0xfffc, 0x5, [0x200, 0x4, 0x800, 0x1, 0x5000], 0x2e1d})
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r3, &(0x7f0000000040)=""/36, 0x24)

06:08:25 executing program 1:
unshare(0x40000000)
socket$inet(0x2, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r0, 0x0)
socket$pptp(0x18, 0x1, 0x2)

[  742.733745][ T7950] binder: 7946:7950 ioctl 5434 20000000 returned -22
[  742.742150][ T7948] binder: 7945:7948 ioctl 5434 20000000 returned -22
06:08:25 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$TCSETXF(r2, 0x5434, &(0x7f0000000000)={0xfffc, 0x5, [0x200, 0x4, 0x800, 0x1, 0x5000], 0x2e1d})
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
read(0xffffffffffffffff, &(0x7f0000000040)=""/36, 0x24)

06:08:25 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r3, &(0x7f00000017c0), 0x218, 0xa)

[  742.865445][ T7953] IPVS: ftp: loaded support on port[0] = 21
06:08:25 executing program 5:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0)
getdents64(0xffffffffffffffff, 0x0, 0x0)
getdents64(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, &(0x7f00000000c0)=@ethernet={0x0, @remote}, &(0x7f00000002c0)=0x80)
write$sndseq(r1, &(0x7f0000000200)=[{0xcb, 0x0, 0x0, 0x0, @time={0xfff1ffff}, {}, {}, @connect}], 0x1fee00)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r2, &(0x7f00000017c0), 0x218, 0x0)

[  742.953457][ T7959] xt_TCPMSS: Only works on TCP SYN packets
[  742.978733][ T7960] binder: 7956:7960 ioctl 5434 20000000 returned -22
[  743.042239][ T7970] binder: 7967:7970 ioctl c0306201 0 returned -14
06:08:25 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$TCSETXF(r2, 0x5434, &(0x7f0000000000)={0xfffc, 0x5, [0x200, 0x4, 0x800, 0x1, 0x5000], 0x2e1d})
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
read(0xffffffffffffffff, &(0x7f0000000040)=""/36, 0x24)

[  743.097363][   T28] audit: type=1800 audit(1590127705.821:11): pid=7964 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=15692 res=0
06:08:25 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x23641c6522b4b9ae}, 0x4)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r2, &(0x7f00000017c0), 0x218, 0x0)

[  743.251772][ T7988] binder: 7986:7988 ioctl 5434 20000000 returned -22
06:08:26 executing program 1:
unshare(0x40000000)
socket$inet(0x2, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)

[  743.498869][ T7993] IPVS: ftp: loaded support on port[0] = 21
06:08:26 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r2, &(0x7f00000017c0), 0x218, 0x0)

06:08:26 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$TCSETXF(r2, 0x5434, &(0x7f0000000000)={0xfffc, 0x5, [0x200, 0x4, 0x800, 0x1, 0x5000], 0x2e1d})
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
read(0xffffffffffffffff, &(0x7f0000000040)=""/36, 0x24)

06:08:26 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x23641c6522b4b9ae}, 0x4)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r2, &(0x7f00000017c0), 0x218, 0x0)

[  743.627750][ T8003] binder: 8000:8003 ioctl 5434 20000000 returned -22
06:08:26 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$TCSETXF(r2, 0x5434, &(0x7f0000000000)={0xfffc, 0x5, [0x200, 0x4, 0x800, 0x1, 0x5000], 0x2e1d})
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r3, &(0x7f0000000040)=""/36, 0x24)

[  743.741889][ T8012] debugfs: Directory 'vcpu0' with parent '8012-7' already present!
06:08:26 executing program 5:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r1 = dup2(r0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r2, &(0x7f00000017c0), 0x218, 0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0)
io_submit(0x0, 0x2, &(0x7f0000000b00)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, 0x20, r3, 0x0}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)="0bd561670ac69d2f49046ca4bf9ba8a57a90cd45c62aa65829a95480b959e25ae2fc082ea8a7907dbc9cf2aa33a1a910f7e71d0194d931", 0x37}])
r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
r5 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r6 = dup2(r5, r4)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xd9, r0, &(0x7f0000000100)="5e71e1625d503fccbd917b34b041246d93a7f2f3c919f8bb85227f4a2065ab053be04033fbb73198aaa679735e6fa148a51d9263b0dc345aa43f4ca5897b9387605ea6538f43c2c3525b86b8d45746fea4a327a53df071754bbad98f690970557c9e28e74c74672498c1d1f186937b83c5d087958375ec2645d36c6c2f0506e95a6ddd9413736f2c403d8e4fa1ec01b56df34df89a724ac6b42ba41fa00fb3953f1fa9dc7024581e6f4146b947d087b65e2575981a5313e72c402972086c34bdf28e285ea31d012449", 0xc9, 0x0, 0x0, 0x0, r6}])

[  743.823769][ T8029] binder: 8028:8029 ioctl 5434 20000000 returned -22
06:08:26 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r3, &(0x7f0000000040)=""/36, 0x24)

06:08:26 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r1 = dup2(r0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0)
msgsnd(0x0, 0x0, 0x0, 0x0)
timer_create(0x3, &(0x7f0000000100)={0x0, 0x54, 0x2, @thr={&(0x7f00000001c0)="2576dd5a8514795bc07edd88b2fb0ab1bc3ad34f950d6c9dff30fa6e9fbfc83e7406267655a6ac94fffbc94a3e911814a62b51ba2f7868eb71290d4085d5896783bb3710412cd1d4bfa2fb9f31aecab2d633a81f30abb7367c5042c60a591b674f5efa6eb52f0d5d44c323d1b49ed39ffcc15b8791abc82b868f37b36c96884b03006249c495cba4c11acbd6478228184be40ae1833acd99ba6e4732ec38ac7956473dbb1695df9c1fa7acc516f90c84dea3a58422cc3b033723f445cbd1aa5e340b19a538", &(0x7f0000000000)="1f988e7b5d070c27c1216f7e334cb14dc5f968f99b455c1fffbb99e087da74f6de72ef7ac1592afbd29fced64c6ca41fb6628107b859b056f353abaa218b3bd9"}}, &(0x7f0000000180)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r3=>0x0)
io_pgetevents(r3, 0x7, 0x0, &(0x7f0000000380), 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r4, &(0x7f00000017c0), 0x218, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x4)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000040)={0x0, @aes128})

[  744.076370][ T8035] binder: BINDER_SET_CONTEXT_MGR already set
[  744.104173][ T8035] binder: 8034:8035 ioctl 40046207 0 returned -16
06:08:27 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r1 = dup2(r0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0)
msgsnd(0x0, 0x0, 0x0, 0x0)
timer_create(0x3, &(0x7f0000000100)={0x0, 0x54, 0x2, @thr={&(0x7f00000001c0)="2576dd5a8514795bc07edd88b2fb0ab1bc3ad34f950d6c9dff30fa6e9fbfc83e7406267655a6ac94fffbc94a3e911814a62b51ba2f7868eb71290d4085d5896783bb3710412cd1d4bfa2fb9f31aecab2d633a81f30abb7367c5042c60a591b674f5efa6eb52f0d5d44c323d1b49ed39ffcc15b8791abc82b868f37b36c96884b03006249c495cba4c11acbd6478228184be40ae1833acd99ba6e4732ec38ac7956473dbb1695df9c1fa7acc516f90c84dea3a58422cc3b033723f445cbd1aa5e340b19a538", &(0x7f0000000000)="1f988e7b5d070c27c1216f7e334cb14dc5f968f99b455c1fffbb99e087da74f6de72ef7ac1592afbd29fced64c6ca41fb6628107b859b056f353abaa218b3bd9"}}, &(0x7f0000000180)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r3=>0x0)
io_pgetevents(r3, 0x7, 0x0, &(0x7f0000000380), 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r4, &(0x7f00000017c0), 0x218, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x4)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000040)={0x0, @aes128})

06:08:27 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r3, &(0x7f0000000040)=""/36, 0x24)

06:08:27 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$VIDIOC_DBG_G_CHIP_INFO(r2, 0xc0c85666, &(0x7f0000000100)={{0x0, @name="0d79f2292936af50b489b246b1a5f356a86f11588099552ad7684ac64028fb49"}, "9cea1954769a1456935ceb904c1f45b030707890cc26179806d3b214182f27e6", 0x2})
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000022c0)=""/4104, 0x1008}], 0x1, 0xfffffffb)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r3, &(0x7f00000017c0), 0x218, 0x0)

06:08:27 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r3, &(0x7f0000000040)=""/36, 0x24)

[  744.551610][ T8048] binder: 8047:8048 ioctl c0c85666 20000100 returned -22
06:08:27 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r1 = dup2(r0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0)
msgsnd(0x0, 0x0, 0x0, 0x0)
timer_create(0x3, &(0x7f0000000100)={0x0, 0x54, 0x2, @thr={&(0x7f00000001c0)="2576dd5a8514795bc07edd88b2fb0ab1bc3ad34f950d6c9dff30fa6e9fbfc83e7406267655a6ac94fffbc94a3e911814a62b51ba2f7868eb71290d4085d5896783bb3710412cd1d4bfa2fb9f31aecab2d633a81f30abb7367c5042c60a591b674f5efa6eb52f0d5d44c323d1b49ed39ffcc15b8791abc82b868f37b36c96884b03006249c495cba4c11acbd6478228184be40ae1833acd99ba6e4732ec38ac7956473dbb1695df9c1fa7acc516f90c84dea3a58422cc3b033723f445cbd1aa5e340b19a538", &(0x7f0000000000)="1f988e7b5d070c27c1216f7e334cb14dc5f968f99b455c1fffbb99e087da74f6de72ef7ac1592afbd29fced64c6ca41fb6628107b859b056f353abaa218b3bd9"}}, &(0x7f0000000180)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r3=>0x0)
io_pgetevents(r3, 0x7, 0x0, &(0x7f0000000380), 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r4, &(0x7f00000017c0), 0x218, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x4)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000040)={0x0, @aes128})

[  744.618934][ T8053] binder: 8047:8053 ioctl c0c85666 20000100 returned -22
06:08:27 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r3, &(0x7f0000000040)=""/36, 0x24)

06:08:27 executing program 5:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/snmp6\x00')
preadv(r1, &(0x7f00000017c0), 0x218, 0x0)
r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f00000001c0)=0x9)
r4 = dup2(r3, r2)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000300)={0x4, 0x0, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00')
sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000003c0)={0x2c, r6, 0x1, 0x0, 0x0, {0x17}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x30, r6, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x1}, @ETHTOOL_A_LINKINFO_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c000}, 0x84)

06:08:27 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r0 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x80000, 0x0)
recvfrom$rxrpc(r0, &(0x7f0000000100)=""/157, 0x9d, 0x100, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r1, &(0x7f00000017c0), 0x218, 0x0)

06:08:27 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r3, &(0x7f0000000040)=""/36, 0x24)

[  744.943660][ T8067] binder: BINDER_SET_CONTEXT_MGR already set
[  744.985886][ T8067] binder: 8060:8067 ioctl 40046207 0 returned -16
06:08:27 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r3, &(0x7f0000000040)=""/36, 0x24)

06:08:27 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r1 = dup2(r0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0)
msgsnd(0x0, 0x0, 0x0, 0x0)
timer_create(0x3, &(0x7f0000000100)={0x0, 0x54, 0x2, @thr={&(0x7f00000001c0)="2576dd5a8514795bc07edd88b2fb0ab1bc3ad34f950d6c9dff30fa6e9fbfc83e7406267655a6ac94fffbc94a3e911814a62b51ba2f7868eb71290d4085d5896783bb3710412cd1d4bfa2fb9f31aecab2d633a81f30abb7367c5042c60a591b674f5efa6eb52f0d5d44c323d1b49ed39ffcc15b8791abc82b868f37b36c96884b03006249c495cba4c11acbd6478228184be40ae1833acd99ba6e4732ec38ac7956473dbb1695df9c1fa7acc516f90c84dea3a58422cc3b033723f445cbd1aa5e340b19a538", &(0x7f0000000000)="1f988e7b5d070c27c1216f7e334cb14dc5f968f99b455c1fffbb99e087da74f6de72ef7ac1592afbd29fced64c6ca41fb6628107b859b056f353abaa218b3bd9"}}, &(0x7f0000000180)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r3=>0x0)
io_pgetevents(r3, 0x7, 0x0, &(0x7f0000000380), 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r4, &(0x7f00000017c0), 0x218, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x4)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000040)={0x0, @aes128})

06:08:28 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r3, &(0x7f0000000040)=""/36, 0x24)

[  745.373569][ T8080] binder: BINDER_SET_CONTEXT_MGR already set
[  745.399464][ T8080] binder: 8079:8080 ioctl 40046207 0 returned -16
06:08:28 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r4 = dup2(r3, r2)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x19, &(0x7f0000000240)={r7}, 0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={r7, 0x58, &(0x7f0000000100)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e21, 0x566, @remote, 0x3}, @in6={0xa, 0x4e20, 0x10001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000180)=0xc)
preadv(r1, &(0x7f00000017c0), 0x218, 0x0)

06:08:28 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r3, &(0x7f0000000040)=""/36, 0x24)

06:08:28 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000040)={0x3c, @remote, 0x4e21, 0x1, 'sh\x00', 0x0, 0x523f290b, 0x6f}, 0x2c)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r1 = socket(0x1e, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00')
r4 = socket$inet6_dccp(0xa, 0x6, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x1c, r3, 0x27, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0)
sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r3, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x2000090)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000180)=0xfff, &(0x7f00000001c0)=0x2)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r7 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x80000, 0x0)
ioctl$KVM_S390_INTERRUPT_CPU(r7, 0x4010ae94, &(0x7f0000000140)={0x8, 0x8000, 0x1})
preadv(r6, &(0x7f00000017c0), 0x218, 0x0)

[  745.652248][ T8087] binder: BINDER_SET_CONTEXT_MGR already set
[  745.665296][ T8087] binder: 8085:8087 ioctl 40046207 0 returned -16
06:08:28 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r3, &(0x7f0000000040)=""/36, 0x24)

[  745.728293][ T8087] binder: BINDER_SET_CONTEXT_MGR already set
[  745.771547][ T8087] binder: 8085:8087 ioctl 40046207 0 returned -16
06:08:28 executing program 5:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x4c, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x3651}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0xaf8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xbe}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x4c}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, 0x2, 0x8, 0x101}, 0x14}}, 0x0)

06:08:28 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r2, &(0x7f0000000040)=""/36, 0x24)

06:08:28 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r2 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x400, @loopback}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)
r3 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="1a614beab760000036c64b2f76922aa4741ca6dd052100000000ffff2e41bac8d1e83ecf8c0d0879d38efc06850000ffffffe900"]})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00')
r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000000))
sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000100)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xd490010}, 0xc, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRESOCT=r4, @ANYRESHEX=r5], 0x3}, 0x1, 0x0, 0x0, 0x4c051}, 0x1)
sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x44, r4, 0x20, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x0)
sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000200", @ANYRES16=r4, @ANYBLOB="10002bbd7000fcdbdf25040000000800040003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20049045}, 0x8000)
sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x40, r4, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x77b}]}, 0x40}, 0x1, 0x0, 0x0, 0x200408c0}, 0x80)
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r4, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x401}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_virt_wifi\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0d6}, 0x4000)
sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x128, r4, 0x100, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x200}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7fffffff}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010100}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x40}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xb}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x20}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x800000}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3d, 0x9}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x27d}]}, 0x128}, 0x1, 0x0, 0x0, 0x20041814}, 0x0)
preadv(r1, &(0x7f00000017c0), 0x218, 0x0)

[  745.981768][ T8096] IPVS: ftp: loaded support on port[0] = 21
06:08:28 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r2, &(0x7f0000000040)=""/36, 0x24)

06:08:29 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r2, &(0x7f0000000040)=""/36, 0x24)

06:08:29 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0536dd35"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x7}, 0x2)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r1 = gettid()
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r2, &(0x7f0000000a00)=[{0x0}], 0x1, 0x0)
perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x81, 0x40, 0x5, 0x0, 0x0, 0x100, 0x83010, 0xc, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x226, 0x2, @perf_config_ext={0x40, 0x68be}, 0x204, 0x80000001, 0x9f7, 0x1, 0x401, 0x8, 0xbff}, r1, 0xe, r2, 0x8)
r3 = gettid()
ptrace$setopts(0xffffffffffffffff, r3, 0x0, 0x0)
r4 = syz_open_procfs(r3, &(0x7f0000000140)='fd/3\x00')
preadv(r4, &(0x7f00000017c0), 0x218, 0x0)
getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000040)=0x9, &(0x7f0000000100)=0x1)

06:08:29 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r3, &(0x7f0000000040)=""/36, 0x24)

06:08:29 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r1, &(0x7f00000017c0), 0x218, 0x7ffff000)

06:08:29 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r3, &(0x7f0000000040)=""/36, 0x24)

06:08:29 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r1 = dup2(r0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r2, &(0x7f00000017c0), 0x218, 0x6c000000)

06:08:29 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x1fa, 0x0)

06:08:29 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r3, &(0x7f0000000040)=""/36, 0x24)

06:08:30 executing program 5:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r1, &(0x7f00000017c0), 0x20b, 0x0)

06:08:30 executing program 1:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x34}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, 0x2, 0x8, 0x101}, 0x14}}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000140)=0x1)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r3 = dup2(r2, r1)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000000)=[{0x3, 0x3, {0x1, 0xf0}, {0x2, 0x1}}, {0x2, 0x3, {0x2, 0x0, 0x1}, {0x0, 0x1}, 0xfe, 0x1}, {0x3, 0x0, {0x1}, {0x1, 0x1, 0x2}, 0xfd, 0xfe}, {0x2, 0x3, {0x0, 0xf0, 0x3}, {0x2, 0xff, 0x3}, 0x0, 0xff}, {0x0, 0x0, {0x1, 0xff, 0x1}, {0x2, 0x0, 0x1}, 0xfd, 0xff}, {0x2, 0x3, {0x2}, {0x0, 0x1, 0x3}}], 0xa8)

06:08:30 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r1 = dup2(0xffffffffffffffff, r0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r2, &(0x7f0000000040)=""/36, 0x24)

06:08:30 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x5c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffff8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000000}, 0x4c)
r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r4 = dup2(r3, r2)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000001100))
ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, &(0x7f0000000100)=""/4096)
preadv(r1, &(0x7f00000017c0), 0x218, 0x0)

06:08:30 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x1f2, 0x0)

06:08:30 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r1 = dup2(0xffffffffffffffff, r0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r2, &(0x7f0000000040)=""/36, 0x24)

[  747.355836][ T8157] binder: 8153:8157 ioctl 8040450a 20000100 returned -22
[  747.356432][ T8156] IPVS: ftp: loaded support on port[0] = 21
06:08:30 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r1 = dup2(0xffffffffffffffff, r0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r2, &(0x7f0000000040)=""/36, 0x24)

06:08:30 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r1, &(0x7f0000000040)=""/36, 0x24)

06:08:30 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r1, &(0x7f0000000040)=""/36, 0x24)

06:08:30 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r1, &(0x7f0000000040)=""/36, 0x24)

