fffffff9c, &(0x7f0000000000), 0x100, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:37:58 executing program 5:
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(0x0, 0x0)

09:37:58 executing program 0:
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(0x0, 0x0)

09:37:58 executing program 5:
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(0x0, 0x0)

09:37:58 executing program 0:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:37:58 executing program 5:
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(0x0, 0x0)

09:37:58 executing program 0:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:37:58 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:37:58 executing program 0:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:37:58 executing program 4:
r0 = syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x2d, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x58)
read$FUSE(0xffffffffffffffff, &(0x7f00000002c0)={0x2020, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2020)
syz_clone3(&(0x7f0000002300)={0x240041400, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[r0, r1, r1], 0x3}, 0x58)

09:37:58 executing program 1:
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(0x0, 0x0)

09:37:58 executing program 2:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:37:58 executing program 3:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:37:58 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:37:58 executing program 0:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:37:58 executing program 1:
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(0x0, 0x0)

09:37:58 executing program 4:
r0 = syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x2d, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x58)
read$FUSE(0xffffffffffffffff, &(0x7f00000002c0)={0x2020, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2020)
syz_clone3(&(0x7f0000002300)={0x240041400, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[r0, r1, r1], 0x3}, 0x58)

09:37:58 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:37:58 executing program 1:
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(0x0, 0x0)

09:37:58 executing program 4:
r0 = syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x2d, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x58)
read$FUSE(0xffffffffffffffff, &(0x7f00000002c0)={0x2020, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2020)
syz_clone3(&(0x7f0000002300)={0x240041400, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[r0, r1, r1], 0x3}, 0x58)

09:37:58 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:37:58 executing program 4:
r0 = syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x2d, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x58)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[r0, 0x0, 0x0], 0x3, {r1}}, 0x58)

09:37:58 executing program 2:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:37:58 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x0, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:37:59 executing program 3:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:37:59 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x0, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:37:59 executing program 0:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:37:59 executing program 2:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:37:59 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x0, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:37:59 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:37:59 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, 0x0, {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:37:59 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, &(0x7f0000000100), &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:37:59 executing program 2:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:37:59 executing program 0:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)

09:37:59 executing program 3:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:00 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, 0x0, {}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:00 executing program 4:
r0 = openat$null(0xffffffffffffff9c, 0x0, 0x100, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:00 executing program 2:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:00 executing program 4:
r0 = openat$null(0xffffffffffffff9c, 0x0, 0x100, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:00 executing program 4:
r0 = openat$null(0xffffffffffffff9c, 0x0, 0x100, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:00 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:01 executing program 4:
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(0x0, 0x0)

09:38:01 executing program 2:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:05 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:05 executing program 4:
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(0x0, 0x0)

09:38:05 executing program 0:
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

09:38:05 executing program 3:
syz_clone3(&(0x7f0000002300)={0x240041400, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3}, 0x58)

09:38:06 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:06 executing program 2:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:06 executing program 4:
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(0x0, 0x0)

09:38:06 executing program 3:
syz_clone3(&(0x7f0000002300)={0x240041400, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3}, 0x58)

09:38:06 executing program 0:
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

09:38:06 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:06 executing program 3:
syz_clone3(&(0x7f0000002300)={0x240041400, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3}, 0x58)

09:38:06 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x0, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:06 executing program 0:
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

09:38:06 executing program 3:
r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:06 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x0, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:06 executing program 3:
r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:07 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:07 executing program 2:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:07 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x0, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:07 executing program 0:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x0, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:07 executing program 3:
r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:07 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:07 executing program 3:
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(0x0, 0x0)

09:38:07 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, &(0x7f0000000100), &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:07 executing program 3:
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(0x0, 0x0)

09:38:07 executing program 0:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:07 executing program 3:
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(0x0, 0x0)