[  748.072680][ T8157] binder: BINDER_SET_CONTEXT_MGR already set
[  748.111041][ T8157] binder: 8153:8157 ioctl 40046207 0 returned -16
[  748.113401][ T8197] binder: 8153:8197 ioctl 8040450a 20000100 returned -22
06:08:30 executing program 0:
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000240)={0x6, 0x100, 0xa, 0x39, 0x4})
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x800)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0xe6, "3838e3b75fee0f50a196c974abf8b02f7d6dad3c5c2cc2883fdfc80682690190b14d1fa0502ed28d6c69c541fc2996e124f919e0434ab8e645e87590ab9bc9b7f2a66b8e738b5e5b395301388a94700adb5e03c98b3d18b4d4e5b985f2745512a3ebb9b9ee2200b49fe51e8c8c53ebd12cf23f302a9d436d25a9654afba557bbcb7b21aa5a28af97566a761be11a5c080ea47c2978b895a0f672828ceee3049673403b83f234436dccf7f1760d7f15891fd53d168933a41b10ecdc9b1cdebdd53cba2aa03b51078896bbd33a6e2a72f8804283af71be220a5d27564bbb5a64412dd76c59425d"}, &(0x7f0000000040)=0x10a)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r3, &(0x7f00000017c0), 0x218, 0x0)

06:08:30 executing program 5:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r1 = dup2(0xffffffffffffffff, r0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r2, &(0x7f0000000040)=""/36, 0x24)

06:08:31 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r1, &(0x7f0000000040)=""/36, 0x24)

06:08:31 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r1, &(0x7f00000017c0), 0x1fd, 0x0)

06:08:31 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x206, 0x0)

06:08:31 executing program 5:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x34}}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r3 = dup2(r2, r1)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x5c, 0x0, 0xb, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x4008080)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, 0x2, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8000}}, 0x14}, 0x1, 0x0, 0x0, 0x40900}, 0x0)

06:08:31 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r1, &(0x7f0000000040)=""/36, 0x24)

[  748.604581][ T8212] IPVS: ftp: loaded support on port[0] = 21
06:08:31 executing program 3:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r1, &(0x7f0000000040)=""/36, 0x24)

[  748.691779][ T8206] binder: BINDER_SET_CONTEXT_MGR already set
[  748.717270][ T8206] binder: 8203:8206 ioctl 40046207 0 returned -16
06:08:31 executing program 3:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r1, &(0x7f0000000040)=""/36, 0x24)

06:08:31 executing program 3:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r1, &(0x7f0000000040)=""/36, 0x24)

06:08:31 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x1f8, 0x0)

06:08:31 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x1e4, 0x0)

06:08:32 executing program 3:
openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r1, &(0x7f0000000040)=""/36, 0x24)

06:08:32 executing program 3:
openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r1, &(0x7f0000000040)=""/36, 0x24)

06:08:32 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000000)=0x9)
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x34}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, 0x2, 0x8, 0x101}, 0x14}}, 0x0)

06:08:32 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000000)=0x9)
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x34}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, 0x2, 0x8, 0x101}, 0x14}}, 0x0)

[  749.613637][ T8260] binder: 8258:8260 ioctl c0045006 20000000 returned -22
06:08:32 executing program 3:
openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r1, &(0x7f0000000040)=""/36, 0x24)

[  749.673927][ T8262] IPVS: ftp: loaded support on port[0] = 21
[  749.761557][ T8265] binder: 8263:8265 ioctl c0045006 20000000 returned -22
[  749.833019][ T8265] IPVS: ftp: loaded support on port[0] = 21
06:08:32 executing program 5:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000000008010100000000000000000000797a31000000000600024000000000050003002100000067e301fa6a14617af3b86a76d2bdefb4720b192a03edf14585e4c70feef96b6665e50f892826f0a197cbaf58377a6ab3b1bffa7c93c265b54118ac9293e186c632893562352d67cb6a59e6c43bacdec947226e2be55146d14bd739dc4c1a657d9cd9d9d7f09b246872931f1a65a6c2701be62d1f959343e8c052197e7be24a752055dbfa9b1d0e0d497fc19e389310cb0336224ca34bd40266"], 0x34}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, 0x2, 0x8, 0x101}, 0x14}}, 0x0)

06:08:32 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r1, &(0x7f0000000040)=""/36, 0x24)

06:08:32 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000006c0)={<r3=>0x0, @dev, @empty}, &(0x7f0000000700)=0xc)
sendmsg$FOU_CMD_ADD(r0, &(0x7f00000007c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008804}, 0x40000)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r4, &(0x7f00000017c0), 0x218, 0x0)

06:08:32 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r1, &(0x7f0000000040)=""/36, 0x24)

[  750.130645][ T8304] IPVS: ftp: loaded support on port[0] = 21
06:08:33 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r0, &(0x7f0000000040)=""/36, 0x24)

06:08:33 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
read(r0, &(0x7f0000000040)=""/36, 0x24)

06:08:33 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
read(r0, &(0x7f0000000040)=""/36, 0x24)

06:08:33 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x0, 0x8001)

06:08:33 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
read(r0, &(0x7f0000000040)=""/36, 0x24)

[  751.221273][ T8304] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'.
06:08:34 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000000)=0x9)
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x34}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, 0x2, 0x8, 0x101}, 0x14}}, 0x0)

06:08:34 executing program 5:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)

06:08:34 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(0xffffffffffffffff, &(0x7f0000000040)=""/36, 0x24)

06:08:34 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r1, &(0x7f00000017c0), 0x218, 0x0)
r2 = accept4(r0, &(0x7f0000000100)=@generic, &(0x7f0000000040)=0x80, 0x180800)
sendmsg$rds(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000180)=""/174, 0xae}, {&(0x7f0000000240)=""/192, 0xc0}, {&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000380)=""/9, 0x9}, {&(0x7f00000003c0)=""/169, 0xa9}, {&(0x7f0000000480)=""/166, 0xa6}], 0x6, &(0x7f0000000600)=[@mask_cswp={0x58, 0x114, 0x9, {{0x7, 0x8}, &(0x7f0000000580)=0x3, &(0x7f00000005c0)=0x80, 0x0, 0x138c0000000, 0x800, 0x11b, 0x9, 0x80}}], 0x58, 0x4000}, 0x0)

06:08:34 executing program 4:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00')
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x34}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, 0x2, 0x8, 0x101}, 0x14}}, 0x0)

06:08:34 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(0xffffffffffffffff, &(0x7f0000000040)=""/36, 0x24)

[  751.952645][ T8368] IPVS: ftp: loaded support on port[0] = 21
[  751.961681][ T8370] binder: 8366:8370 ioctl c0306201 0 returned -14
[  751.968412][ T8369] binder: 8365:8369 ioctl c0045006 20000000 returned -22
[  752.035265][ T8372] IPVS: ftp: loaded support on port[0] = 21
06:08:34 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(0xffffffffffffffff, &(0x7f0000000040)=""/36, 0x24)

06:08:35 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r0, 0x0, 0x0)

06:08:35 executing program 0:
unshare(0x40000000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, r1, 0x5acf8000)
socket$pptp(0x18, 0x1, 0x2)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x34}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, 0x2, 0x8, 0x101}, 0x14}}, 0x0)

06:08:35 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x1cc, 0x0)

[  752.629175][ T8383] IPVS: ftp: loaded support on port[0] = 21
06:08:35 executing program 5:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x1b1, 0x0)

06:08:36 executing program 3:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x0, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x34}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, 0x2, 0x8, 0x101}, 0x14}}, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, 0xffffffffffffffff)
getsockname$inet(r2, &(0x7f0000000240)={0x2, 0x0, @remote}, &(0x7f00000002c0)=0x10)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death={0x400c630f, 0x3}], 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000440)={0x18})
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={0xffffffffffffffff, r2, 0xc, 0x0, r2}, 0x14)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
sendmsg$AUDIT_USER_TTY(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xcc, 0x464, 0x100, 0x70bd29, 0x25dfdbfc, "7628d0a5b2a09a2f7cb99452d3b263f6cd66f2c24de85b92b4a48aacb5cdd10c7b4cb3d918d67ecf2cae11924635d5157f9ba067ab3f256c001f705a0ac1015eacca8dfa0e0ebdfedbe8a6d03fa5ef0299d565bc58a0ade6a7fb2dea9df6f2c19ddc0f088f9f9e0bb0c14092f1ab01390df77ed49d3d55ab573332190d04fa8245ccd7f436b0ef8de750baab756385912c5bdf2555ad509af64c59f0e41535025f60d69272693adda1e39a59775c2cbe0a39914d93c1c63f45019a87", ["", "", "", "", "", ""]}, 0xfffffffffffffd6e}, 0x1, 0x0, 0x0, 0x8048044}, 0x0)

[  753.722781][ T8397] IPVS: ftp: loaded support on port[0] = 21
06:08:42 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000000)=0x9)
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x34}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, 0x2, 0x8, 0x101}, 0x14}}, 0x0)

06:08:42 executing program 5:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x1ad, 0x0)

06:08:42 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="662debd2625bf8c4506eae8295973c6ad17bae7fda6f69c8d72ade125ec881a84ddf4210e3e9d2bfea2e72d5226527d362c5c7fdc88ace320d82ff78ff54ad97e50e148b27c150bfe8a93e2568dae7519194eccf82877303f06d378466d1cdd6793a7f11fe1a753080723fbb6ee2bd5a2f41dfac03e376d09778a5ab8ba432dab05447e196be0cd3857fd3af0544144c833568881c9789104e01c94f5ab8ddd8510f1d6c7ea0f486997a099e57e98637eb33a02d2e72ef7eec07c4b0a127fac01ce4824ca562ae7dc103d0ae315dc4eefaab993daeb18a1947"], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r3, &(0x7f00000017c0), 0x218, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r4 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r5 = dup2(0xffffffffffffffff, r0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000040)={<r6=>0x0})
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000180)={0x0, r6, 0x7})

[  759.312842][ T8407] binder: 8404:8407 ioctl c0306201 0 returned -14
[  759.358394][ T8409] binder: 8408:8409 ioctl c0045006 20000000 returned -22
[  759.400479][ T8410] binder: 8404:8410 ioctl c008640a 20000040 returned -22
[  759.418866][ T8409] IPVS: ftp: loaded support on port[0] = 21
06:08:42 executing program 0:
unshare(0x40000000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, r1, 0x5acf8000)
socket$pptp(0x18, 0x1, 0x2)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x34}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, 0x2, 0x8, 0x101}, 0x14}}, 0x0)

[  759.655455][ T8425] IPVS: ftp: loaded support on port[0] = 21
06:08:42 executing program 4:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00')
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x34}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, 0x2, 0x8, 0x101}, 0x14}}, 0x0)

06:08:42 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = gettid()
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r1, &(0x7f0000000a00)=[{0x0}], 0x1, 0x0)
perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x81, 0x40, 0x5, 0x0, 0x0, 0x100, 0x83010, 0xc, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x226, 0x2, @perf_config_ext={0x40, 0x68be}, 0x204, 0x80000001, 0x9f7, 0x1, 0x401, 0x8, 0xbff}, r0, 0xe, r1, 0x8)
r2 = getpgrp(r0)
syz_open_procfs(r2, &(0x7f0000000040)='io\x00')
r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r4 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0)
r5 = dup2(r4, r3)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='_E3W'], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x4, {0x1, 0x1, 0xffffffffffffffc0, 0x8, 0x3, 0x6, {0x3, 0x3, 0x80000000, 0x1, 0xc3, 0x674f, 0x1, 0x1, 0x0, 0x9, 0xe906, 0x0, r6, 0xfffffc01, 0x81}}}, 0x90)
r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r7, &(0x7f00000017c0), 0x218, 0x0)

06:08:42 executing program 5:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r1 = dup2(r0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r2, &(0x7f00000017c0), 0x1c4, 0x0)

[  759.955373][ T8460] IPVS: ftp: loaded support on port[0] = 21
06:08:42 executing program 3:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x0, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x34}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, 0x2, 0x8, 0x101}, 0x14}}, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, 0xffffffffffffffff)
getsockname$inet(r2, &(0x7f0000000240)={0x2, 0x0, @remote}, &(0x7f00000002c0)=0x10)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death={0x400c630f, 0x3}], 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000440)={0x18})
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={0xffffffffffffffff, r2, 0xc, 0x0, r2}, 0x14)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
sendmsg$AUDIT_USER_TTY(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xcc, 0x464, 0x100, 0x70bd29, 0x25dfdbfc, "7628d0a5b2a09a2f7cb99452d3b263f6cd66f2c24de85b92b4a48aacb5cdd10c7b4cb3d918d67ecf2cae11924635d5157f9ba067ab3f256c001f705a0ac1015eacca8dfa0e0ebdfedbe8a6d03fa5ef0299d565bc58a0ade6a7fb2dea9df6f2c19ddc0f088f9f9e0bb0c14092f1ab01390df77ed49d3d55ab573332190d04fa8245ccd7f436b0ef8de750baab756385912c5bdf2555ad509af64c59f0e41535025f60d69272693adda1e39a59775c2cbe0a39914d93c1c63f45019a87", ["", "", "", "", "", ""]}, 0xfffffffffffffd6e}, 0x1, 0x0, 0x0, 0x8048044}, 0x0)

[  760.048783][ T8465] binder: 8464:8465 ioctl c0306201 0 returned -14
[  760.190241][ T8479] IPVS: ftp: loaded support on port[0] = 21
06:08:43 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r3, &(0x7f00000017c0), 0x218, 0x0)
r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
r5 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r6 = dup2(r5, r4)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0xdbc4)

06:08:43 executing program 5:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r3 = dup2(r2, r1)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r4 = openat(r3, &(0x7f0000000000)='./file0\x00', 0x200, 0x111)
ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f00000002c0)=""/178)
write$P9_RSETATTR(r4, &(0x7f0000000040)={0x7, 0x1b, 0x1}, 0x7)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3400000000080101000000000000cf3d635a847a3100000000060002400000000005000300210000008dbb4e2e5b4843dae98d5ccd1f496e5b8bedd2422e8f2ba2d457b81bd33974ff10ac855a4dab9fdf5e15bd1c2b2b60eed232ba9fbd4ce3f6f8d173c2cfcc4a4eaa7fe846f62584c86a89b11ad666e5b9e5af1c835e79859a41079c6491e672c3c00fb0729cf86a5fcedcca7cf806ace06c2c74a68dbf3f9ba693796da2941c3f194ee430fcd5587c0cbc7e0bdee279b711ed6788b78ebc870eefad2258b42d0ab8f0620764721f92abf164bff9"], 0x34}, 0x1, 0x0, 0x0, 0x2000c001}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, 0x2, 0x8, 0x101}, 0x14}}, 0x0)

[  760.793330][ T8520] binder: 8519:8520 ioctl c0306201 0 returned -14
06:08:43 executing program 1:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r3 = dup2(r2, r1)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r4 = openat(r3, &(0x7f0000000000)='./file0\x00', 0x200, 0x111)
ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f00000002c0)=""/178)
write$P9_RSETATTR(r4, &(0x7f0000000040)={0x7, 0x1b, 0x1}, 0x7)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3400000000080101000000000000cf3d635a847a3100000000060002400000000005000300210000008dbb4e2e5b4843dae98d5ccd1f496e5b8bedd2422e8f2ba2d457b81bd33974ff10ac855a4dab9fdf5e15bd1c2b2b60eed232ba9fbd4ce3f6f8d173c2cfcc4a4eaa7fe846f62584c86a89b11ad666e5b9e5af1c835e79859a41079c6491e672c3c00fb0729cf86a5fcedcca7cf806ace06c2c74a68dbf3f9ba693796da2941c3f194ee430fcd5587c0cbc7e0bdee279b711ed6788b78ebc870eefad2258b42d0ab8f0620764721f92abf164bff9"], 0x34}, 0x1, 0x0, 0x0, 0x2000c001}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, 0x2, 0x8, 0x101}, 0x14}}, 0x0)

[  760.883460][ T8525] binder: BINDER_SET_CONTEXT_MGR already set
[  760.917512][ T8524] IPVS: ftp: loaded support on port[0] = 21
[  760.922615][ T8525] binder: 8519:8525 ioctl 40046207 0 returned -16
[  761.016857][ T8532] IPVS: ftp: loaded support on port[0] = 21
06:08:43 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r3, &(0x7f00000017c0), 0x190, 0x0)

[  761.202791][ T8525] binder: 8519:8525 ioctl c0306201 0 returned -14
[  761.218760][ T8525] binder: BINDER_SET_CONTEXT_MGR already set
[  761.262618][ T8525] binder: 8519:8525 ioctl 40046207 0 returned -16
[  761.408211][ T8580] binder: 8575:8580 ioctl c0306201 0 returned -14
06:08:44 executing program 2:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)
r3 = dup2(r2, r1)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0x3)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r4, &(0x7f00000017c0), 0x218, 0x0)

06:08:44 executing program 4:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
openat$uhid(0xffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
prctl$PR_SET_TSC(0x1a, 0x1)
ioctl$GIO_FONT(r2, 0x4b60, &(0x7f00000002c0)=""/161)
sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x1, 0x3, 0x5, 0x0, 0x0, {0xc, 0x0, 0x8}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_VLAN={0x4}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8880}, 0x30044804)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x34}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, 0x2, 0x8, 0x101}, 0x14}}, 0x0)

[  761.656180][ T8584] binder: 8582:8584 ioctl c0306201 0 returned -14
[  761.696273][ T8585] IPVS: ftp: loaded support on port[0] = 21
06:08:44 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r1 = dup2(r0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r2, &(0x7f00000017c0), 0x1bc, 0x0)

06:08:44 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0)

06:08:44 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r4 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x80000, 0x0)
write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000240)={0x2a, 0x4, 0x0, {0x4, 0x4b81, 0x2, 0x0, [0x0, 0x0]}}, 0x2a)
preadv(r3, &(0x7f00000017c0), 0x218, 0x0)
r5 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r6 = dup2(r5, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',\b'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r6, 0x80dc5521, &(0x7f0000000180)=""/85)

[  762.160432][ T8524] binder: BINDER_SET_CONTEXT_MGR already set
[  762.171410][ T8524] binder: 8522:8524 ioctl 40046207 0 returned -16
[  762.204311][ T8524] binder: 8522:8524 ioctl 80404518 200002c0 returned -22
[  762.218273][ T8532] binder: 8530:8532 ioctl 80404518 200002c0 returned -22
[  762.228519][ T8524] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'.
[  762.236525][ T8618] binder: 8617:8618 ioctl c0306201 0 returned -14
[  762.254179][ T8532] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'.
06:08:45 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r1, &(0x7f00000017c0), 0x1a9, 0x0)

06:08:45 executing program 5:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x1ac, 0x0)

06:08:45 executing program 1:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$pptp(0x18, 0x1, 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000000000000000000000000000000e8ff098009000100737901310000000006000240000000000500030021000000fed383088fc9da7941fe79d6e4d04c915e6f7688a2170838c6165d81e458316b1be5e9231cfbb45b898886d7a4882e2fe6e58a59f12431ba919cf54b82c213c753a2bedf8d0799db9e4ff9f7466d37ba04c7ba973d3d38b03458b2984f1ee76b1d767d0fa441c42ebd1ff0fca75beceea2f8c2d813d5cd2e87feec47adb0a9db8ef3065cbb6416c45be6fbfc64b23c1146d3feaeac183ec8f18ec5d18e44d70d16080c1823e04ec7a14caeaffcb0c7e2942639ef2100473ec67cd111b25b44edbd4b4961ebbbc4909516aa800d8db04f284c3910c049510b88dfce1461306f96750293901082d6230fc89e00"], 0x34}}, 0x0)
fsetxattr$security_evm(r0, &(0x7f0000000140)='security.evm\x00', &(0x7f00000002c0)=@v2={0x5, 0x2, 0x8, 0x81, 0x3d, "9bb0d94a7f75fc1109f387863994cde1d98dc22146ec790f1f5cbf25c790d3bea8d6b4fcd7f1d4c0dcdcfb666dbb4ed0a91b89960b12357d4f887a2ddf"}, 0x46, 0x1)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000580)={0x0, 0xfffffffffffffc5f, &(0x7f0000000540)={&(0x7f0000000240)={0x14, 0x2, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x2d701fdc5462dfa2, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_REQUEST={0x0, 0x1, 0x1, 0x0, 0x6e}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x0, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L4PROTO={0x0, 0x3, 0x1}, @CTA_TIMEOUT_L3PROTO={0x0, 0x2, 0x1, 0x0, 0x88e5}, @CTA_TIMEOUT_L4PROTO={0x0, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x0, 0x2, 0x1, 0x0, 0x19}, @CTA_TIMEOUT_L3PROTO={0x0, 0x2, 0x1, 0x0, 0xe20b}, @CTA_TIMEOUT_L3PROTO={0x0, 0x2, 0x1, 0x0, 0xd}]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

[  762.711599][ T8585] binder: 8583:8585 ioctl 4b60 200002c0 returned -22
[  762.754219][ T8628] IPVS: ftp: loaded support on port[0] = 21
06:08:45 executing program 0:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185647, &(0x7f0000000100)={0xfffffff, 0x1, 0xffff, <r3=>0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x9909e3, 0xfffffffb, [], @string=&(0x7f0000000080)=0x80}})
ioctl$FBIOBLANK(r3, 0x4611, 0x1)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f0000000000)={0x6, [0x1000, 0x81, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x101, 0x100000000]})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x34}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, 0x2, 0x8, 0x101}, 0x14}}, 0x0)

[  763.019728][ T8646] IPVS: ftp: loaded support on port[0] = 21
06:08:45 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r1 = dup2(r0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r2, &(0x7f00000017c0), 0x18e, 0x0)

06:08:46 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="ef620000"], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r3, &(0x7f00000017c0), 0x218, 0x0)

06:08:46 executing program 3:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x34}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, 0x2, 0x8, 0x101}, 0x14}}, 0xffffff7f)

06:08:46 executing program 5:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r1 = dup2(r0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r2, &(0x7f00000017c0), 0x185, 0x0)

[  763.365394][ T8682] binder: 8679:8682 ioctl c0306201 0 returned -14
[  763.505952][ T8685] IPVS: ftp: loaded support on port[0] = 21
06:08:46 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r3, &(0x7f00000017c0), 0x127, 0x0)

06:08:46 executing program 2:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)
r3 = dup2(r2, r1)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x19, &(0x7f0000000240)={r6}, 0x8)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000180)={<r7=>r6, @in={{0x2, 0x4e24, @broadcast}}}, &(0x7f0000000040)=0x84)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000380)=ANY=[@ANYRES32=r7, @ANYBLOB="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"], &(0x7f0000000300)=0xa2)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r8, &(0x7f00000017c0), 0x218, 0x0)

[  763.793762][ T8706] binder: 8702:8706 ioctl c0306201 0 returned -14
[  763.813568][ T8712] binder: 8704:8712 ioctl c0306201 0 returned -14
06:08:46 executing program 4:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x34}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, 0x2, 0x8, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0)

06:08:46 executing program 5:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x34}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, 0x2, 0x8, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0xf5ffffff}, 0x0)

06:08:46 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0b630000f71d91829a62afeb370fa875f2a769726baf74db4993e5ecac7481553a64a12e8d2766018b28219c11b06c751a67ef74fd1678bc77d9a458078fdad6542167c2126387c651bb28d4d4c2cdf32089323cc656997b6aad360257593341a0d93eb6b03b876f2f54b5b0104047ea479a24e348ddf28f14f73e440f505499648883d2b9d81c1b91c3747ecce8a1a9b1d417b4546292cc7b2e9d70"], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r3 = gettid()
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r4, &(0x7f0000000a00)=[{0x0}], 0x1, 0x0)
perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x81, 0x40, 0x5, 0x0, 0x0, 0x100, 0x83010, 0xc, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x226, 0x2, @perf_config_ext={0x40, 0x68be}, 0x204, 0x80000001, 0x9f7, 0x1, 0x401, 0x8, 0xbff}, r3, 0xe, r4, 0x8)
syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_names\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000002580)=""/227, 0xe3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/67, 0x43}, {&(0x7f0000000040)=""/27, 0x1b}, {&(0x7f00000024c0)=""/186, 0xba}, {&(0x7f0000000180)=""/46, 0x2e}], 0x6, 0x7)

[  764.065295][ T8727] binder: 8725:8727 ioctl c0306201 0 returned -14
[  764.082734][ T8724] IPVS: ftp: loaded support on port[0] = 21
[  764.092823][ T8726] IPVS: ftp: loaded support on port[0] = 21
[  764.175686][ T8727] debugfs: Directory 'vcpu0' with parent '8727-9' already present!
06:08:47 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r3, &(0x7f00000017c0), 0x218, 0x0)
r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
r5 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r6 = dup2(r5, r4)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$VIDIOC_CREATE_BUFS(r6, 0xc0f8565c, &(0x7f0000000180)={0x4, 0x4000, 0x4, {0x0, @pix_mp={0x0, 0x4, 0x31424752, 0x4, 0xa, [{0x4, 0x9}, {0x7, 0x40}, {0x3, 0x2}, {0x2, 0x3}, {0x5, 0x6}, {0x7}, {0x0, 0x2}, {0x0, 0x8000}], 0x5, 0x7, 0x0, 0x1, 0x4}}, 0x6})

06:08:47 executing program 1:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x34}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, 0x2, 0x8, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x300}, 0x0)

[  764.446883][ T8784] binder: 8774:8784 ioctl c0306201 0 returned -14
[  764.551248][ T8789] binder: BINDER_SET_CONTEXT_MGR already set
[  764.585669][ T8789] binder: 8774:8789 ioctl 40046207 0 returned -16
[  764.588526][ T8790] IPVS: ftp: loaded support on port[0] = 21
06:08:47 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r3, &(0x7f00000017c0), 0xf5, 0x0)

[  764.805113][ T8792] binder: BINDER_SET_CONTEXT_MGR already set
[  764.811350][ T8784] binder: 8774:8784 ioctl c0306201 0 returned -14
[  764.833926][ T8792] binder: 8774:8792 ioctl 40046207 0 returned -16
[  764.863578][ T8807] binder: 8802:8807 ioctl c0306201 0 returned -14
06:08:47 executing program 3:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x34}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, 0x2, 0x8, 0x101}, 0x14}, 0x1, 0xfffffffc}, 0x0)

06:08:47 executing program 2:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
fanotify_init(0x20, 0x400)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r3 = dup2(r2, r1)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r4 = socket(0x1, 0x80000, 0x0)
sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000004)
write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f0000000180)}}, 0x10)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r5, &(0x7f00000017c0), 0x218, 0x0)

06:08:47 executing program 0:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x34}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, 0x2, 0x8, 0x101}, 0x14}, 0x1, 0xfffffff5}, 0x0)

[  765.136960][ T8822] IPVS: ftp: loaded support on port[0] = 21
[  765.180237][ T8825] IPVS: ftp: loaded support on port[0] = 21
06:08:48 executing program 4:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x34}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, 0x2, 0x8, 0x101}, 0x14}, 0x1, 0xfcffffff}, 0x0)

[  765.608422][ T8874] IPVS: ftp: loaded support on port[0] = 21
06:08:48 executing program 5:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x34}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, 0x2, 0x8, 0x101}, 0x14}, 0x1, 0xf000000}, 0x0)

06:08:48 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
r1 = dup2(r0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="081b00ff"], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x10001, 0x195400)
r2 = openat$procfs(0xffffff9c, &(0x7f0000000240)='/proc/sysvipc/sem\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000540)=[{&(0x7f0000000280)=""/157, 0x9d}, {&(0x7f0000000040)=""/4, 0x4}, {&(0x7f0000000180)=""/135, 0x87}, {&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000000340)=""/46, 0x2e}, {&(0x7f0000000380)=""/115, 0x73}, {&(0x7f0000000400)=""/10, 0xa}, {&(0x7f0000000440)=""/220, 0xdc}], 0x8, 0x9)

[  765.840955][ T8889] IPVS: ftp: loaded support on port[0] = 21
06:08:48 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/4096, 0xffffff35}, {&(0x7f0000000040)=""/33}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r3, &(0x7f00000017c0), 0x218, 0x0)

06:08:48 executing program 1:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x34}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, 0x2, 0x8, 0x101}, 0x14}, 0x1, 0x300}, 0x0)

[  766.074205][ T8916] binder: 8912:8916 ioctl c0306201 0 returned -14
06:08:48 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_NMI(r5, 0xae9a)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r6, &(0x7f00000017c0), 0x218, 0x0)

[  766.181703][ T8931] IPVS: ftp: loaded support on port[0] = 21
[  766.328701][ T8938] binder: 8934:8938 ioctl c0306201 0 returned -14
06:08:49 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r3, &(0x7f00000017c0), 0xbc, 0x0)

06:08:49 executing program 3:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x34}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, 0x2, 0x8, 0x101}, 0x14}, 0x8}, 0x0)

[  766.675655][ T8962] binder: 8961:8962 ioctl c0306201 0 returned -14
06:08:49 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r1, &(0x7f00000017c0), 0xe6, 0x0)

[  766.881587][ T8967] IPVS: ftp: loaded support on port[0] = 21
06:08:49 executing program 4:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x34}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, 0x2, 0x8, 0x101}, 0xc0}}, 0x0)

06:08:49 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="37a54378699515a7b90a4aa56b60689406aa6b5ff180ebad413748b19e0b295045627f1317ced636772c454472f672dd2bb08be7794800d5f136106962278616e8d9b93375ef4d47d4e0e5d99d4a3aba6f112b27c9035a707943611f4e9df14f8424bebb2f284fa336c5b9635f32075bd6f466d49f378348cb59b0a7a37f9874c290fd0ba507a1f7fb97d77c490258cddfbf9552fbe6de6cd506f778e7c5cd6236c1243fb90476d9ffad9fecec0cd88f47986fde8cfc5d53"], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r3, &(0x7f00000017c0), 0x218, 0x0)

[  767.091253][ T8979] IPVS: ftp: loaded support on port[0] = 21
06:08:49 executing program 0:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x34}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, 0x2, 0x8, 0x101}, 0xf}}, 0x0)

[  767.146280][ T8990] binder: 8984:8990 ioctl c0306201 0 returned -14
[  767.339500][ T9009] IPVS: ftp: loaded support on port[0] = 21
06:08:50 executing program 5:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x34}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, 0x2, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0xf00}}, 0x14}}, 0x0)

06:08:50 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
r3 = socket(0x11, 0x0, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80)
getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000100)=0xe4)
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r1, 0x0, r4, r2}, 0xb8fb, 0x0, 0x3, 0x8000})
setuid(r4)
r5 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0)
r6 = dup2(r5, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r7, &(0x7f00000017c0), 0x218, 0x0)

[  767.600062][ T9041] IPVS: ftp: loaded support on port[0] = 21
[  767.703667][ T9050] binder: 9047:9050 ioctl c0306201 0 returned -14
06:08:50 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r3, &(0x7f00000017c0), 0x93, 0x0)

[  767.969913][ T9072] binder: 9071:9072 ioctl c0306201 0 returned -14
06:08:50 executing program 1:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x34}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, 0x2, 0x8, 0x101, 0x0, 0x3000000}, 0x14}}, 0x0)

06:08:50 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="03000000832e90a41a7a1dccd09639256e4e68fbf0895d49c7b6a01c8c080000004ac8696f8ffc97c154f86708532b98f6d96791f693001665f19820f783d645"], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r3, &(0x7f00000017c0), 0x218, 0x0)

[  768.197945][ T9079] binder: 9075:9079 ioctl c0306201 0 returned -14
[  768.220930][ T9078] IPVS: ftp: loaded support on port[0] = 21
06:08:51 executing program 3:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x34}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, 0x2, 0x8, 0x101}, 0x14}}, 0x0)

06:08:51 executing program 4:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x34}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x7ffff000, 0x2, 0x8, 0x101}, 0x14}}, 0x0)

[  768.624112][ T9105] IPVS: ftp: loaded support on port[0] = 21
[  768.780073][ T9116] IPVS: ftp: loaded support on port[0] = 21
06:08:51 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
openat$binder_debug(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r3, &(0x7f00000017c0), 0x218, 0x0)

06:08:51 executing program 0:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x34}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x200004d4, 0x2, 0x8, 0x101}, 0x14}}, 0x0)

[  768.984987][ T9138] binder: 9134:9138 ioctl c0306201 0 returned -14
06:08:51 executing program 5:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x34}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x7ffff, 0x2, 0x8, 0x101}, 0x14}}, 0x0)

[  769.130388][ T9152] IPVS: ftp: loaded support on port[0] = 21
[  769.307313][ T9166] IPVS: ftp: loaded support on port[0] = 21
06:08:52 executing program 1:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x34}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x33fe0, 0x2, 0x8, 0x101}, 0x14}}, 0x0)

[  769.904665][ T9210] IPVS: ftp: loaded support on port[0] = 21
06:08:53 executing program 3:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x34}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0xec0, 0x2, 0x8, 0x101}, 0x14}}, 0x0)

06:08:53 executing program 4:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x34}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000580)={0x0, 0xffffff7f, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, 0x2, 0x8, 0x101}, 0x14}}, 0x0)

[  770.420325][ T9235] IPVS: ftp: loaded support on port[0] = 21
[  770.519277][ T9238] IPVS: ftp: loaded support on port[0] = 21
06:08:53 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x4b, 0x0)

06:08:53 executing program 5:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x34}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000580)={0x0, 0xf, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, 0x2, 0x8, 0x101}, 0x14}}, 0x0)

06:08:53 executing program 0 (fault-call:6 fault-nth:0):
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r0, 0x0, 0x0)

[  771.011349][ T9288] IPVS: ftp: loaded support on port[0] = 21
[  771.128582][ T9293] FAULT_INJECTION: forcing a failure.
[  771.128582][ T9293] name failslab, interval 1, probability 0, space 0, times 0
[  771.208350][ T9293] CPU: 1 PID: 9293 Comm: syz-executor.0 Not tainted 5.7.0-rc6-syzkaller #0
[  771.216961][ T9293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  771.227011][ T9293] Call Trace:
[  771.230332][ T9293]  dump_stack+0x188/0x20d
[  771.234678][ T9293]  should_fail.cold+0x5/0xa
[  771.239190][ T9293]  ? fault_create_debugfs_attr+0x140/0x140
[  771.245014][ T9293]  should_failslab+0x5/0xf
[  771.249437][ T9293]  kmem_cache_alloc_node_trace+0x27c/0x790
[  771.255264][ T9293]  __kmalloc_node+0x38/0x60
[  771.259767][ T9293]  kvmalloc_node+0x61/0xf0
[  771.264181][ T9293]  seq_read+0x7be/0xfd0
[  771.268339][ T9293]  ? debugfs_file_get+0x1f7/0x430
[  771.273369][ T9293]  ? debugfs_locked_down.isra.0+0x150/0x150
[  771.279275][ T9293]  full_proxy_read+0x118/0x190
[  771.284047][ T9293]  ? full_proxy_write+0x190/0x190
[  771.289070][ T9293]  __vfs_read+0x76/0x100
[  771.293318][ T9293]  vfs_read+0x1f0/0x420
[  771.297479][ T9293]  ksys_read+0x12d/0x250
[  771.301724][ T9293]  ? kernel_write+0x120/0x120
06:08:54 executing program 1 (fault-call:0 fault-nth:0):
unshare(0x40000000)
socket$inet(0x2, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)

[  771.306408][ T9293]  ? __x64_sys_clock_gettime32+0x240/0x240
[  771.312240][ T9293]  ? trace_hardirqs_off_caller+0x55/0x230
[  771.317973][ T9293]  do_fast_syscall_32+0x270/0xe90
[  771.323033][ T9293]  entry_SYSENTER_compat+0x70/0x7f
[  771.455822][ T9316] FAULT_INJECTION: forcing a failure.
[  771.455822][ T9316] name failslab, interval 1, probability 0, space 0, times 0
[  771.498187][ T9316] CPU: 1 PID: 9316 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0
[  771.506802][ T9316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  771.516856][ T9316] Call Trace:
[  771.520156][ T9316]  dump_stack+0x188/0x20d
[  771.524500][ T9316]  should_fail.cold+0x5/0xa
[  771.529010][ T9316]  ? lock_downgrade+0x840/0x840
[  771.533868][ T9316]  ? fault_create_debugfs_attr+0x140/0x140
[  771.539690][ T9316]  should_failslab+0x5/0xf
[  771.544113][ T9316]  kmem_cache_alloc+0x29b/0x740
[  771.548963][ T9316]  ? lock_downgrade+0x840/0x840
[  771.553879][ T9316]  ? cap_capable+0x1eb/0x250
[  771.558517][ T9316]  create_new_namespaces+0x30/0xb30
[  771.563738][ T9316]  unshare_nsproxy_namespaces+0xbd/0x1f0
[  771.569373][ T9316]  ksys_unshare+0x43d/0x8e0
[  771.573875][ T9316]  ? walk_process_tree+0x2c0/0x2c0
[  771.579045][ T9316]  ? fput_many+0x2f/0x1a0
[  771.583377][ T9316]  ? ksys_write+0x1a5/0x250
[  771.587884][ T9316]  ? trace_hardirqs_off_caller+0x55/0x230
[  771.593598][ T9316]  __ia32_sys_unshare+0x2c/0x40
[  771.598434][ T9316]  do_fast_syscall_32+0x270/0xe90
[  771.603442][ T9316]  entry_SYSENTER_compat+0x70/0x7f
06:08:54 executing program 0 (fault-call:6 fault-nth:1):
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r0, 0x0, 0x0)

06:08:54 executing program 4 (fault-call:0 fault-nth:0):
unshare(0x40000000)

06:08:54 executing program 3 (fault-call:3 fault-nth:0):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="04"])