09:38:07 executing program 3:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x0, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:07 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:07 executing program 2:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, &(0x7f0000000100), &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:07 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, &(0x7f0000000100), 0x0, {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:07 executing program 3:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x0, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:07 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, &(0x7f0000000100), &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:07 executing program 3:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x0, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:08 executing program 0:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, &(0x7f0000000100), &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:08 executing program 3:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, &(0x7f0000000100), &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:08 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, 0x0, {}, &(0x7f0000000200)=""/147, 0x93, 0x0, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:08 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, &(0x7f0000000100), 0x0, {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:08 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, &(0x7f0000000100), &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:08 executing program 2:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, &(0x7f0000000100), &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:08 executing program 0:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, &(0x7f0000000100), &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:08 executing program 3:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, &(0x7f0000000100), &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:08 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, 0x0, {}, &(0x7f0000000200)=""/147, 0x93, 0x0, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:09 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, &(0x7f0000000100), 0x0, {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:09 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, &(0x7f0000000000), 0x0, &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:09 executing program 2:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, &(0x7f0000000100), &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:09 executing program 3:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, &(0x7f0000000100), &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:09 executing program 0:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, &(0x7f0000000100), &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:09 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, 0x0, {}, &(0x7f0000000200)=""/147, 0x93, 0x0, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:09 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, &(0x7f0000000100), &(0x7f0000000080), {}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:09 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, &(0x7f0000000000), 0x0, &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:09 executing program 2:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, &(0x7f0000000000), 0x0, &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:09 executing program 3:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, &(0x7f0000000000), 0x0, &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:09 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, 0x0, {}, &(0x7f0000000200)=""/147, 0x93, 0x0, 0x0, 0x0, {r0}}, 0x58)

09:38:10 executing program 0:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, 0x0, {}, &(0x7f0000000200)=""/147, 0x93, 0x0, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:10 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, &(0x7f0000000100), &(0x7f0000000080), {}, 0x0, 0x0, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:10 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, &(0x7f0000000000), 0x0, 0x0, {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:10 executing program 3:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, &(0x7f0000000000), 0x0, 0x0, {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:10 executing program 5:
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, 0x0, {}, &(0x7f0000000200)=""/147, 0x93, 0x0, 0x0}, 0x58)

09:38:10 executing program 2:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, &(0x7f0000000000), 0x0, &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:10 executing program 5:
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, 0x0, {}, &(0x7f0000000200)=""/147, 0x93, 0x0, 0x0}, 0x58)

09:38:10 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, &(0x7f0000000100), &(0x7f0000000080), {}, 0x0, 0x0, 0x0, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:10 executing program 0:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, &(0x7f0000000100), &(0x7f0000000080), {}, 0x0, 0x0, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:10 executing program 5:
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, 0x0, {}, &(0x7f0000000200)=""/147, 0x93, 0x0, 0x0}, 0x58)

09:38:10 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, &(0x7f0000000000), 0x0, 0x0, {}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:11 executing program 3:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, &(0x7f0000000000), 0x0, 0x0, {}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:11 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, &(0x7f0000000000), 0x0, 0x0, {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:11 executing program 2:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, &(0x7f0000000000), 0x0, 0x0, {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:11 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, &(0x7f0000000100), &(0x7f0000000080), {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)

09:38:11 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:11 executing program 0:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, &(0x7f0000000100), &(0x7f0000000080), {}, 0x0, 0x0, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:11 executing program 3:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:11 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, &(0x7f0000000000), 0x0, 0x0, {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:11 executing program 1:
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, &(0x7f0000000100), &(0x7f0000000080), {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

09:38:12 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:12 executing program 1:
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, &(0x7f0000000100), &(0x7f0000000080), {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

09:38:12 executing program 2:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:12 executing program 1:
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, &(0x7f0000000100), &(0x7f0000000080), {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

09:38:12 executing program 3:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:12 executing program 0:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:12 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, &(0x7f0000000100), &(0x7f0000000080), {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)

09:38:12 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, &(0x7f0000000000), 0x0, 0x0, {}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:12 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)

09:38:12 executing program 2:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:12 executing program 3:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)

09:38:13 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:13 executing program 0:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:13 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, &(0x7f0000000000), 0x0, 0x0, {}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:13 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)

09:38:13 executing program 3:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)

09:38:13 executing program 2:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)

09:38:13 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)

09:38:13 executing program 0:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, &(0x7f0000000100), &(0x7f0000000080), {}, 0x0, 0x0, 0x0, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:13 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, 0x0, {}, &(0x7f0000000200)=""/147, 0x93, 0x0, 0x0, 0x0, {r0}}, 0x58)

09:38:13 executing program 3:
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

09:38:13 executing program 4:
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

09:38:14 executing program 4:
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

09:38:14 executing program 2:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)

09:38:14 executing program 3:
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

09:38:14 executing program 4:
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

09:38:14 executing program 3:
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

09:38:14 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)

09:38:14 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, &(0x7f0000000000), 0x0, &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:14 executing program 3:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, &(0x7f0000000000), 0x0, &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:14 executing program 0:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, &(0x7f0000000100), &(0x7f0000000080), {}, 0x0, 0x0, 0x0, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:14 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, &(0x7f0000000100), &(0x7f0000000080), {}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:14 executing program 2:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, &(0x7f0000000100), &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:14 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, &(0x7f0000000100), 0x0, {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:15 executing program 3:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, 0x0, {}, &(0x7f0000000200)=""/147, 0x93, 0x0, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:15 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, &(0x7f0000000100), 0x0, {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:15 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, 0x0, {}, &(0x7f0000000200)=""/147, 0x93, 0x0, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:15 executing program 0:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, &(0x7f0000000100), &(0x7f0000000080), {}, 0x0, 0x0, 0x0, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:15 executing program 2:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, &(0x7f0000000100), &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:15 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, &(0x7f0000000100), 0x0, {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:15 executing program 3:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:15 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:16 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:16 executing program 0:
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, &(0x7f0000000100), &(0x7f0000000080), {}, 0x0, 0x0, 0x0, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3}, 0x58)

09:38:16 executing program 2:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x0, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:16 executing program 0:
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, &(0x7f0000000100), &(0x7f0000000080), {}, 0x0, 0x0, 0x0, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3}, 0x58)

09:38:16 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, 0x0, {}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:16 executing program 0:
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, &(0x7f0000000100), &(0x7f0000000080), {}, 0x0, 0x0, 0x0, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3}, 0x58)

09:38:16 executing program 2:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)

09:38:16 executing program 3:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:16 executing program 0:
r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, &(0x7f0000000100), &(0x7f0000000080), {}, 0x0, 0x0, 0x0, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:16 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, &(0x7f0000000100), &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:16 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:16 executing program 0:
r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, &(0x7f0000000100), &(0x7f0000000080), {}, 0x0, 0x0, 0x0, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:16 executing program 0:
r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, &(0x7f0000000100), &(0x7f0000000080), {}, 0x0, 0x0, 0x0, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:16 executing program 0:
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(0x0, 0x0)

09:38:16 executing program 0:
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(0x0, 0x0)

09:38:17 executing program 4:
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(0x0, 0x0)

09:38:17 executing program 0:
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(0x0, 0x0)

09:38:17 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, 0x0, {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:17 executing program 2:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:17 executing program 3:
r0 = syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x2d, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x58)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[r0, 0x0, 0x0], 0x3, {r1}}, 0x58)

09:38:17 executing program 0:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), {}, 0x0, 0x0, 0x0, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:17 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, &(0x7f0000000100), &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:17 executing program 1:
r0 = syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x2d, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x58)
read$FUSE(0xffffffffffffffff, &(0x7f00000002c0)={0x2020, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2020)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[r0, r1, r1], 0x3, {r2}}, 0x58)

09:38:17 executing program 0:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), {}, 0x0, 0x0, 0x0, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:17 executing program 0:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), {}, 0x0, 0x0, 0x0, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:17 executing program 0:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, &(0x7f0000000080), {}, 0x0, 0x0, 0x0, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:17 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, 0x0, {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:18 executing program 2:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:18 executing program 3:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), {}, 0x0, 0x0, 0x0, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:18 executing program 5:
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff], 0x1}, 0x58)

09:38:18 executing program 1:
r0 = syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x2d, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x58)
read$FUSE(0xffffffffffffffff, &(0x7f00000002c0)={0x2020, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2020)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000080), {0x2e}, &(0x7f0000000200)=""/147, 0x93, &(0x7f0000000040)=""/39, &(0x7f0000002400)=[r0, r1, r1], 0x3, {r2}}, 0x58)

09:38:18 executing program 0:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:18 executing program 3:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, &(0x7f0000000080), {}, 0x0, 0x0, 0x0, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:18 executing program 4:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000240), 0x8, &(0x7f0000000080))

09:38:18 executing program 2:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:18 executing program 5:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff], 0x1, {r0}}, 0x58)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000240), 0x8, 0x0)

09:38:18 executing program 0:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)

09:38:18 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:18 executing program 3:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000240), 0x8, &(0x7f0000000080))