[  771.973412][ T9326] FAULT_INJECTION: forcing a failure.
[  771.973412][ T9326] name failslab, interval 1, probability 0, space 0, times 0
[  771.989616][ T9325] FAULT_INJECTION: forcing a failure.
[  771.989616][ T9325] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  772.002813][ T9325] CPU: 0 PID: 9325 Comm: syz-executor.0 Not tainted 5.7.0-rc6-syzkaller #0
[  772.011393][ T9325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  772.021444][ T9325] Call Trace:
[  772.024743][ T9325]  dump_stack+0x188/0x20d
[  772.029083][ T9325]  should_fail.cold+0x5/0xa
[  772.033597][ T9325]  ? fault_create_debugfs_attr+0x140/0x140
[  772.039402][ T9325]  ? mark_held_locks+0xe0/0xe0
[  772.044171][ T9325]  __alloc_pages_nodemask+0x17a/0x810
[  772.049534][ T9325]  ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660
[  772.056296][ T9325]  ? find_held_lock+0x2d/0x110
[  772.061068][ T9325]  ? __mutex_lock+0x458/0x13c0
[  772.065838][ T9325]  cache_grow_begin+0x8c/0xc10
[  772.070583][ T9325]  ? cache_alloc_pfmemalloc+0x1e/0x140
[  772.076024][ T9325]  kmem_cache_alloc_node_trace+0x6c3/0x790
[  772.081821][ T9325]  __kmalloc_node+0x38/0x60
[  772.086305][ T9325]  kvmalloc_node+0x61/0xf0
[  772.090718][ T9325]  seq_read+0x7be/0xfd0
[  772.094853][ T9325]  ? debugfs_file_get+0x1f7/0x430
[  772.099858][ T9325]  ? debugfs_locked_down.isra.0+0x150/0x150
[  772.105740][ T9325]  full_proxy_read+0x118/0x190
[  772.110487][ T9325]  ? full_proxy_write+0x190/0x190
[  772.115489][ T9325]  __vfs_read+0x76/0x100
[  772.119715][ T9325]  vfs_read+0x1f0/0x420
[  772.123854][ T9325]  ksys_read+0x12d/0x250
[  772.128080][ T9325]  ? kernel_write+0x120/0x120
[  772.132756][ T9325]  ? __x64_sys_clock_gettime32+0x240/0x240
[  772.138549][ T9325]  ? trace_hardirqs_off_caller+0x55/0x230
[  772.144259][ T9325]  do_fast_syscall_32+0x270/0xe90
[  772.149273][ T9325]  entry_SYSENTER_compat+0x70/0x7f
06:08:54 executing program 1 (fault-call:0 fault-nth:1):
unshare(0x40000000)
socket$inet(0x2, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)

[  772.190099][ T9326] CPU: 0 PID: 9326 Comm: syz-executor.4 Not tainted 5.7.0-rc6-syzkaller #0
[  772.198711][ T9326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  772.208763][ T9326] Call Trace:
[  772.212058][ T9326]  dump_stack+0x188/0x20d
[  772.216406][ T9326]  should_fail.cold+0x5/0xa
[  772.220915][ T9326]  ? lock_downgrade+0x840/0x840
[  772.225777][ T9326]  ? fault_create_debugfs_attr+0x140/0x140
[  772.231595][ T9326]  should_failslab+0x5/0xf
[  772.236020][ T9326]  kmem_cache_alloc+0x29b/0x740
[  772.240874][ T9326]  ? lock_downgrade+0x840/0x840
[  772.245729][ T9326]  ? cap_capable+0x1eb/0x250
[  772.250333][ T9326]  create_new_namespaces+0x30/0xb30
[  772.255543][ T9326]  unshare_nsproxy_namespaces+0xbd/0x1f0
[  772.261180][ T9326]  ksys_unshare+0x43d/0x8e0
[  772.265690][ T9326]  ? walk_process_tree+0x2c0/0x2c0
[  772.270805][ T9326]  ? fput_many+0x2f/0x1a0
[  772.275135][ T9326]  ? ksys_write+0x1a5/0x250
[  772.279647][ T9326]  ? trace_hardirqs_off_caller+0x55/0x230
[  772.285375][ T9326]  __ia32_sys_unshare+0x2c/0x40
[  772.290230][ T9326]  do_fast_syscall_32+0x270/0xe90
[  772.295269][ T9326]  entry_SYSENTER_compat+0x70/0x7f
[  772.324100][ T9333] FAULT_INJECTION: forcing a failure.
[  772.324100][ T9333] name failslab, interval 1, probability 0, space 0, times 0
[  772.392383][ T9333] CPU: 0 PID: 9333 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0
[  772.400995][ T9333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  772.411047][ T9333] Call Trace:
[  772.414346][ T9333]  dump_stack+0x188/0x20d
[  772.418684][ T9333]  should_fail.cold+0x5/0xa
[  772.423184][ T9333]  ? lock_downgrade+0x840/0x840
[  772.428032][ T9333]  ? fault_create_debugfs_attr+0x140/0x140
[  772.433847][ T9333]  should_failslab+0x5/0xf
[  772.438246][ T9333]  __kmalloc+0x2d9/0x7a0
[  772.442491][ T9333]  ? net_alloc_generic+0x1f/0x70
[  772.447409][ T9333]  ? retire_userns_sysctls+0x80/0x80
[  772.452722][ T9333]  ? __kasan_kmalloc.constprop.0+0xbf/0xd0
[  772.458515][ T9333]  net_alloc_generic+0x1f/0x70
[  772.463262][ T9333]  copy_net_ns+0xcd/0x590
[  772.467617][ T9333]  ? copy_cgroup_ns+0x9d/0x640
[  772.472368][ T9333]  create_new_namespaces+0x3fb/0xb30
[  772.477644][ T9333]  unshare_nsproxy_namespaces+0xbd/0x1f0
[  772.483261][ T9333]  ksys_unshare+0x43d/0x8e0
[  772.487789][ T9333]  ? walk_process_tree+0x2c0/0x2c0
06:08:55 executing program 5 (fault-call:7 fault-nth:0):
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  772.492897][ T9333]  ? fput_many+0x2f/0x1a0
[  772.497207][ T9333]  ? ksys_write+0x1a5/0x250
[  772.501696][ T9333]  ? trace_hardirqs_off_caller+0x55/0x230
[  772.507399][ T9333]  __ia32_sys_unshare+0x2c/0x40
[  772.512233][ T9333]  do_fast_syscall_32+0x270/0xe90
[  772.517244][ T9333]  entry_SYSENTER_compat+0x70/0x7f
[  772.622977][ T9342] FAULT_INJECTION: forcing a failure.
[  772.622977][ T9342] name failslab, interval 1, probability 0, space 0, times 0
[  772.675221][ T9342] CPU: 1 PID: 9342 Comm: syz-executor.5 Not tainted 5.7.0-rc6-syzkaller #0
[  772.683825][ T9342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  772.693875][ T9342] Call Trace:
[  772.697173][ T9342]  dump_stack+0x188/0x20d
[  772.701512][ T9342]  should_fail.cold+0x5/0xa
[  772.706020][ T9342]  ? fault_create_debugfs_attr+0x140/0x140
[  772.711841][ T9342]  should_failslab+0x5/0xf
[  772.716263][ T9342]  __kmalloc+0x2d9/0x7a0
[  772.720512][ T9342]  ? rcu_read_lock_any_held.part.0+0x50/0x50
[  772.726554][ T9342]  ? tomoyo_realpath_from_path+0xc2/0x620
[  772.732278][ T9342]  ? lock_release+0x800/0x800
[  772.736960][ T9342]  ? __lock_acquire+0xcbb/0x4c50
[  772.741904][ T9342]  tomoyo_realpath_from_path+0xc2/0x620
[  772.747496][ T9342]  ? tomoyo_profile+0x42/0x50
[  772.752179][ T9342]  tomoyo_path_number_perm+0x1c2/0x4d0
[  772.757637][ T9342]  ? tomoyo_path_number_perm+0x17a/0x4d0
[  772.763271][ T9342]  ? tomoyo_execute_permission+0x470/0x470
[  772.769097][ T9342]  ? __fget_files+0x30d/0x500
06:08:55 executing program 4 (fault-call:0 fault-nth:1):
unshare(0x40000000)

06:08:55 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r0, 0x0, 0x0)

[  772.773798][ T9342]  ? __fget_files+0x32f/0x500
[  772.778484][ T9342]  ? ksys_dup3+0x3c0/0x3c0
[  772.782902][ T9342]  ? fput_many+0x2f/0x1a0
[  772.787284][ T9342]  security_file_ioctl+0x6c/0xb0
[  772.792271][ T9342]  __ia32_compat_sys_ioctl+0xb6/0x2b0
[  772.797654][ T9342]  do_fast_syscall_32+0x270/0xe90
[  772.802689][ T9342]  entry_SYSENTER_compat+0x70/0x7f
[  772.840312][ T9345] FAULT_INJECTION: forcing a failure.
[  772.840312][ T9345] name failslab, interval 1, probability 0, space 0, times 0
06:08:55 executing program 1 (fault-call:0 fault-nth:2):
unshare(0x40000000)
socket$inet(0x2, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)

[  772.894535][ T9345] CPU: 0 PID: 9345 Comm: syz-executor.4 Not tainted 5.7.0-rc6-syzkaller #0
[  772.903141][ T9345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  772.913199][ T9345] Call Trace:
[  772.916495][ T9345]  dump_stack+0x188/0x20d
[  772.920854][ T9345]  should_fail.cold+0x5/0xa
[  772.925364][ T9345]  ? lock_downgrade+0x840/0x840
[  772.930226][ T9345]  ? fault_create_debugfs_attr+0x140/0x140
[  772.936042][ T9345]  should_failslab+0x5/0xf
[  772.940460][ T9345]  __kmalloc+0x2d9/0x7a0
[  772.944299][ T9350] FAULT_INJECTION: forcing a failure.
[  772.944299][ T9350] name failslab, interval 1, probability 0, space 0, times 0
[  772.944703][ T9345]  ? net_alloc_generic+0x1f/0x70
[  772.962182][ T9345]  ? retire_userns_sysctls+0x80/0x80
[  772.967466][ T9345]  ? __kasan_kmalloc.constprop.0+0xbf/0xd0
[  772.973284][ T9345]  net_alloc_generic+0x1f/0x70
[  772.978047][ T9345]  copy_net_ns+0xcd/0x590
[  772.982377][ T9345]  ? copy_cgroup_ns+0x9d/0x640
[  772.987149][ T9345]  create_new_namespaces+0x3fb/0xb30
[  772.992443][ T9345]  unshare_nsproxy_namespaces+0xbd/0x1f0
[  772.998080][ T9345]  ksys_unshare+0x43d/0x8e0
[  773.002583][ T9345]  ? walk_process_tree+0x2c0/0x2c0
[  773.007697][ T9345]  ? fput_many+0x2f/0x1a0
[  773.012027][ T9345]  ? ksys_write+0x1a5/0x250
[  773.016530][ T9345]  ? trace_hardirqs_off_caller+0x55/0x230
[  773.022246][ T9345]  __ia32_sys_unshare+0x2c/0x40
[  773.027095][ T9345]  do_fast_syscall_32+0x270/0xe90
[  773.032119][ T9345]  entry_SYSENTER_compat+0x70/0x7f
[  773.038472][ T9350] CPU: 1 PID: 9350 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0
[  773.047065][ T9350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  773.057114][ T9350] Call Trace:
[  773.060406][ T9350]  dump_stack+0x188/0x20d
[  773.064746][ T9350]  should_fail.cold+0x5/0xa
[  773.069253][ T9350]  ? lock_downgrade+0x840/0x840
[  773.074115][ T9350]  ? fault_create_debugfs_attr+0x140/0x140
[  773.079932][ T9350]  should_failslab+0x5/0xf
[  773.084357][ T9350]  kmem_cache_alloc+0x29b/0x740
[  773.089219][ T9350]  copy_net_ns+0xef/0x590
[  773.093546][ T9350]  ? copy_cgroup_ns+0x9d/0x640
[  773.098318][ T9350]  create_new_namespaces+0x3fb/0xb30
[  773.103620][ T9350]  unshare_nsproxy_namespaces+0xbd/0x1f0
[  773.109255][ T9350]  ksys_unshare+0x43d/0x8e0
[  773.113763][ T9350]  ? walk_process_tree+0x2c0/0x2c0
[  773.118872][ T9350]  ? fput_many+0x2f/0x1a0
[  773.123201][ T9350]  ? ksys_write+0x1a5/0x250
[  773.127717][ T9350]  ? trace_hardirqs_off_caller+0x55/0x230
[  773.133441][ T9350]  __ia32_sys_unshare+0x2c/0x40
[  773.138295][ T9350]  do_fast_syscall_32+0x270/0xe90
06:08:55 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="04"])

[  773.143324][ T9350]  entry_SYSENTER_compat+0x70/0x7f
06:08:56 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r0, 0x0, 0x0)

06:08:56 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="04"])

06:08:56 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r0, 0x0, 0x2)

[  773.380252][ T9342] ERROR: Out of memory at tomoyo_realpath_from_path.
[  773.419379][ T9342] binder_alloc: 9341: binder_alloc_buf, no vma
06:08:56 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:08:56 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="04"])

06:08:56 executing program 1 (fault-call:0 fault-nth:3):
unshare(0x40000000)
socket$inet(0x2, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)

[  773.576794][ T9378] binder_alloc: 9377: binder_alloc_buf, no vma
06:08:56 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r0, 0x0, 0x3)

06:08:56 executing program 4 (fault-call:0 fault-nth:2):
unshare(0x40000000)

06:08:56 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0x2, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  773.748950][ T9391] FAULT_INJECTION: forcing a failure.
[  773.748950][ T9391] name failslab, interval 1, probability 0, space 0, times 0
[  773.782302][ T9395] FAULT_INJECTION: forcing a failure.
[  773.782302][ T9395] name failslab, interval 1, probability 0, space 0, times 0
06:08:56 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4c01, &(0x7f0000000140)=ANY=[@ANYBLOB="04"])

[  773.850174][ T9391] CPU: 0 PID: 9391 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0
[  773.858793][ T9391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  773.868844][ T9391] Call Trace:
[  773.872140][ T9391]  dump_stack+0x188/0x20d
[  773.876480][ T9391]  should_fail.cold+0x5/0xa
[  773.880981][ T9391]  ? lock_downgrade+0x840/0x840
[  773.885831][ T9391]  ? fault_create_debugfs_attr+0x140/0x140
[  773.891649][ T9391]  should_failslab+0x5/0xf
[  773.896094][ T9391]  kmem_cache_alloc_trace+0x2d0/0x7d0
[  773.901467][ T9391]  ? kmem_cache_alloc+0x358/0x740
[  773.906535][ T9391]  copy_net_ns+0x13d/0x590
[  773.910942][ T9391]  ? copy_cgroup_ns+0x9d/0x640
[  773.915693][ T9391]  create_new_namespaces+0x3fb/0xb30
[  773.920963][ T9391]  unshare_nsproxy_namespaces+0xbd/0x1f0
[  773.926579][ T9391]  ksys_unshare+0x43d/0x8e0
[  773.931065][ T9391]  ? walk_process_tree+0x2c0/0x2c0
[  773.936158][ T9391]  ? fput_many+0x2f/0x1a0
[  773.940467][ T9391]  ? ksys_write+0x1a5/0x250
[  773.944954][ T9391]  ? trace_hardirqs_off_caller+0x55/0x230
06:08:56 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r0, 0x0, 0x4)

[  773.950655][ T9391]  __ia32_sys_unshare+0x2c/0x40
[  773.955490][ T9391]  do_fast_syscall_32+0x270/0xe90
[  773.960506][ T9391]  entry_SYSENTER_compat+0x70/0x7f
[  773.984590][ T9395] CPU: 1 PID: 9395 Comm: syz-executor.4 Not tainted 5.7.0-rc6-syzkaller #0
[  773.985774][ T9403] binder: BINDER_SET_CONTEXT_MGR already set
[  773.993206][ T9395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  773.993213][ T9395] Call Trace:
[  773.993235][ T9395]  dump_stack+0x188/0x20d
[  773.993256][ T9395]  should_fail.cold+0x5/0xa
[  773.993273][ T9395]  ? lock_downgrade+0x840/0x840
[  773.993287][ T9395]  ? fault_create_debugfs_attr+0x140/0x140
[  773.993310][ T9395]  should_failslab+0x5/0xf
[  774.035995][ T9403] binder: 9396:9403 ioctl 40046207 0 returned -16
[  774.036498][ T9395]  kmem_cache_alloc+0x29b/0x740
[  774.047738][ T9395]  copy_net_ns+0xef/0x590
[  774.052073][ T9395]  ? copy_cgroup_ns+0x9d/0x640
[  774.056841][ T9395]  create_new_namespaces+0x3fb/0xb30
[  774.062137][ T9395]  unshare_nsproxy_namespaces+0xbd/0x1f0
[  774.067778][ T9395]  ksys_unshare+0x43d/0x8e0
[  774.072282][ T9395]  ? walk_process_tree+0x2c0/0x2c0
[  774.077395][ T9395]  ? fput_many+0x2f/0x1a0
[  774.081724][ T9395]  ? ksys_write+0x1a5/0x250
[  774.086235][ T9395]  ? trace_hardirqs_off_caller+0x55/0x230
[  774.091963][ T9395]  __ia32_sys_unshare+0x2c/0x40
[  774.096825][ T9395]  do_fast_syscall_32+0x270/0xe90
[  774.101859][ T9395]  entry_SYSENTER_compat+0x70/0x7f
06:08:56 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0x10, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:08:56 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r0, 0x0, 0x5)

06:08:57 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x541b, &(0x7f0000000140)=ANY=[@ANYBLOB="04"])

06:08:57 executing program 1 (fault-call:0 fault-nth:4):
unshare(0x40000000)
socket$inet(0x2, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)

[  774.278398][ T9426] binder: 9424:9426 ioctl 10 20000540 returned -22
[  774.300194][ T9426] binder: BINDER_SET_CONTEXT_MGR already set
[  774.312899][ T9426] binder: 9424:9426 ioctl 40046207 0 returned -16
06:08:57 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r0, 0x0, 0x6)

[  774.402266][ T9440] FAULT_INJECTION: forcing a failure.
[  774.402266][ T9440] name failslab, interval 1, probability 0, space 0, times 0
[  774.447961][ T9440] CPU: 1 PID: 9440 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0
[  774.456570][ T9440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  774.466622][ T9440] Call Trace:
[  774.469922][ T9440]  dump_stack+0x188/0x20d
[  774.474266][ T9440]  should_fail.cold+0x5/0xa
[  774.478779][ T9440]  ? lock_downgrade+0x840/0x840
[  774.483638][ T9440]  ? fault_create_debugfs_attr+0x140/0x140
[  774.489462][ T9440]  should_failslab+0x5/0xf
[  774.493882][ T9440]  kmem_cache_alloc_trace+0x2d0/0x7d0
[  774.499255][ T9440]  ? kmem_cache_alloc+0x358/0x740
[  774.504297][ T9440]  copy_net_ns+0x13d/0x590
[  774.508716][ T9440]  ? copy_cgroup_ns+0x9d/0x640
[  774.513487][ T9440]  create_new_namespaces+0x3fb/0xb30
[  774.518785][ T9440]  unshare_nsproxy_namespaces+0xbd/0x1f0
[  774.524421][ T9440]  ksys_unshare+0x43d/0x8e0
[  774.528929][ T9440]  ? walk_process_tree+0x2c0/0x2c0
[  774.534052][ T9440]  ? fput_many+0x2f/0x1a0
[  774.538387][ T9440]  ? ksys_write+0x1a5/0x250
[  774.542899][ T9440]  ? trace_hardirqs_off_caller+0x55/0x230
06:08:57 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0x4c01, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:08:57 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x5421, &(0x7f0000000140)=ANY=[@ANYBLOB="04"])