09:38:19 executing program 4:
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="000352157000fcdbdf250600000008000a00040000007110b9c4041fd1cb6565e3ef37ecafcdfd67ae566c00515bfbe0232323691dd37f6212813d8f0c20331f4e55bf548252f335cbf0b0a079d84c67193fd3178c4178680499d23a743a3355a60944dfb6d5f0d32105db6633feefe2ad1e4baa8db724c6ada487c3914757915efe1d4d9c7b8ea9a5328d958ddab1f7c3121bdeb07c55619ea638698f448c8c2f56d4a300c273c8f94ec3f688f0d0e21d05c3f81015a8a6aa4c5fa77c3edede24bd7f17a2b9f3e7092914f232734e98e1b8676cf23960333dcff16be611763b499a9e9bbabbf6b1eddd0182f41cb8c1e59e"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40090)
r1 = getpgid(0x0)
ptrace$peek(0xffffffffffffffff, r1, 0x0)
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[r1], 0x1}, 0x58)

09:38:19 executing program 2:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff], 0x1, {r0}}, 0x58)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000240), 0x8, 0x0)

09:38:19 executing program 0:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)

09:38:19 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)

09:38:19 executing program 4:
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="000352157000fcdbdf250600000008000a00040000007110b9c4041fd1cb6565e3ef37ecafcdfd67ae566c00515bfbe0232323691dd37f6212813d8f0c20331f4e55bf548252f335cbf0b0a079d84c67193fd3178c4178680499d23a743a3355a60944dfb6d5f0d32105db6633feefe2ad1e4baa8db724c6ada487c3914757915efe1d4d9c7b8ea9a5328d958ddab1f7c3121bdeb07c55619ea638698f448c8c2f56d4a300c273c8f94ec3f688f0d0e21d05c3f81015a8a6aa4c5fa77c3edede24bd7f17a2b9f3e7092914f232734e98e1b8676cf23960333dcff16be611763b499a9e9bbabbf6b1eddd0182f41cb8c1e59e"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40090)
r1 = getpgid(0x0)
ptrace$peek(0xffffffffffffffff, r1, 0x0)
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[r1], 0x1}, 0x58)

09:38:19 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58)

09:38:19 executing program 3:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000240), 0x8, &(0x7f0000000080))

09:38:19 executing program 4:
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="000352157000fcdbdf250600000008000a00040000007110b9c4041fd1cb6565e3ef37ecafcdfd67ae566c00515bfbe0232323691dd37f6212813d8f0c20331f4e55bf548252f335cbf0b0a079d84c67193fd3178c4178680499d23a743a3355a60944dfb6d5f0d32105db6633feefe2ad1e4baa8db724c6ada487c3914757915efe1d4d9c7b8ea9a5328d958ddab1f7c3121bdeb07c55619ea638698f448c8c2f56d4a300c273c8f94ec3f688f0d0e21d05c3f81015a8a6aa4c5fa77c3edede24bd7f17a2b9f3e7092914f232734e98e1b8676cf23960333dcff16be611763b499a9e9bbabbf6b1eddd0182f41cb8c1e59e"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40090)
r1 = getpgid(0x0)
ptrace$peek(0xffffffffffffffff, r1, 0x0)
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[r1], 0x1}, 0x58)

09:38:20 executing program 0:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)

09:38:20 executing program 4:
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="000352157000fcdbdf250600000008000a00040000007110b9c4041fd1cb6565e3ef37ecafcdfd67ae566c00515bfbe0232323691dd37f6212813d8f0c20331f4e55bf548252f335cbf0b0a079d84c67193fd3178c4178680499d23a743a3355a60944dfb6d5f0d32105db6633feefe2ad1e4baa8db724c6ada487c3914757915efe1d4d9c7b8ea9a5328d958ddab1f7c3121bdeb07c55619ea638698f448c8c2f56d4a300c273c8f94ec3f688f0d0e21d05c3f81015a8a6aa4c5fa77c3edede24bd7f17a2b9f3e7092914f232734e98e1b8676cf23960333dcff16be611763b499a9e9bbabbf6b1eddd0182f41cb8c1e59e"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40090)
r1 = getpgid(0x0)
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[r1], 0x1}, 0x58)

09:38:20 executing program 2:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)

09:38:20 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000000)={0x3f, 0x2, {0x1, 0x3, 0x1, 0x0, 0x8e}, 0x4})
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x58)

09:38:20 executing program 4:
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="000352157000fcdbdf250600000008000a00040000007110b9c4041fd1cb6565e3ef37ecafcdfd67ae566c00515bfbe0232323691dd37f6212813d8f0c20331f4e55bf548252f335cbf0b0a079d84c67193fd3178c4178680499d23a743a3355a60944dfb6d5f0d32105db6633feefe2ad1e4baa8db724c6ada487c3914757915efe1d4d9c7b8ea9a5328d958ddab1f7c3121bdeb07c55619ea638698f448c8c2f56d4a300c273c8f94ec3f688f0d0e21d05c3f81015a8a6aa4c5fa77c3edede24bd7f17a2b9f3e7092914f232734e98e1b8676cf23960333dcff16be611763b499a9e9bbabbf6b1eddd0182f41cb8c1e59e"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40090)
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1}, 0x58)