[  774.548625][ T9440]  __ia32_sys_unshare+0x2c/0x40
[  774.553478][ T9440]  do_fast_syscall_32+0x270/0xe90
[  774.555578][ T9446] binder: 9445:9446 ioctl 4c01 20000540 returned -22
[  774.558499][ T9440]  entry_SYSENTER_compat+0x70/0x7f
06:08:57 executing program 4:
unshare(0x40000000)

06:08:57 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r0, 0x0, 0x7)

[  774.614451][ T9446] binder: BINDER_SET_CONTEXT_MGR already set
[  774.638500][ T9446] binder: 9445:9446 ioctl 40046207 0 returned -16
06:08:57 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x5450, &(0x7f0000000140)=ANY=[@ANYBLOB="04"])

06:08:57 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0x4c06, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:08:57 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r0, 0x0, 0xa)

[  774.848857][ T9467] IPVS: ftp: loaded support on port[0] = 21
[  774.849180][ T9472] binder: 9470:9472 ioctl 4c06 20000540 returned -22
06:08:57 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x5451, &(0x7f0000000140)=ANY=[@ANYBLOB="04"])

[  774.904026][ T9476] binder: BINDER_SET_CONTEXT_MGR already set
[  774.939242][ T9476] binder: 9470:9476 ioctl 40046207 0 returned -16
06:08:57 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r0, 0x0, 0x48)

06:08:57 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0x541b, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  775.182537][ T9515] binder: 9512:9515 ioctl 541b 20000540 returned -22
06:08:57 executing program 1 (fault-call:0 fault-nth:5):
unshare(0x40000000)
socket$inet(0x2, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)

06:08:57 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r0, 0x0, 0x4c)

06:08:57 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x5452, &(0x7f0000000140)=ANY=[@ANYBLOB="04"])

06:08:58 executing program 4:
unshare(0x40000)

[  775.233530][ T9516] binder: BINDER_SET_CONTEXT_MGR already set
[  775.253628][ T9516] binder: 9512:9516 ioctl 40046207 0 returned -16
06:08:58 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0x5421, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  775.309889][ T9523] FAULT_INJECTION: forcing a failure.
[  775.309889][ T9523] name failslab, interval 1, probability 0, space 0, times 0
[  775.353763][ T9523] CPU: 1 PID: 9523 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0
[  775.362377][ T9523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  775.372430][ T9523] Call Trace:
[  775.375730][ T9523]  dump_stack+0x188/0x20d
[  775.380074][ T9523]  should_fail.cold+0x5/0xa
[  775.384589][ T9523]  ? fault_create_debugfs_attr+0x140/0x140
[  775.390412][ T9523]  should_failslab+0x5/0xf
[  775.394835][ T9523]  kmem_cache_alloc+0x29b/0x740
[  775.399789][ T9523]  __proc_create+0x29e/0x830
[  775.404382][ T9523]  ? pde_free+0x100/0x100
[  775.408722][ T9523]  ? proc_net_ns_init+0x3e/0x3d0
[  775.413662][ T9523]  ? rcu_read_lock_sched_held+0x9c/0xd0
[  775.419217][ T9523]  ? rcu_read_lock_any_held.part.0+0x50/0x50
[  775.425204][ T9523]  proc_mkdir_data+0xa9/0x1a0
[  775.429877][ T9523]  ? proc_symlink+0x1c0/0x1c0
[  775.434651][ T9523]  ? crng_backtrack_protect+0x80/0x80
[  775.440036][ T9523]  proc_net_ns_init+0x234/0x3d0
[  775.444889][ T9523]  ? proc_net_ns_exit+0x80/0x80
[  775.449201][ T9532] binder: BINDER_SET_CONTEXT_MGR already set
[  775.449736][ T9523]  ops_init+0xaf/0x420
[  775.459750][ T9523]  setup_net+0x2de/0x860
[  775.464002][ T9523]  ? ops_init+0x420/0x420
[  775.468362][ T9523]  copy_net_ns+0x293/0x590
[  775.472785][ T9523]  create_new_namespaces+0x3fb/0xb30
[  775.476915][ T9532] binder: 9531:9532 ioctl 40046207 0 returned -16
[  775.478073][ T9523]  unshare_nsproxy_namespaces+0xbd/0x1f0
[  775.478094][ T9523]  ksys_unshare+0x43d/0x8e0
[  775.478107][ T9523]  ? walk_process_tree+0x2c0/0x2c0
[  775.478127][ T9523]  ? fput_many+0x2f/0x1a0
06:08:58 executing program 4:
unshare(0x80000)

06:08:58 executing program 2:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)
r3 = dup2(r2, r1)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000300)=0xe4)
r5 = socket$inet6(0xa, 0x3, 0x9)
r6 = socket(0x11, 0x800000003, 0x0)
bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80)
getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000340)={@dev, 0x0, r7})
sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x1b8, 0x0, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0x1000, 0x81, 0x8, 0x1000}, {0x8, 0x3, 0x8, 0x1}, {0x5f, 0x0, 0x7a, 0x1}]}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x203}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x101}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8, 0x6, r7}}}]}}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x810}, 0x24045040)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r8, &(0x7f0000000040)=[{&(0x7f0000000180)=""/96, 0x60}], 0x1, 0x0)

[  775.504055][ T9523]  ? ksys_write+0x1a5/0x250
[  775.508563][ T9523]  ? trace_hardirqs_off_caller+0x55/0x230
[  775.514290][ T9523]  __ia32_sys_unshare+0x2c/0x40
[  775.519156][ T9523]  do_fast_syscall_32+0x270/0xe90
[  775.524192][ T9523]  entry_SYSENTER_compat+0x70/0x7f
06:08:58 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0x5450, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:08:58 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r0, 0x0, 0x68)

06:08:58 executing program 4:
unshare(0x100000)

[  775.638208][ T9543] binder: 9541:9543 ioctl c0306201 0 returned -14
06:08:58 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x5460, &(0x7f0000000140)=ANY=[@ANYBLOB="04"])

[  775.686629][ T9545] binder: BINDER_SET_CONTEXT_MGR already set
[  775.696045][ T9545] binder: 9544:9545 ioctl 40046207 0 returned -16
06:08:58 executing program 4:
unshare(0x1000000)

06:08:58 executing program 1 (fault-call:0 fault-nth:6):
unshare(0x40000000)
socket$inet(0x2, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)

06:08:58 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0x5451, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:08:58 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = syz_open_dev$binderN(&(0x7f0000001200)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r4 = dup2(r3, r2)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
write$FUSE_INIT(r4, &(0x7f0000001180)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x1f, 0xfffffffe, 0x100000, 0x1, 0x8, 0x6, 0x1ae0}}, 0x50)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r5 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r6, &(0x7f00000017c0), 0x218, 0x0)

06:08:58 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r0, 0x0, 0x6c)

06:08:58 executing program 4:
unshare(0x2000000)

06:08:58 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x5501, &(0x7f0000000140)=ANY=[@ANYBLOB="04"])

[  776.086029][ T9572] binder: 9565:9572 ioctl c0306201 0 returned -14
[  776.109978][ T9573] binder: BINDER_SET_CONTEXT_MGR already set
[  776.118629][ T9573] binder: 9564:9573 ioctl 40046207 0 returned -16
06:08:58 executing program 4:
unshare(0x3000000)

06:08:58 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r0, 0x0, 0x74)

[  776.137527][ T9572] binder: BINDER_SET_CONTEXT_MGR already set
[  776.171728][ T9572] binder: 9565:9572 ioctl 40046207 0 returned -16
06:08:58 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x5509, &(0x7f0000000140)=ANY=[@ANYBLOB="04"])

06:08:59 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0x5452, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  776.218238][ T9572] binder: 9565:9572 ioctl c0306201 0 returned -14
[  776.226033][ T9583] binder: BINDER_SET_CONTEXT_MGR already set
[  776.248047][ T9583] binder: 9565:9583 ioctl 40046207 0 returned -16
06:08:59 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b630000d204f066ab478413d643e6ab6596fc740ea1ad761f0469c9641b0d08cb01acb24ee0281d310bd90ce3b4339e1fc8d53a937578320c70fc5f6bd4bdfdde0c5afe82ac4f13537e4349e0d065c28b66922b966cd54a2c656703c9a03b3180f5226fdc030fcc9b0576e31a147485a17250008b5b86630669fc3a1dc54875cd467c13da286d959c294f406119201b3dff6dae0c216a3625f94949117e17458acb4c0b057d2100f4334dafcc894c57c06e011e5c02cbbe0ac04eb9d8fe200c431e9b66345768def98c04d3d0c347957b02"], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r3 = socket$inet(0x2, 0x5, 0x2)
r4 = openat$vsock(0xffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x8000, 0x0)
write$FUSE_INTERRUPT(r4, &(0x7f0000000280)={0x10, 0xfffffffffffffffe, 0x1}, 0x10)
r5 = semget$private(0x0, 0x207, 0x0)
semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f0000000140)={{0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}})
semctl$SEM_INFO(r5, 0x1, 0x13, &(0x7f0000000040)=""/54)
semctl$GETPID(r5, 0x1, 0xb, &(0x7f00000002c0)=""/245)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000100)={0x0, 'rose0\x00', 0x3}, 0x18)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r6, &(0x7f00000017c0), 0x218, 0x0)

[  776.477425][ T9591] binder: 9586:9591 ioctl c0306201 0 returned -14
[  776.481076][ T9595] FAULT_INJECTION: forcing a failure.
[  776.481076][ T9595] name failslab, interval 1, probability 0, space 0, times 0
[  776.506442][ T9597] binder: BINDER_SET_CONTEXT_MGR already set
06:08:59 executing program 4:
unshare(0x4000000)

[  776.557929][ T9597] binder: 9590:9597 ioctl 40046207 0 returned -16
[  776.593820][ T9595] CPU: 1 PID: 9595 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0
[  776.602434][ T9595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  776.612489][ T9595] Call Trace:
[  776.615789][ T9595]  dump_stack+0x188/0x20d
[  776.620150][ T9595]  should_fail.cold+0x5/0xa
[  776.624662][ T9595]  ? fault_create_debugfs_attr+0x140/0x140
[  776.630479][ T9595]  should_failslab+0x5/0xf
[  776.634905][ T9595]  kmem_cache_alloc+0x29b/0x740
[  776.639777][ T9595]  __proc_create+0x29e/0x830
[  776.644369][ T9595]  ? pde_free+0x100/0x100
[  776.648704][ T9595]  ? proc_net_ns_init+0x3e/0x3d0
[  776.653646][ T9595]  ? rcu_read_lock_sched_held+0x9c/0xd0
[  776.659198][ T9595]  ? rcu_read_lock_any_held.part.0+0x50/0x50
[  776.665181][ T9595]  proc_mkdir_data+0xa9/0x1a0
[  776.669856][ T9595]  ? proc_symlink+0x1c0/0x1c0
[  776.674537][ T9595]  ? crng_backtrack_protect+0x80/0x80
[  776.679925][ T9595]  proc_net_ns_init+0x234/0x3d0
[  776.684811][ T9595]  ? proc_net_ns_exit+0x80/0x80
[  776.689666][ T9595]  ops_init+0xaf/0x420
[  776.693745][ T9595]  setup_net+0x2de/0x860
[  776.698005][ T9595]  ? ops_init+0x420/0x420
[  776.702348][ T9595]  copy_net_ns+0x293/0x590
[  776.706779][ T9595]  create_new_namespaces+0x3fb/0xb30
[  776.712080][ T9595]  unshare_nsproxy_namespaces+0xbd/0x1f0
[  776.717725][ T9595]  ksys_unshare+0x43d/0x8e0
[  776.722239][ T9595]  ? walk_process_tree+0x2c0/0x2c0
[  776.727354][ T9595]  ? fput_many+0x2f/0x1a0
[  776.731686][ T9595]  ? ksys_write+0x1a5/0x250
[  776.736195][ T9595]  ? trace_hardirqs_off_caller+0x55/0x230
[  776.741920][ T9595]  __ia32_sys_unshare+0x2c/0x40
[  776.746777][ T9595]  do_fast_syscall_32+0x270/0xe90
[  776.751809][ T9595]  entry_SYSENTER_compat+0x70/0x7f
[  776.874829][ T9591] binder: 9586:9591 ioctl c0306201 0 returned -14
06:08:59 executing program 1 (fault-call:0 fault-nth:7):
unshare(0x40000000)
socket$inet(0x2, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)

06:08:59 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0x5460, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:08:59 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x550b, &(0x7f0000000140)=ANY=[@ANYBLOB="04"])

06:08:59 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r0, 0x0, 0x7a)

06:08:59 executing program 4:
unshare(0x5000000)

06:08:59 executing program 2:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)
r3 = dup2(r2, r1)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"})
mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0xff)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r4, &(0x7f00000017c0), 0x218, 0x0)

[  777.111695][ T9635] binder: 9630:9635 ioctl c0306201 0 returned -14
[  777.141596][ T9634] binder: BINDER_SET_CONTEXT_MGR already set
[  777.153202][ T9641] FAULT_INJECTION: forcing a failure.
06:08:59 executing program 4:
unshare(0x6000000)

06:08:59 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r0, 0x0, 0x300)

[  777.153202][ T9641] name failslab, interval 1, probability 0, space 0, times 0
[  777.177416][ T9634] binder: 9628:9634 ioctl 40046207 0 returned -16
[  777.242040][ T9641] CPU: 0 PID: 9641 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0
[  777.250647][ T9641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  777.260698][ T9641] Call Trace:
[  777.264000][ T9641]  dump_stack+0x188/0x20d
[  777.268341][ T9641]  should_fail.cold+0x5/0xa
[  777.272860][ T9641]  ? fault_create_debugfs_attr+0x140/0x140
[  777.278680][ T9641]  should_failslab+0x5/0xf
[  777.283100][ T9641]  kmem_cache_alloc+0x29b/0x740
[  777.287955][ T9641]  ? find_held_lock+0x2d/0x110
[  777.292722][ T9641]  __proc_create+0x29e/0x830
[  777.297303][ T9641]  ? pde_free+0x100/0x100
[  777.301612][ T9641]  ? do_raw_write_lock+0x11a/0x280
[  777.306704][ T9641]  ? do_raw_read_unlock+0x70/0x70
[  777.311728][ T9641]  proc_create_reg+0xb2/0x180
[  777.316391][ T9641]  proc_create_net_data+0x8c/0x1b0
[  777.323742][ T9641]  ? proc_net_d_revalidate+0x10/0x10
[  777.329006][ T9641]  ? proc_symlink+0x1c0/0x1c0
[  777.333664][ T9641]  ? crng_backtrack_protect+0x80/0x80
[  777.339031][ T9641]  ? nf_log_bind_pf+0xf0/0xf0
[  777.343688][ T9641]  nf_log_net_init+0x60/0x360
[  777.348342][ T9641]  ? nf_log_bind_pf+0xf0/0xf0
[  777.353003][ T9641]  ops_init+0xaf/0x420
[  777.357056][ T9641]  setup_net+0x2de/0x860
[  777.361281][ T9641]  ? ops_init+0x420/0x420
[  777.365595][ T9641]  copy_net_ns+0x293/0x590
[  777.369995][ T9641]  create_new_namespaces+0x3fb/0xb30
[  777.375265][ T9641]  unshare_nsproxy_namespaces+0xbd/0x1f0
[  777.380883][ T9641]  ksys_unshare+0x43d/0x8e0
[  777.385370][ T9641]  ? walk_process_tree+0x2c0/0x2c0
[  777.390461][ T9641]  ? fput_many+0x2f/0x1a0
[  777.394777][ T9641]  ? ksys_write+0x1a5/0x250
[  777.399266][ T9641]  ? trace_hardirqs_off_caller+0x55/0x230
[  777.404969][ T9641]  __ia32_sys_unshare+0x2c/0x40
[  777.409800][ T9641]  do_fast_syscall_32+0x270/0xe90
[  777.414824][ T9641]  entry_SYSENTER_compat+0x70/0x7f
06:09:00 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0x5501, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:09:00 executing program 4:
unshare(0x7000000)

06:09:00 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r0, 0x0, 0x500)

06:09:00 executing program 4:
unshare(0x8000000)

[  777.596883][ T9663] binder: 9661:9663 ioctl 5501 20000540 returned -22
[  777.630343][ T9663] binder: BINDER_SET_CONTEXT_MGR already set
[  777.649886][ T9663] binder: 9661:9663 ioctl 40046207 0 returned -16
06:09:00 executing program 1 (fault-call:0 fault-nth:8):
unshare(0x40000000)
socket$inet(0x2, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)

06:09:00 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0x6364, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:09:00 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r0, 0x0, 0x600)

06:09:00 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x550c, &(0x7f0000000140)=ANY=[@ANYBLOB="04"])

06:09:00 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f0000000040)={0x2, 0x20f, 0x4})
r3 = syz_open_dev$binderN(0x0, 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0)
r4 = dup2(r3, r0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r5, &(0x7f00000001c0), 0x0, 0xfdfffffe)

06:09:00 executing program 4:
unshare(0x9000000)

[  777.950191][ T9684] binder: 9677:9684 ioctl c0306201 0 returned -14
[  777.950594][ T9681] binder: 9676:9681 ioctl 6364 20000540 returned -22
[  777.971109][ T9688] FAULT_INJECTION: forcing a failure.
[  777.971109][ T9688] name failslab, interval 1, probability 0, space 0, times 0
[  777.995027][ T9684] binder: BINDER_SET_CONTEXT_MGR already set
[  778.009331][ T9684] binder: 9677:9684 ioctl 40046207 0 returned -16
[  778.019655][ T9681] binder: BINDER_SET_CONTEXT_MGR already set
[  778.021187][ T9688] CPU: 0 PID: 9688 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0
[  778.034221][ T9688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  778.044267][ T9688] Call Trace:
[  778.047564][ T9688]  dump_stack+0x188/0x20d
[  778.051906][ T9688]  should_fail.cold+0x5/0xa
[  778.054633][ T9681] binder: 9676:9681 ioctl 40046207 0 returned -16
[  778.056411][ T9688]  ? fault_create_debugfs_attr+0x140/0x140
[  778.056437][ T9688]  should_failslab+0x5/0xf
[  778.073016][ T9688]  kmem_cache_alloc+0x29b/0x740
[  778.077871][ T9688]  ? find_held_lock+0x2d/0x110
[  778.082650][ T9688]  __proc_create+0x29e/0x830
[  778.087241][ T9688]  ? pde_free+0x100/0x100
[  778.091577][ T9688]  ? do_raw_write_lock+0x11a/0x280
[  778.096696][ T9688]  ? do_raw_read_unlock+0x70/0x70
[  778.101733][ T9688]  proc_create_reg+0xb2/0x180
[  778.106417][ T9688]  proc_create_net_data+0x8c/0x1b0
[  778.111532][ T9688]  ? proc_net_d_revalidate+0x10/0x10
[  778.116817][ T9688]  ? proc_symlink+0x1c0/0x1c0
[  778.121499][ T9688]  ? crng_backtrack_protect+0x80/0x80
[  778.126875][ T9688]  ? nf_log_bind_pf+0xf0/0xf0
[  778.131555][ T9688]  nf_log_net_init+0x60/0x360
[  778.136235][ T9688]  ? nf_log_bind_pf+0xf0/0xf0
[  778.140921][ T9688]  ops_init+0xaf/0x420
[  778.144997][ T9688]  setup_net+0x2de/0x860
[  778.149251][ T9688]  ? ops_init+0x420/0x420
[  778.153596][ T9688]  copy_net_ns+0x293/0x590
[  778.158024][ T9688]  create_new_namespaces+0x3fb/0xb30
[  778.163320][ T9688]  unshare_nsproxy_namespaces+0xbd/0x1f0
[  778.168959][ T9688]  ksys_unshare+0x43d/0x8e0
[  778.173465][ T9688]  ? walk_process_tree+0x2c0/0x2c0
[  778.178585][ T9688]  ? fput_many+0x2f/0x1a0
[  778.182930][ T9688]  ? ksys_write+0x1a5/0x250
[  778.187444][ T9688]  ? trace_hardirqs_off_caller+0x55/0x230
[  778.193173][ T9688]  __ia32_sys_unshare+0x2c/0x40
06:09:00 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r0, 0x0, 0x700)