09:38:20 executing program 1:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff], 0x1, {r0}}, 0x58)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000240), 0x0, &(0x7f0000000080))

09:38:20 executing program 3:
syz_clone3(&(0x7f0000001280)={0x8000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x3})

[  685.511640][ T1222] ieee802154 phy0 wpan0: encryption failed: -22
[  685.511694][ T1222] ieee802154 phy1 wpan1: encryption failed: -22
09:38:20 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0xc40, 0xf1, 0x4, 0xe40, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1, 0x3}, 0x48)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffb000/0x4000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/135, 0xfffffffffffffdf1, 0x1, &(0x7f0000000400)=""/162, 0x9a}, &(0x7f0000000100)=0xfffffffffffffff3)
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x58)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, &(0x7f00000004c0)=""/136, &(0x7f0000000080)=0x88)
setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000040)=0xb615, 0x4)

09:38:20 executing program 4:
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="000352157000fcdbdf250600000008000a00040000007110b9c4041fd1cb6565e3ef37ecafcdfd67ae566c00515bfbe0232323691dd37f6212813d8f0c20331f4e55bf548252f335cbf0b0a079d84c67193fd3178c4178680499d23a743a3355a60944dfb6d5f0d32105db6633feefe2ad1e4baa8db724c6ada487c3914757915efe1d4d9c7b8ea9a5328d958ddab1f7c3121bdeb07c55619ea638698f448c8c2f56d4a300c273c8f94ec3f688f0d0e21d05c3f81015a8a6aa4c5fa77c3edede24bd7f17a2b9f3e7092914f232734e98e1b8676cf23960333dcff16be611763b499a9e9bbabbf6b1eddd0182f41cb8c1e59e"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40090)
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1}, 0x58)

09:38:20 executing program 3:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff], 0x1, {r0}}, 0x58)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000240), 0x0, &(0x7f0000000080))

09:38:20 executing program 0:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000002400)=[0x0, 0x0], 0x2, {r0}}, 0x58)

09:38:20 executing program 4:
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="000352157000fcdbdf250600000008000a00040000007110b9c4041fd1cb6565e3ef37ecafcdfd67ae566c00515bfbe0232323691dd37f6212813d8f0c20331f4e55bf548252f335cbf0b0a079d84c67193fd3178c4178680499d23a743a3355a60944dfb6d5f0d32105db6633feefe2ad1e4baa8db724c6ada487c3914757915efe1d4d9c7b8ea9a5328d958ddab1f7c3121bdeb07c55619ea638698f448c8c2f56d4a300c273c8f94ec3f688f0d0e21d05c3f81015a8a6aa4c5fa77c3edede24bd7f17a2b9f3e7092914f232734e98e1b8676cf23960333dcff16be611763b499a9e9bbabbf6b1eddd0182f41cb8c1e59e"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40090)
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1}, 0x58)

09:38:20 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0xc40, 0xf1, 0x4, 0xe40, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1, 0x3}, 0x48)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffb000/0x4000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/135, 0xfffffffffffffdf1, 0x1, &(0x7f0000000400)=""/162, 0x9a}, &(0x7f0000000100)=0xfffffffffffffff3)
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x58)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, &(0x7f00000004c0)=""/136, &(0x7f0000000080)=0x88)
setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000040)=0xb615, 0x4)

09:38:20 executing program 2:
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="000352157000fcdbdf250600000008000a00040000007110b9c4041fd1cb6565e3ef37ecafcdfd67ae566c00515bfbe0232323691dd37f6212813d8f0c20331f4e55bf548252f335cbf0b0a079d84c67193fd3178c4178680499d23a743a3355a60944dfb6d5f0d32105db6633feefe2ad1e4baa8db724c6ada487c3914757915efe1d4d9c7b8ea9a5328d958ddab1f7c3121bdeb07c55619ea638698f448c8c2f56d4a300c273c8f94ec3f688f0d0e21d05c3f81015a8a6aa4c5fa77c3edede24bd7f17a2b9f3e7092914f232734e98e1b8676cf23960333dcff16be611763b499a9e9bbabbf6b1eddd0182f41cb8c1e59e"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40090)
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1}, 0x58)