06:09:00 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r0, 0x0, 0xa00)

06:09:00 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x6364, &(0x7f0000000140)=ANY=[@ANYBLOB="04"])

06:09:00 executing program 4:
unshare(0xa000000)

[  778.198032][ T9688]  do_fast_syscall_32+0x270/0xe90
[  778.203073][ T9688]  entry_SYSENTER_compat+0x70/0x7f
06:09:01 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0x8933, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:09:01 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r0, 0x0, 0x4800)

[  778.266225][ T9705] binder: BINDER_SET_CONTEXT_MGR already set
[  778.299397][ T9705] binder: 9677:9705 ioctl 40046207 0 returned -16
[  778.373348][ T9719] binder: 9714:9719 ioctl 8933 20000540 returned -22
[  778.415605][ T9719] binder: BINDER_SET_CONTEXT_MGR already set
[  778.427479][ T9719] binder: 9714:9719 ioctl 40046207 0 returned -16
06:09:01 executing program 1 (fault-call:0 fault-nth:9):
unshare(0x40000000)
socket$inet(0x2, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)

06:09:01 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b6300000662a8cc554d18792ed44a43d70b341383439045d5300f0b3ff093637e731b09fd66fd34cae5e3c5556c68e76f5adba71ad156a302943774264d645bd98edee735b01a2b1a57dfd774d4ad143159d115f4bee847da475a9ce655c1b5086737372a0b759764a6d33b1bb4e1f749117c5a8a64bdf1b6c886569994b14db0436424844e86406eda46"], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r3, &(0x7f00000017c0), 0x218, 0x0)

06:09:01 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r0, 0x0, 0x4c00)

06:09:01 executing program 4:
unshare(0xb000000)

06:09:01 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x660c, &(0x7f0000000140)=ANY=[@ANYBLOB="04"])

06:09:01 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0x400454ca, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  778.741075][ T9732] binder: 9730:9732 ioctl c0306201 0 returned -14
[  778.766674][ T9738] FAULT_INJECTION: forcing a failure.
[  778.766674][ T9738] name failslab, interval 1, probability 0, space 0, times 0
[  778.785599][ T9739] binder: 9736:9739 ioctl 400454ca 20000540 returned -22
[  778.810597][ T9739] binder: BINDER_SET_CONTEXT_MGR already set
[  778.820771][ T9738] CPU: 1 PID: 9738 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0
[  778.829368][ T9738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  778.839413][ T9738] Call Trace:
[  778.842699][ T9738]  dump_stack+0x188/0x20d
[  778.847019][ T9738]  should_fail.cold+0x5/0xa
[  778.851508][ T9738]  ? fault_create_debugfs_attr+0x140/0x140
[  778.857327][ T9738]  should_failslab+0x5/0xf
[  778.861744][ T9738]  kmem_cache_alloc+0x29b/0x740
[  778.866578][ T9738]  ? rcu_read_lock_any_held.part.0+0x50/0x50
[  778.872550][ T9738]  __proc_create+0x29e/0x830
[  778.877119][ T9738]  ? pde_free+0x100/0x100
[  778.881436][ T9738]  ? ida_destroy+0x3a0/0x3a0
[  778.886008][ T9738]  proc_mkdir_data+0xa9/0x1a0
[  778.890666][ T9738]  ? proc_symlink+0x1c0/0x1c0
[  778.895326][ T9738]  ? crng_backtrack_protect+0x80/0x80
[  778.900677][ T9738]  ? memset+0x20/0x40
[  778.904644][ T9738]  netfilter_net_init+0x373/0x4a0
[  778.909648][ T9738]  ? nf_register_net_hooks+0xc0/0xc0
[  778.914914][ T9738]  ops_init+0xaf/0x420
[  778.918965][ T9738]  setup_net+0x2de/0x860
[  778.923188][ T9738]  ? ops_init+0x420/0x420
[  778.927505][ T9738]  copy_net_ns+0x293/0x590
[  778.931906][ T9738]  create_new_namespaces+0x3fb/0xb30
06:09:01 executing program 4:
unshare(0xc000000)

[  778.937175][ T9738]  unshare_nsproxy_namespaces+0xbd/0x1f0
[  778.942788][ T9738]  ksys_unshare+0x43d/0x8e0
[  778.947278][ T9738]  ? walk_process_tree+0x2c0/0x2c0
[  778.952367][ T9738]  ? fput_many+0x2f/0x1a0
[  778.956693][ T9738]  ? ksys_write+0x1a5/0x250
[  778.961199][ T9738]  ? trace_hardirqs_off_caller+0x55/0x230
[  778.966899][ T9738]  __ia32_sys_unshare+0x2c/0x40
[  778.971729][ T9738]  do_fast_syscall_32+0x270/0xe90
[  778.976739][ T9738]  entry_SYSENTER_compat+0x70/0x7f
06:09:01 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r0, 0x0, 0x6800)

[  779.014358][ T9739] binder: 9736:9739 ioctl 40046207 0 returned -16
06:09:01 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0x40046205, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:09:01 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r0, 0x0, 0x6c00)

06:09:01 executing program 4:
unshare(0xd000000)

06:09:02 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x8912, &(0x7f0000000140)=ANY=[@ANYBLOB="04"])

[  779.260588][ T9764] binder: BINDER_SET_CONTEXT_MGR already set
[  779.288420][ T9764] binder: 9760:9764 ioctl 40046207 0 returned -16
06:09:02 executing program 1 (fault-call:0 fault-nth:10):
unshare(0x40000000)
socket$inet(0x2, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)

06:09:02 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"})
r3 = socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000040)={0x2, 0x0, 0x8, 0xffffffff, 0x8c44})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r4, &(0x7f00000017c0), 0x218, 0x0)

06:09:02 executing program 4:
unshare(0xe000000)

06:09:02 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r0, 0x0, 0x7400)

06:09:02 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x8914, &(0x7f0000000140)=ANY=[@ANYBLOB="04"])

06:09:02 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0x40046207, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  779.345315][ T9738] cannot create netfilter proc entry
[  779.504578][ T9786] binder: BINDER_SET_CONTEXT_MGR already set
[  779.516258][ T9787] binder: 9781:9787 ioctl c0306201 0 returned -14
[  779.548476][ T9786] binder: 9783:9786 ioctl 40046207 20000540 returned -16
06:09:02 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r0, 0x0, 0x7a00)

06:09:02 executing program 4:
unshare(0xf000000)

06:09:02 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x8915, &(0x7f0000000140)=ANY=[@ANYBLOB="04"])

[  779.590017][ T9799] FAULT_INJECTION: forcing a failure.
[  779.590017][ T9799] name failslab, interval 1, probability 0, space 0, times 0
[  779.606633][ T9786] binder: BINDER_SET_CONTEXT_MGR already set
[  779.623388][ T9786] binder: 9783:9786 ioctl 40046207 0 returned -16
[  779.672323][ T9799] CPU: 1 PID: 9799 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0
[  779.680938][ T9799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  779.690994][ T9799] Call Trace:
[  779.694284][ T9799]  dump_stack+0x188/0x20d
[  779.698601][ T9799]  should_fail.cold+0x5/0xa
[  779.703088][ T9799]  ? fault_create_debugfs_attr+0x140/0x140
[  779.708884][ T9799]  should_failslab+0x5/0xf
[  779.713283][ T9799]  kmem_cache_alloc+0x29b/0x740
[  779.718144][ T9799]  ? find_held_lock+0x2d/0x110
[  779.722891][ T9799]  __proc_create+0x29e/0x830
[  779.727460][ T9799]  ? pde_free+0x100/0x100
[  779.731769][ T9799]  ? do_raw_write_lock+0x11a/0x280
[  779.736861][ T9799]  ? do_raw_read_unlock+0x70/0x70
[  779.741871][ T9799]  proc_create_reg+0xb2/0x180
[  779.746545][ T9799]  proc_create_net_data+0x8c/0x1b0
[  779.751639][ T9799]  ? proc_net_d_revalidate+0x10/0x10
[  779.756906][ T9799]  ? proc_symlink+0x1c0/0x1c0
[  779.761565][ T9799]  ? crng_backtrack_protect+0x80/0x80
[  779.766930][ T9799]  ? nf_log_bind_pf+0xf0/0xf0
[  779.771590][ T9799]  nf_log_net_init+0x60/0x360
[  779.776248][ T9799]  ? nf_log_bind_pf+0xf0/0xf0
[  779.780914][ T9799]  ops_init+0xaf/0x420
[  779.784970][ T9799]  setup_net+0x2de/0x860
[  779.789196][ T9799]  ? ops_init+0x420/0x420
[  779.793512][ T9799]  copy_net_ns+0x293/0x590
[  779.797933][ T9799]  create_new_namespaces+0x3fb/0xb30
[  779.803204][ T9799]  unshare_nsproxy_namespaces+0xbd/0x1f0
[  779.808818][ T9799]  ksys_unshare+0x43d/0x8e0
[  779.813308][ T9799]  ? walk_process_tree+0x2c0/0x2c0
[  779.818399][ T9799]  ? fput_many+0x2f/0x1a0
[  779.822714][ T9799]  ? ksys_write+0x1a5/0x250
[  779.827203][ T9799]  ? trace_hardirqs_off_caller+0x55/0x230
[  779.832929][ T9799]  __ia32_sys_unshare+0x2c/0x40
[  779.837762][ T9799]  do_fast_syscall_32+0x270/0xe90
[  779.842772][ T9799]  entry_SYSENTER_compat+0x70/0x7f
06:09:02 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0x40046208, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:09:02 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r0, 0x0, 0x1000000)

06:09:02 executing program 4:
unshare(0x10000000)

[  780.040727][ T9821] binder: BINDER_SET_CONTEXT_MGR already set
[  780.088721][ T9821] binder: 9818:9821 ioctl 40046207 0 returned -16
06:09:03 executing program 1 (fault-call:0 fault-nth:11):
unshare(0x40000000)
socket$inet(0x2, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)

06:09:03 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x8933, &(0x7f0000000140)=ANY=[@ANYBLOB="04"])

06:09:03 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
fstatfs(r1, &(0x7f0000000040)=""/64)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0)
r4 = dup2(r3, r2)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r5, &(0x7f00000017c0), 0x218, 0x0)

06:09:03 executing program 4:
unshare(0x11000000)

06:09:03 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r0, 0x0, 0x2000000)

06:09:03 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0x40049409, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  780.407435][ T9836] binder: 9833:9836 ioctl c0306201 0 returned -14
06:09:03 executing program 4:
unshare(0x12000000)

[  780.451834][ T9841] binder: BINDER_SET_CONTEXT_MGR already set
[  780.476059][ T9841] binder: 9837:9841 ioctl 40046207 0 returned -16
06:09:03 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r0, 0x0, 0x3000000)

[  780.532282][ T9855] FAULT_INJECTION: forcing a failure.
[  780.532282][ T9855] name failslab, interval 1, probability 0, space 0, times 0
06:09:03 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0x4018620d, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  780.664794][ T9855] CPU: 0 PID: 9855 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0
[  780.673412][ T9855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  780.683470][ T9855] Call Trace:
[  780.686771][ T9855]  dump_stack+0x188/0x20d
[  780.687866][ T9870] binder: BINDER_SET_CONTEXT_MGR already set
[  780.691105][ T9855]  should_fail.cold+0x5/0xa
[  780.691127][ T9855]  ? fault_create_debugfs_attr+0x140/0x140
[  780.691156][ T9855]  should_failslab+0x5/0xf
[  780.691172][ T9855]  __kmalloc+0x2d9/0x7a0
[  780.691187][ T9855]  ? __register_sysctl_table+0x83f/0xef0
[  780.691210][ T9855]  __register_sysctl_table+0x83f/0xef0
[  780.707342][ T9870] binder: 9869:9870 ioctl 4018620d 20000540 returned -16
[  780.707444][ T9855]  ? memcpy+0x39/0x60
[  780.727481][ T9870] binder: BINDER_SET_CONTEXT_MGR already set
[  780.734130][ T9855]  nf_log_net_init+0xff/0x360
[  780.734147][ T9855]  ? nf_log_bind_pf+0xf0/0xf0
[  780.734167][ T9855]  ops_init+0xaf/0x420
[  780.734188][ T9855]  setup_net+0x2de/0x860
[  780.734207][ T9855]  ? ops_init+0x420/0x420
[  780.734232][ T9855]  copy_net_ns+0x293/0x590
[  780.734258][ T9855]  create_new_namespaces+0x3fb/0xb30
[  780.742347][ T9870] binder: 9869:9870 ioctl 40046207 0 returned -16
[  780.744208][ T9855]  unshare_nsproxy_namespaces+0xbd/0x1f0
[  780.744229][ T9855]  ksys_unshare+0x43d/0x8e0
[  780.744246][ T9855]  ? walk_process_tree+0x2c0/0x2c0
[  780.744263][ T9855]  ? fput_many+0x2f/0x1a0
[  780.744279][ T9855]  ? ksys_write+0x1a5/0x250
[  780.744299][ T9855]  ? trace_hardirqs_off_caller+0x55/0x230
06:09:03 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r0, 0x0, 0x4000000)

06:09:03 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0x40186366, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:09:03 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r0, 0x0, 0x5000000)

[  780.744319][ T9855]  __ia32_sys_unshare+0x2c/0x40
[  780.816790][ T9855]  do_fast_syscall_32+0x270/0xe90
[  780.821829][ T9855]  entry_SYSENTER_compat+0x70/0x7f
[  780.827644][ T9876] binder: 9875:9876 ioctl 40186366 20000540 returned -22
[  780.902362][ T9855] sysctl could not get directory: //net -12
[  780.913300][ T9855] CPU: 0 PID: 9855 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0
[  780.921895][ T9855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  780.931948][ T9855] Call Trace:
[  780.935247][ T9855]  dump_stack+0x188/0x20d
[  780.939585][ T9855]  __register_sysctl_table+0x801/0xef0
[  780.945051][ T9855]  ? memcpy+0x39/0x60
[  780.949043][ T9855]  nf_log_net_init+0xff/0x360
[  780.953720][ T9855]  ? nf_log_bind_pf+0xf0/0xf0
[  780.958402][ T9855]  ops_init+0xaf/0x420
[  780.962477][ T9855]  setup_net+0x2de/0x860
[  780.966723][ T9855]  ? ops_init+0x420/0x420
[  780.971069][ T9855]  copy_net_ns+0x293/0x590
[  780.975495][ T9855]  create_new_namespaces+0x3fb/0xb30
[  780.980794][ T9855]  unshare_nsproxy_namespaces+0xbd/0x1f0
[  780.986430][ T9855]  ksys_unshare+0x43d/0x8e0
[  780.990938][ T9855]  ? walk_process_tree+0x2c0/0x2c0
[  780.996068][ T9855]  ? fput_many+0x2f/0x1a0
[  781.000400][ T9855]  ? ksys_write+0x1a5/0x250
[  781.004947][ T9855]  ? trace_hardirqs_off_caller+0x55/0x230
[  781.010676][ T9855]  __ia32_sys_unshare+0x2c/0x40
[  781.015533][ T9855]  do_fast_syscall_32+0x270/0xe90
[  781.020566][ T9855]  entry_SYSENTER_compat+0x70/0x7f
06:09:03 executing program 1 (fault-call:0 fault-nth:12):
unshare(0x40000000)
socket$inet(0x2, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)

06:09:03 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="64b1"], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r3, &(0x7f00000017c0), 0x218, 0x0)

06:09:03 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x8982, &(0x7f0000000140)=ANY=[@ANYBLOB="04"])

06:09:03 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0x4020940d, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:09:03 executing program 4:
unshare(0x13000000)

06:09:03 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r0, 0x0, 0x6000000)

06:09:04 executing program 4:
unshare(0x14000000)

[  781.225113][ T9896] binder: 9886:9896 ioctl c0306201 0 returned -14
[  781.238852][ T9898] binder: BINDER_SET_CONTEXT_MGR already set
[  781.281015][ T9898] binder: 9891:9898 ioctl 40046207 0 returned -16
[  781.295600][ T9905] FAULT_INJECTION: forcing a failure.
[  781.295600][ T9905] name failslab, interval 1, probability 0, space 0, times 0
06:09:04 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r0, 0x0, 0x7000000)

06:09:04 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x8983, &(0x7f0000000140)=ANY=[@ANYBLOB="04"])

[  781.339036][ T9898] binder: BINDER_SET_CONTEXT_MGR already set
[  781.375005][ T9905] CPU: 0 PID: 9905 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0
[  781.383617][ T9905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  781.393669][ T9905] Call Trace:
[  781.396969][ T9905]  dump_stack+0x188/0x20d
[  781.401312][ T9905]  should_fail.cold+0x5/0xa
[  781.405833][ T9905]  ? fault_create_debugfs_attr+0x140/0x140
[  781.411658][ T9905]  should_failslab+0x5/0xf
[  781.416079][ T9905]  __kmalloc+0x2d9/0x7a0
[  781.420325][ T9905]  ? __register_sysctl_table+0x83f/0xef0
[  781.425970][ T9905]  __register_sysctl_table+0x83f/0xef0
[  781.431445][ T9905]  nf_log_net_init+0xff/0x360
[  781.436125][ T9905]  ? nf_log_bind_pf+0xf0/0xf0
[  781.440815][ T9905]  ops_init+0xaf/0x420
[  781.444897][ T9905]  setup_net+0x2de/0x860
[  781.449147][ T9905]  ? ops_init+0x420/0x420
[  781.453488][ T9905]  copy_net_ns+0x293/0x590
[  781.457913][ T9905]  create_new_namespaces+0x3fb/0xb30
[  781.463221][ T9905]  unshare_nsproxy_namespaces+0xbd/0x1f0
[  781.468860][ T9905]  ksys_unshare+0x43d/0x8e0
[  781.473372][ T9905]  ? walk_process_tree+0x2c0/0x2c0
[  781.478487][ T9905]  ? fput_many+0x2f/0x1a0
[  781.482828][ T9905]  ? ksys_write+0x1a5/0x250
06:09:04 executing program 4:
unshare(0x15000000)

[  781.487458][ T9905]  ? trace_hardirqs_off_caller+0x55/0x230
[  781.493194][ T9905]  __ia32_sys_unshare+0x2c/0x40
[  781.498054][ T9905]  do_fast_syscall_32+0x270/0xe90
[  781.503091][ T9905]  entry_SYSENTER_compat+0x70/0x7f
[  781.525485][ T9898] binder: 9891:9898 ioctl 40046207 0 returned -16
06:09:04 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r0, 0x0, 0xa000000)

06:09:04 executing program 4:
unshare(0x16000000)

[  781.640701][ T9905] sysctl could not get directory: /net//netfilter -12
[  781.651846][ T9905] CPU: 0 PID: 9905 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0
[  781.660443][ T9905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  781.670501][ T9905] Call Trace:
[  781.673796][ T9905]  dump_stack+0x188/0x20d
[  781.678143][ T9905]  __register_sysctl_table+0x801/0xef0
[  781.683609][ T9905]  nf_log_net_init+0xff/0x360
[  781.688283][ T9905]  ? nf_log_bind_pf+0xf0/0xf0
[  781.692967][ T9905]  ops_init+0xaf/0x420
[  781.697047][ T9905]  setup_net+0x2de/0x860
[  781.701295][ T9905]  ? ops_init+0x420/0x420
[  781.705637][ T9905]  copy_net_ns+0x293/0x590
[  781.710062][ T9905]  create_new_namespaces+0x3fb/0xb30
[  781.715358][ T9905]  unshare_nsproxy_namespaces+0xbd/0x1f0
[  781.720996][ T9905]  ksys_unshare+0x43d/0x8e0
[  781.725503][ T9905]  ? walk_process_tree+0x2c0/0x2c0
[  781.730619][ T9905]  ? fput_many+0x2f/0x1a0
[  781.734951][ T9905]  ? ksys_write+0x1a5/0x250
[  781.739470][ T9905]  ? trace_hardirqs_off_caller+0x55/0x230
[  781.745197][ T9905]  __ia32_sys_unshare+0x2c/0x40
[  781.750052][ T9905]  do_fast_syscall_32+0x270/0xe90
[  781.755086][ T9905]  entry_SYSENTER_compat+0x70/0x7f
06:09:04 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0x402c5828, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  781.921119][ T9940] binder: BINDER_SET_CONTEXT_MGR already set
[  781.931681][ T9940] binder: 9939:9940 ioctl 40046207 0 returned -16
06:09:04 executing program 1 (fault-call:0 fault-nth:13):
unshare(0x40000000)
socket$inet(0x2, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)

06:09:04 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r0, 0x0, 0x48000000)

06:09:04 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x89e2, &(0x7f0000000140)=ANY=[@ANYBLOB="04"])

06:09:04 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"})
syz_emit_ethernet(0x238, &(0x7f0000000180)={@link_local, @remote, @val={@void, {0x8100, 0x3, 0x1, 0x1}}, {@mpls_uc={0x8847, {[{0x20}, {0x2}], @ipv6=@dccp_packet={0x9, 0x6, "f5baab", 0x1f6, 0x21, 0x1, @ipv4={[], [], @multicast2}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, {[@dstopts={0x33, 0x5, [], [@jumbo={0xc2, 0x4, 0x4}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x7}, @padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @mcast1}]}, @dstopts={0x5c, 0x14, [], [@generic={0x2, 0x7b, "6a114fc231fa029c6d55b37fbbe6f5ad5692810a46d3c46e6ae125652041fa838e9c1306c8cd2ea40b18935f9a7402ea83c11d50a0bdffa8b4e0b16df2431a231083c2541d2fd6319ab424923d01070926fbd6a020fa82d9b26d24d239c81c8f5adaf565bc459ca36252464af87583562fb5c544eb289076daada7"}, @hao={0xc9, 0x10, @private2}, @pad1, @enc_lim={0x4, 0x1, 0x56}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x6}, @pad1]}, @srh={0x32, 0xa, 0x4, 0x5, 0xff, 0x70, 0x46, [@mcast2, @ipv4={[], [], @rand_addr=0x64010102}, @local, @remote, @initdev={0xfe, 0x88, [], 0x1, 0x0}]}], {{0x4e22, 0x4e22, 0x4, 0x1, 0x4, 0x0, 0x0, 0x1, 0x0, "6435c4", 0x0, "cd442a"}, "011056d61749dcb27de5b775efce1fa589f480571214f8fce4598dfe8911010ae3ad6cb5a38bafe636defee4008eb3bc1e74682d9e6f6e82c0732e24f6f4e43061747b3c7890aa91f9742df71eeff8b9f5a9905ef22ba44526d7320189a8a90e603addc8fb297d651e0c3c2dbfa45ff250dbebdbdd2b3c0e146c3ac30be2c0e31163986271b6a2fab7580dacff36e48efa2c4ac66597215fab53361b03df2694844fe011a5ff"}}}}}}}, &(0x7f0000000040)={0x1, 0x1, [0x1d7, 0xf25, 0x11f, 0xc2c]})
r3 = open(&(0x7f0000000480)='./file0\x00', 0x4008040, 0x0)
close(r3)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000200)={0x13, 0x10, 0x8, {&(0x7f0000000000), r5, 0x1}}, 0x18)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f00000005c0)={0x5, 0x10, 0xfa00, {&(0x7f00000003c0), r5, 0x2}}, 0x18)
r6 = semget(0x0, 0x0, 0x40)
semctl$SEM_STAT_ANY(r6, 0x0, 0x14, &(0x7f0000000100)=""/16)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r7, &(0x7f00000017c0), 0x218, 0x0)

06:09:04 executing program 4:
unshare(0x17000000)

06:09:04 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0x402c5829, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  782.091326][ T9948] binder: 9945:9948 ioctl c0306201 0 returned -14
06:09:04 executing program 4:
unshare(0x18000000)

06:09:04 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r0, 0x0, 0x4c000000)

[  782.187501][ T9963] FAULT_INJECTION: forcing a failure.
[  782.187501][ T9963] name failslab, interval 1, probability 0, space 0, times 0
[  782.223828][ T9964] binder: BINDER_SET_CONTEXT_MGR already set
06:09:05 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0xae01, &(0x7f0000000140)=ANY=[@ANYBLOB="04"])

[  782.277167][ T9963] CPU: 1 PID: 9963 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0
[  782.285782][ T9963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  782.295834][ T9963] Call Trace:
[  782.299132][ T9963]  dump_stack+0x188/0x20d
[  782.303469][ T9963]  should_fail.cold+0x5/0xa
[  782.303556][ T9964] binder: 9956:9964 ioctl 40046207 0 returned -16
[  782.307973][ T9963]  ? fault_create_debugfs_attr+0x140/0x140
[  782.308000][ T9963]  should_failslab+0x5/0xf
[  782.324578][ T9963]  __kmalloc+0x2d9/0x7a0
[  782.328820][ T9963]  ? __register_sysctl_table+0x83f/0xef0
[  782.334467][ T9963]  __register_sysctl_table+0x83f/0xef0
[  782.339934][ T9963]  nf_log_net_init+0xff/0x360
[  782.344611][ T9963]  ? nf_log_bind_pf+0xf0/0xf0
[  782.349298][ T9963]  ops_init+0xaf/0x420
[  782.353375][ T9963]  setup_net+0x2de/0x860
[  782.357624][ T9963]  ? ops_init+0x420/0x420
[  782.361968][ T9963]  copy_net_ns+0x293/0x590
[  782.366397][ T9963]  create_new_namespaces+0x3fb/0xb30
[  782.371691][ T9963]  unshare_nsproxy_namespaces+0xbd/0x1f0
06:09:05 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r0, 0x0, 0x68000000)

[  782.377327][ T9963]  ksys_unshare+0x43d/0x8e0
[  782.381838][ T9963]  ? walk_process_tree+0x2c0/0x2c0
[  782.386959][ T9963]  ? fput_many+0x2f/0x1a0
[  782.391293][ T9963]  ? ksys_write+0x1a5/0x250
[  782.395806][ T9963]  ? trace_hardirqs_off_caller+0x55/0x230
[  782.401543][ T9963]  __ia32_sys_unshare+0x2c/0x40
[  782.406399][ T9963]  do_fast_syscall_32+0x270/0xe90
[  782.411439][ T9963]  entry_SYSENTER_compat+0x70/0x7f
06:09:05 executing program 4:
unshare(0x19000000)

06:09:05 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0x402c582a, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  782.605867][ T9963] sysctl could not get directory: /net/netfilter//nf_log -12
[  782.637647][ T9989] binder: BINDER_SET_CONTEXT_MGR already set
[  782.650896][ T9963] CPU: 0 PID: 9963 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0
[  782.659503][ T9963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  782.665705][ T9989] binder: 9988:9989 ioctl 40046207 0 returned -16
[  782.669556][ T9963] Call Trace:
[  782.669581][ T9963]  dump_stack+0x188/0x20d
[  782.669625][ T9963]  __register_sysctl_table+0x801/0xef0
[  782.689103][ T9963]  nf_log_net_init+0xff/0x360
[  782.693793][ T9963]  ? nf_log_bind_pf+0xf0/0xf0
[  782.698482][ T9963]  ops_init+0xaf/0x420
[  782.702570][ T9963]  setup_net+0x2de/0x860
[  782.706827][ T9963]  ? ops_init+0x420/0x420
[  782.711178][ T9963]  copy_net_ns+0x293/0x590
[  782.715610][ T9963]  create_new_namespaces+0x3fb/0xb30
[  782.720916][ T9963]  unshare_nsproxy_namespaces+0xbd/0x1f0
[  782.726566][ T9963]  ksys_unshare+0x43d/0x8e0
[  782.731080][ T9963]  ? walk_process_tree+0x2c0/0x2c0
[  782.736217][ T9963]  ? fput_many+0x2f/0x1a0
[  782.740554][ T9963]  ? ksys_write+0x1a5/0x250
[  782.745071][ T9963]  ? trace_hardirqs_off_caller+0x55/0x230
[  782.750804][ T9963]  __ia32_sys_unshare+0x2c/0x40
[  782.755669][ T9963]  do_fast_syscall_32+0x270/0xe90
[  782.760713][ T9963]  entry_SYSENTER_compat+0x70/0x7f
06:09:05 executing program 1:
unshare(0x40000000)
socket$inet(0x2, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)

06:09:05 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0xae03, &(0x7f0000000140)=ANY=[@ANYBLOB="04"])

06:09:05 executing program 4:
unshare(0x1a000000)

06:09:05 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r0, 0x0, 0x6c000000)

06:09:05 executing program 2:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000800)=[{&(0x7f00000002c0)=""/173, 0xad}, {&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000000040)=""/3, 0x3}, {&(0x7f0000000380)=""/92, 0x5c}, {&(0x7f0000000400)=""/203, 0xcb}, {&(0x7f0000000500)=""/215, 0xd7}, {&(0x7f0000000600)=""/160, 0xa0}, {&(0x7f00000006c0)=""/124, 0x7c}, {&(0x7f0000000740)=""/190, 0xbe}], 0x9, 0x2)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)
dup2(r2, r1)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="f901311f"], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000180)={0xffff, 0x2, "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"})
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r3, &(0x7f0000000040), 0x0, 0xffffffff)

06:09:05 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0x402c582b, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  783.116148][T10008] binder: 10006:10008 ioctl c0306201 0 returned -14
06:09:05 executing program 4:
unshare(0x1b000000)

06:09:05 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r0, 0x0, 0x74000000)

[  783.174859][T10017] binder: 10006:10017 ioctl c0306201 0 returned -14
[  783.175076][T10012] binder: BINDER_SET_CONTEXT_MGR already set
06:09:06 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0xae41, &(0x7f0000000140)=ANY=[@ANYBLOB="04"])

[  783.235277][T10012] binder: 10005:10012 ioctl 40046207 0 returned -16
06:09:06 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
write$cgroup_int(r2, &(0x7f0000000100)=0x1ff, 0x12)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r4 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0)
r5 = dup2(r4, r3)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="dc4145b0e0a30e"], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4081, 0x37}], 0x1, 0x9)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r6, &(0x7f00000017c0), 0x218, 0x0)

[  783.280940][T10022] IPVS: ftp: loaded support on port[0] = 21
06:09:06 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0x402c5839, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:09:06 executing program 4:
unshare(0x1c000000)

[  783.408385][T10038] binder: 10034:10038 ioctl c0306201 0 returned -14
[  783.448699][T10038] binder: BINDER_SET_CONTEXT_MGR already set
[  783.472820][T10038] binder: 10034:10038 ioctl 40046207 0 returned -16
[  783.502870][T10050] binder: BINDER_SET_CONTEXT_MGR already set
[  783.517273][T10038] binder: BINDER_SET_CONTEXT_MGR already set
[  783.524916][T10050] binder: 10046:10050 ioctl 40046207 0 returned -16
[  783.532266][T10038] binder: 10034:10038 ioctl 40046207 0 returned -16
[  783.548514][T10055] binder: BINDER_SET_CONTEXT_MGR already set
[  783.563637][T10055] binder: 10034:10055 ioctl 40046207 0 returned -16
06:09:06 executing program 1:
unshare(0x40000)
socket$inet(0x2, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)

06:09:06 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0xae60, &(0x7f0000000140)=ANY=[@ANYBLOB="04"])

06:09:06 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r0, 0x0, 0x7a000000)

06:09:06 executing program 4:
unshare(0x1d000000)

06:09:06 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r3, &(0x7f00000017c0), 0x218, 0x0)
r4 = openat$dlm_plock(0xffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x2000, 0x0)
waitid$P_PIDFD(0x3, r4, &(0x7f0000000180), 0xc, &(0x7f0000000200))

06:09:06 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0x80086301, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  783.802800][T10076] binder: 10073:10076 ioctl c0306201 0 returned -14
[  783.817210][T10079] binder: 10074:10079 ioctl 80086301 20000540 returned -22
06:09:06 executing program 4:
unshare(0x1e000000)

06:09:06 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r0, 0x0, 0xffffff7f)

[  783.891021][T10079] binder: BINDER_SET_CONTEXT_MGR already set
[  783.916661][T10079] binder: 10074:10079 ioctl 40046207 0 returned -16
06:09:06 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0xae80, &(0x7f0000000140)=ANY=[@ANYBLOB="04"])

06:09:06 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0044d02, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:09:06 executing program 4:
unshare(0x1f000000)

06:09:06 executing program 1:
unshare(0x80000)
socket$inet(0x2, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)

06:09:06 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r0, 0x0, 0x0)
r1 = openat$ppp(0xffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0xa801, 0x0)
ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000000040)=0x2)

[  784.185373][T10110] binder: 10107:10110 ioctl c0044d02 20000540 returned -22
06:09:07 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0xaead, &(0x7f0000000140)=ANY=[@ANYBLOB="04"])

06:09:07 executing program 4:
unshare(0x20000000)

[  784.244723][T10110] binder: BINDER_SET_CONTEXT_MGR already set
[  784.268160][T10110] binder: 10107:10110 ioctl 40046207 0 returned -16
06:09:07 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0045878, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:09:07 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x0, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r3, &(0x7f00000017c0), 0x218, 0x0)

06:09:07 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000))
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_GET_ONE_REG(r4, 0x4010aeab, &(0x7f0000000080)={0x8100000000000000, 0x101})
read(r1, 0x0, 0x0)

06:09:07 executing program 4:
unshare(0x21000000)

06:09:07 executing program 1:
unshare(0x100000)
socket$inet(0x2, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)

[  784.517254][T10143] binder: BINDER_SET_CONTEXT_MGR already set
06:09:07 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x400454ca, &(0x7f0000000140)=ANY=[@ANYBLOB="04"])

[  784.558144][T10143] binder: 10136:10143 ioctl 40046207 0 returned -16
[  784.587847][T10152] binder: 10150:10152 ioctl c0306201 0 returned -14
06:09:07 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0045878, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:09:07 executing program 4:
unshare(0x22000000)

[  784.769486][T10165] binder: BINDER_SET_CONTEXT_MGR already set
[  784.797148][T10165] binder: 10160:10165 ioctl 40046207 0 returned -16
06:09:07 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0xe)
read(r0, 0x0, 0x0)

06:09:07 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4004550a, &(0x7f0000000140)=ANY=[@ANYBLOB="04"])

06:09:07 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0046209, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:09:07 executing program 4:
unshare(0x23000000)

06:09:07 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r4 = dup2(r3, r2)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x2})
r5 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r6, &(0x7f00000017c0), 0x218, 0x0)

06:09:07 executing program 1:
unshare(0x1000000)
socket$inet(0x2, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)

06:09:07 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
timer_create(0x2, &(0x7f00000001c0)={0x0, 0x17, 0x0, @thr={&(0x7f00000002c0)="9e4e2ce37bceccad889cd79b3e835fc122b8d4a48d94ffb01acc69fb16e406035344be835045f529479cab944648d07d47305c18f1085624ae07f9b452456579c903f6ea28f63b3714da8861d3ca", &(0x7f0000000340)="f2aaa927eac433fdd7b73c97b398e3a51f80bd2545fef03fd4f1ba2327ef3f9e5d4d83ac025c9a4e821221b26ed14c4f8e82b265ef5e1cd93c1fff061641b0267634bf2876f5bf809d3d39e65f5feec646c06928f36470fed3f536bda9bdaaa23f2d54e25bc1007d698a082f28a9b7bc015fb7ba53cc445e8f8ef566f2721c6b5d5e16cc36a03fbccb5eca"}}, &(0x7f0000000140)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
timer_getoverrun(r3)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000000040))
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r4, 0x0, 0x0)

[  785.041042][T10193] binder: BINDER_SET_CONTEXT_MGR already set
[  785.058227][T10193] binder: 10189:10193 ioctl 40046207 0 returned -16
06:09:07 executing program 4:
unshare(0x24000000)

06:09:07 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc018620b, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:09:07 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x40045644, &(0x7f0000000140)=ANY=[@ANYBLOB="04"])

[  785.128514][T10201] binder: 10196:10201 ioctl c0306201 0 returned -14
[  785.173820][T10201] binder: 10196:10201 ioctl c020aa00 20000040 returned -22
[  785.206353][T10201] binder: BINDER_SET_CONTEXT_MGR already set
[  785.229084][T10201] binder: 10196:10201 ioctl 40046207 0 returned -16
[  785.232985][T10213] binder: BINDER_SET_CONTEXT_MGR already set
[  785.244704][T10216] binder: BINDER_SET_CONTEXT_MGR already set
[  785.257973][T10213] binder: 10208:10213 ioctl 40046207 0 returned -16
06:09:08 executing program 4:
unshare(0x25000000)

[  785.285774][T10216] binder: 10207:10216 ioctl 40046207 0 returned -16
06:09:08 executing program 1:
unshare(0x2000000)
socket$inet(0x2, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)

06:09:08 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

06:09:08 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x40046207, &(0x7f0000000140)=ANY=[@ANYBLOB="04"])

06:09:08 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r0, 0x0, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
dup2(r2, r1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x64, 0x0, &(0x7f0000000200)=[@release={0x40046306, 0x2}, @dead_binder_done, @register_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/190, 0xbe, 0x0, 0x23}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}, 0x40}], 0x71, 0x0, &(0x7f0000000280)="bae3284f1fc479ea4d56a04598d0f08de7ea725087ae4a503e3630356bc5452d4fe3ef9953da66ef672ebd97414fa8e0ceeb4b2b961395ff9d363af02d9bbb3d80cbae285f8f50eec94a3aeade04f9f794ff9f4b6fd7c4766824503b770df7a9ee3252eac3674b957c4bcdb67256fe16d3"})

06:09:08 executing program 4:
unshare(0x26000000)

[  785.459497][T10233] binder: BINDER_SET_CONTEXT_MGR already set
[  785.495836][T10233] binder: 10231:10233 ioctl 40046207 0 returned -16
[  785.529937][T10241] binder: 10231:10241 ioctl c018620c 20000540 returned -22
[  785.571788][T10238] debugfs: Directory 'vcpu0' with parent '10238-8' already present!
[  785.598103][T10233] binder: BINDER_SET_CONTEXT_MGR already set
[  785.616189][T10233] binder: 10231:10233 ioctl 40046207 0 returned -16
06:09:08 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r3, &(0x7f00000017c0), 0x218, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x3c1, 0x3, 0x268, 0xc8, 0xc8, 0xc8, 0x0, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa4, 0xc8}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'bond_slave_1\x00', 'veth1_to_bond\x00'}, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34, 'SET\x00'}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x2c4)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000100))
openat$vim2m(0xffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)

06:09:08 executing program 4:
unshare(0x27000000)

06:09:08 executing program 1:
unshare(0x3000000)
socket$inet(0x2, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)

06:09:08 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x40049409, &(0x7f0000000140)=ANY=[@ANYBLOB="04"])

06:09:08 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0189436, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  785.786166][T10220] binder: BINDER_SET_CONTEXT_MGR already set
[  785.792195][T10220] binder: 10196:10220 ioctl 40046207 0 returned -16
[  785.801624][T10265] binder: BINDER_SET_CONTEXT_MGR already set
[  785.819809][T10265] binder: 10196:10265 ioctl 40046207 0 returned -16
06:09:08 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="7e93001d"], 0x0, 0x0, 0x0})
r3 = dup2(r2, r1)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$VIDIOC_G_DV_TIMINGS(r3, 0xc0845658, &(0x7f0000000100)={0x0, @reserved})
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read(r4, 0x0, 0x0)

06:09:08 executing program 4:
unshare(0x28000000)

[  785.910909][T10276] binder: BINDER_SET_CONTEXT_MGR already set
[  785.925297][T10276] binder: 10269:10276 ioctl 40046207 0 returned -16
06:09:08 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc020660b, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  785.964463][T10285] binder: 10278:10285 ioctl c0306201 0 returned -14
[  785.996139][T10287] binder: 10270:10287 unknown command 486577022
06:09:08 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x40085503, &(0x7f0000000140)=ANY=[@ANYBLOB="04"])

[  786.033869][T10287] binder: 10270:10287 ioctl c0306201 20000200 returned -22
[  786.041603][T10295] xt_TCPMSS: Only works on TCP SYN packets
[  786.072950][T10295] xt_TCPMSS: Only works on TCP SYN packets
[  786.074293][T10296] binder: 10270:10296 ioctl c0845658 20000100 returned -22
06:09:08 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup2(r1, r0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x4800)
ioctl$KVM_SET_TSC_KHZ(r3, 0xaea2, 0x3)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r4, &(0x7f00000017c0), 0x218, 0x0)

06:09:08 executing program 1:
unshare(0x4000000)
socket$inet(0x2, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)

06:09:08 executing program 4:
unshare(0x29000000)

06:09:08 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306202, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  786.167697][T10304] binder: BINDER_SET_CONTEXT_MGR already set
[  786.181480][T10304] binder: 10301:10304 ioctl 40046207 0 returned -16
06:09:09 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008641a, &(0x7f0000000140)=ANY=[@ANYBLOB="04"])

06:09:09 executing program 4:
unshare(0x2a000000)

[  786.457063][T10325] binder: 10320:10325 ioctl c0306201 0 returned -14
[  786.461746][T10322] binder: 10316:10322 ioctl c0306202 20000540 returned -22
[  786.504015][T10322] binder: BINDER_SET_CONTEXT_MGR already set
[  786.510042][T10322] binder: 10316:10322 ioctl 40046207 0 returned -16
06:09:09 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae61, &(0x7f0000000140)=ANY=[@ANYBLOB="04"])

06:09:09 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306203, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  786.723379][T10343] binder: 10340:10343 ioctl c0306203 20000540 returned -22
[  786.743879][T10349] binder: BINDER_SET_CONTEXT_MGR already set
[  786.749895][T10349] binder: 10270:10349 ioctl 40046207 0 returned -16
[  786.758405][T10343] binder: BINDER_SET_CONTEXT_MGR already set
[  786.783548][T10343] binder: 10340:10343 ioctl 40046207 0 returned -16
[  786.788709][T10355] binder: 10270:10355 unknown command 486577022
[  786.814054][T10355] binder: 10270:10355 ioctl c0306201 20000200 returned -22
[  786.843616][T10349] binder: 10270:10349 ioctl c0845658 20000100 returned -22
[  807.145317][    T0] NOHZ: local_softirq_pending 08
[  827.623701][    T0] NOHZ: local_softirq_pending 08
[  847.451322][    T0] NOHZ: local_softirq_pending 08
[  868.583282][    T0] NOHZ: local_softirq_pending 08
[  877.529171][    T0] NOHZ: local_softirq_pending 08
[  888.407951][    T0] NOHZ: local_softirq_pending 08
[  889.048901][    T0] NOHZ: local_softirq_pending 08
[  929.378974][    T0] NOHZ: local_softirq_pending 08
[  944.083670][ T1132] INFO: task syz-executor.0:10275 blocked for more than 143 seconds.
[  944.091770][ T1132]       Not tainted 5.7.0-rc6-syzkaller #0
[  944.097915][ T1132] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  944.106833][ T1132] syz-executor.0  D28088 10275   7068 0x20020004
[  944.113159][ T1132] Call Trace:
[  944.116526][ T1132]  ? __schedule+0x937/0x1ff0
[  944.121110][ T1132]  ? rwsem_down_write_slowpath+0x90a/0xf90
[  944.126996][ T1132]  ? __sched_text_start+0x8/0x8
[  944.131843][ T1132]  ? schedule+0xd0/0x2a0
[  944.136138][ T1132]  ? rwsem_down_write_slowpath+0x706/0xf90
[  944.141937][ T1132]  ? pcpu_alloc+0xfed/0x13b0
[  944.148018][ T1132]  ? rwsem_mark_wake+0x8d0/0x8d0
[  944.152958][ T1132]  ? lock_acquire+0x1f2/0x8f0
[  944.157751][ T1132]  ? register_netdevice_notifier+0x1e/0x270
[  944.165008][ T1132]  ? lock_release+0x800/0x800
[  944.169702][ T1132]  ? down_write+0x137/0x150
[  944.174313][ T1132]  ? down_write+0xb2/0x150
[  944.178725][ T1132]  ? down_write+0x137/0x150
[  944.183288][ T1132]  ? __down_timeout+0x2d0/0x2d0
[  944.188141][ T1132]  ? pcpu_alloc+0x128/0x13b0
[  944.192796][ T1132]  ? register_netdevice_notifier+0x1e/0x270
[  944.198887][ T1132]  ? raw_init+0x296/0x340
[  944.203288][ T1132]  ? raw_sock_no_ioctlcmd+0x10/0x10
[  944.208502][ T1132]  ? can_create+0x27c/0x500
[  944.213066][ T1132]  ? __sock_create+0x3cb/0x730
[  944.217902][ T1132]  ? __sys_socket+0xef/0x200
[  944.222485][ T1132]  ? move_addr_to_kernel+0x70/0x70
[  944.227676][ T1132]  ? __ia32_sys_clock_gettime32+0x165/0x240
[  944.233634][ T1132]  ? __x64_sys_clock_gettime32+0x240/0x240
[  944.239457][ T1132]  ? __ia32_sys_socket+0x6f/0xb0
[  944.244560][ T1132]  ? lockdep_hardirqs_on+0x463/0x620
[  944.249849][ T1132]  ? do_fast_syscall_32+0x270/0xe90
[  944.256386][ T1132]  ? entry_SYSENTER_compat+0x70/0x7f
[  944.261702][ T1132] INFO: task syz-executor.0:10287 blocked for more than 143 seconds.
[  944.269977][ T1132]       Not tainted 5.7.0-rc6-syzkaller #0
[  944.275864][ T1132] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  944.284603][ T1132] syz-executor.0  D28000 10287   7068 0x20020004
[  944.290927][ T1132] Call Trace:
[  944.294274][ T1132]  ? __schedule+0x937/0x1ff0
[  944.298862][ T1132]  ? rwsem_down_write_slowpath+0x90a/0xf90
[  944.304754][ T1132]  ? __sched_text_start+0x8/0x8
[  944.309597][ T1132]  ? schedule+0xd0/0x2a0
[  944.313914][ T1132]  ? rwsem_down_write_slowpath+0x706/0xf90
[  944.319735][ T1132]  ? pcpu_alloc+0xfed/0x13b0
[  944.326870][ T1132]  ? rwsem_mark_wake+0x8d0/0x8d0
[  944.331820][ T1132]  ? lock_acquire+0x1f2/0x8f0
[  944.336579][ T1132]  ? register_netdevice_notifier+0x1e/0x270
[  944.342465][ T1132]  ? lock_release+0x800/0x800
[  944.347225][ T1132]  ? down_write+0x137/0x150
[  944.351751][ T1132]  ? down_write+0xb2/0x150
[  944.356222][ T1132]  ? down_write+0x137/0x150
[  944.360766][ T1132]  ? __down_timeout+0x2d0/0x2d0
[  944.367015][ T1132]  ? pcpu_alloc+0x128/0x13b0
[  944.371605][ T1132]  ? register_netdevice_notifier+0x1e/0x270
[  944.377553][ T1132]  ? raw_init+0x296/0x340
[  944.381895][ T1132]  ? raw_sock_no_ioctlcmd+0x10/0x10
[  944.387144][ T1132]  ? can_create+0x27c/0x500
[  944.391640][ T1132]  ? __sock_create+0x3cb/0x730
[  944.396466][ T1132]  ? __sys_socket+0xef/0x200
[  944.401049][ T1132]  ? move_addr_to_kernel+0x70/0x70
[  944.406264][ T1132]  ? __ia32_sys_clock_gettime32+0x165/0x240
[  944.412150][ T1132]  ? __x64_sys_clock_gettime32+0x240/0x240
[  944.418004][ T1132]  ? __ia32_sys_socket+0x6f/0xb0
[  944.422953][ T1132]  ? lockdep_hardirqs_on+0x463/0x620
[  944.428299][ T1132]  ? do_fast_syscall_32+0x270/0xe90
[  944.433584][ T1132]  ? entry_SYSENTER_compat+0x70/0x7f
[  944.438874][ T1132] 
[  944.438874][ T1132] Showing all locks held in the system:
[  944.446664][ T1132] 3 locks held by kworker/u4:1/21:
[  944.451760][ T1132]  #0: ffff8880a9771938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x844/0x16a0
[  944.462101][ T1132]  #1: ffffc90000dd7dc0 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x878/0x16a0
[  944.472097][ T1132]  #2: ffffffff8a57a9b0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x9b/0xa50
[  944.482829][ T1132] 1 lock held by khungtaskd/1132:
[  944.487918][ T1132]  #0: ffffffff899bea80 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260
[  944.497832][ T1132] 1 lock held by in:imklog/6723:
[  944.502743][ T1132]  #0: ffff888094b593f0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100
[  944.512004][ T1132] 1 lock held by syz-executor.0/10275:
[  944.517545][ T1132]  #0: ffffffff8a57a9b0 (pernet_ops_rwsem){++++}-{3:3}, at: register_netdevice_notifier+0x1e/0x270
[  944.528307][ T1132] 1 lock held by syz-executor.0/10287:
[  944.533818][ T1132]  #0: ffffffff8a57a9b0 (pernet_ops_rwsem){++++}-{3:3}, at: register_netdevice_notifier+0x1e/0x270
[  944.544586][ T1132] 
[  944.546904][ T1132] =============================================
[  944.546904][ T1132] 
[  944.555385][ T1132] NMI backtrace for cpu 0
[  944.559702][ T1132] CPU: 0 PID: 1132 Comm: khungtaskd Not tainted 5.7.0-rc6-syzkaller #0
[  944.567918][ T1132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  944.577974][ T1132] Call Trace:
[  944.581244][ T1132]  dump_stack+0x188/0x20d
[  944.585563][ T1132]  nmi_cpu_backtrace.cold+0x70/0xb1
[  944.590814][ T1132]  ? lapic_can_unplug_cpu.cold+0x3b/0x3b
[  944.596433][ T1132]  nmi_trigger_cpumask_backtrace+0x231/0x27e
[  944.602476][ T1132]  watchdog+0xa8c/0x1010
[  944.606703][ T1132]  ? reset_hung_task_detector+0x30/0x30
[  944.612259][ T1132]  kthread+0x388/0x470
[  944.616306][ T1132]  ? kthread_mod_delayed_work+0x1a0/0x1a0
[  944.622005][ T1132]  ret_from_fork+0x24/0x30
[  944.626862][ T1132] Sending NMI from CPU 0 to CPUs 1:
[  944.632481][    C1] NMI backtrace for cpu 1
[  944.632487][    C1] CPU: 1 PID: 6724 Comm: rs:main Q:Reg Not tainted 5.7.0-rc6-syzkaller #0
[  944.632492][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  944.632496][    C1] RIP: 0010:__lock_acquire+0x2215/0x4c50
[  944.632506][    C1] Code: c2 74 59 49 bd 00 00 00 00 00 fc ff df 48 8b 4c 24 08 eb 06 48 83 ea 08 74 42 48 8d 7a 18 48 89 f8 48 c1 e8 03 42 80 3c 28 00 <0f> 85 ba 1d 00 00 48 8b 42 18 48 39 c1 0f 84 0f eb ff ff 48 8d 7a
[  944.632510][    C1] RSP: 0018:ffffc90003527a78 EFLAGS: 00000046
[  944.632516][    C1] RAX: 1ffffffff17a12d7 RBX: 00000000000052c3 RCX: 82feef7d02698dba
[  944.632521][    C1] RDX: ffffffff8bd096a0 RSI: 0000000000000008 RDI: ffffffff8bd096b8
[  944.632525][    C1] RBP: ffff8880a1bb0d48 R08: 0000000000000001 R09: fffffbfff185dd40
[  944.632530][    C1] R10: ffffffff8c2ee9ff R11: fffffbfff185dd3f R12: ffff8880a1bb0480
[  944.632534][    C1] R13: dffffc0000000000 R14: 0000000000000001 R15: ffffffff8a89c390
[  944.632539][    C1] FS:  00007f0181402700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000
[  944.632543][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  944.632548][    C1] CR2: 00007f2ac1e70020 CR3: 0000000090196000 CR4: 00000000001406e0
[  944.632552][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  944.632557][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  944.632559][    C1] Call Trace:
[  944.632562][    C1]  ? __lock_acquire+0xcbb/0x4c50
[  944.632565][    C1]  ? mark_held_locks+0xe0/0xe0
[  944.632568][    C1]  ? get_futex_key+0x1670/0x1670
[  944.632571][    C1]  lock_acquire+0x1f2/0x8f0
[  944.632574][    C1]  ? __fdget_pos+0xe9/0x100
[  944.632577][    C1]  ? lock_release+0x800/0x800
[  944.632580][    C1]  __mutex_lock+0x156/0x13c0
[  944.632583][    C1]  ? __fdget_pos+0xe9/0x100
[  944.632586][    C1]  ? __fdget_pos+0xe9/0x100
[  944.632589][    C1]  ? rcu_read_lock_held_common+0x130/0x130
[  944.632593][    C1]  ? mutex_trylock+0x2c0/0x2c0
[  944.632596][    C1]  ? __fget_files+0x32f/0x500
[  944.632599][    C1]  ? ksys_dup3+0x3c0/0x3c0
[  944.632602][    C1]  ? __fdget_pos+0xe9/0x100
[  944.632605][    C1]  __fdget_pos+0xe9/0x100
[  944.632607][    C1]  ksys_write+0x6e/0x250
[  944.632610][    C1]  ? __ia32_sys_read+0xb0/0xb0
[  944.632614][    C1]  ? trace_hardirqs_off_caller+0x55/0x230
[  944.632617][    C1]  do_syscall_64+0xf6/0x7d0
[  944.632621][    C1]  entry_SYSCALL_64_after_hwframe+0x49/0xb3
[  944.632624][    C1] RIP: 0033:0x7f0183e461cd
[  944.632633][    C1] Code: c2 20 00 00 75 10 b8 01 00 00 00 0f 05 48 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 ae fc ff ff 48 89 04 24 b8 01 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 f7 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01
[  944.632637][    C1] RSP: 002b:00007f0181401590 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  944.632645][    C1] RAX: ffffffffffffffda RBX: 00007f0174025e20 RCX: 00007f0183e461cd
[  944.632649][    C1] RDX: 0000000000000476 RSI: 00007f0174025e20 RDI: 0000000000000006
[  944.632654][    C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  944.632658][    C1] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f0174025ba0
[  944.632663][    C1] R13: 00007f01814015b0 R14: 00005606de572360 R15: 0000000000000476
[  944.634396][ T1132] Kernel panic - not syncing: hung_task: blocked tasks
[  944.942833][ T1132] CPU: 0 PID: 1132 Comm: khungtaskd Not tainted 5.7.0-rc6-syzkaller #0
[  944.951039][ T1132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  944.961069][ T1132] Call Trace:
[  944.964353][ T1132]  dump_stack+0x188/0x20d
[  944.968680][ T1132]  panic+0x2e3/0x75c
[  944.972569][ T1132]  ? add_taint.cold+0x16/0x16
[  944.977237][ T1132]  ? lapic_can_unplug_cpu.cold+0x3b/0x3b
[  944.982845][ T1132]  ? preempt_schedule_thunk+0x16/0x18
[  944.988197][ T1132]  ? watchdog+0xa8c/0x1010
[  944.992595][ T1132]  ? nmi_trigger_cpumask_backtrace+0x214/0x27e
[  944.998719][ T1132]  watchdog+0xa9d/0x1010
[  945.002937][ T1132]  ? reset_hung_task_detector+0x30/0x30
[  945.008465][ T1132]  kthread+0x388/0x470
[  945.012515][ T1132]  ? kthread_mod_delayed_work+0x1a0/0x1a0
[  945.018208][ T1132]  ret_from_fork+0x24/0x30
[  945.024078][ T1132] Kernel Offset: disabled
[  945.028414][ T1132] Rebooting in 86400 seconds..