09:38:21 executing program 4:
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r0 = getpgid(0x0)
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[r0], 0x1}, 0x58)

09:38:21 executing program 1:
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="000352157000fcdbdf250600000008000a00040000007110b9c4041fd1cb6565e3ef37ecafcdfd67ae566c00515bfbe0232323691dd37f6212813d8f0c20331f4e55bf548252f335cbf0b0a079d84c67193fd3178c4178680499d23a743a3355a60944dfb6d5f0d32105db6633feefe2ad1e4baa8db724c6ada487c3914757915efe1d4d9c7b8ea9a5328d958ddab1f7c3121bdeb07c55619ea638698f448c8c2f56d4a300c273c8f94ec3f688f0d0e21d05c3f81015a8a6aa4c5fa77c3edede24bd7f17a2b9f3e7092914f232734e98e1b8676cf23960333dcff16be611763b499a9e9bbabbf6b1eddd0182f41cb8c1e59e"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40090)
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1}, 0x58)

09:38:21 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0xc40, 0xf1, 0x4, 0xe40, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1, 0x3}, 0x48)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffb000/0x4000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/135, 0xfffffffffffffdf1, 0x1, &(0x7f0000000400)=""/162, 0x9a}, &(0x7f0000000100)=0xfffffffffffffff3)
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x58)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, &(0x7f00000004c0)=""/136, &(0x7f0000000080)=0x88)
setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000040)=0xb615, 0x4)

09:38:21 executing program 2:
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="000352157000fcdbdf250600000008000a00040000007110b9c4041fd1cb6565e3ef37ecafcdfd67ae566c00515bfbe0232323691dd37f6212813d8f0c20331f4e55bf548252f335cbf0b0a079d84c67193fd3178c4178680499d23a743a3355a60944dfb6d5f0d32105db6633feefe2ad1e4baa8db724c6ada487c3914757915efe1d4d9c7b8ea9a5328d958ddab1f7c3121bdeb07c55619ea638698f448c8c2f56d4a300c273c8f94ec3f688f0d0e21d05c3f81015a8a6aa4c5fa77c3edede24bd7f17a2b9f3e7092914f232734e98e1b8676cf23960333dcff16be611763b499a9e9bbabbf6b1eddd0182f41cb8c1e59e"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40090)
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1}, 0x58)

09:38:21 executing program 4:
r0 = getpgid(0x0)
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[r0], 0x1}, 0x58)

09:38:21 executing program 0:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000002400)=[0x0, 0x0], 0x2, {r0}}, 0x58)

09:38:21 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000002400)=[0x0, 0x0], 0x2, {r0}}, 0x58)

09:38:21 executing program 3:
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r0 = getpgid(0x0)
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[r0], 0x1}, 0x58)

09:38:21 executing program 2:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)

09:38:21 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0xc40, 0xf1, 0x4, 0xe40, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1, 0x3}, 0x48)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffb000/0x4000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/135, 0xfffffffffffffdf1, 0x1, &(0x7f0000000400)=""/162, 0x9a}, &(0x7f0000000100)=0xfffffffffffffff3)
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x58)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000040)=0xb615, 0x4)

09:38:21 executing program 3:
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r0 = getpgid(0x0)
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[r0], 0x1}, 0x58)

09:38:21 executing program 4:
getpgid(0x0)
syz_clone3(0x0, 0x0)

09:38:22 executing program 3:
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r0 = getpgid(0x0)
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[r0], 0x1}, 0x58)

09:38:22 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0xc40, 0xf1, 0x4, 0xe40, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1, 0x3}, 0x48)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffb000/0x4000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/135, 0xfffffffffffffdf1, 0x1, &(0x7f0000000400)=""/162, 0x9a}, &(0x7f0000000100)=0xfffffffffffffff3)
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x58)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000040)=0xb615, 0x4)

09:38:22 executing program 4:
getpgid(0x0)
syz_clone3(0x0, 0x0)

09:38:22 executing program 4:
getpgid(0x0)
syz_clone3(0x0, 0x0)

09:38:22 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000002400)=[0x0, 0x0], 0x2, {r0}}, 0x58)

09:38:22 executing program 0:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000002400)=[0x0, 0x0], 0x2, {r0}}, 0x58)

09:38:22 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0xc40, 0xf1, 0x4, 0xe40, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1, 0x3}, 0x48)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffb000/0x4000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/135, 0xfffffffffffffdf1, 0x1, &(0x7f0000000400)=""/162, 0x9a}, &(0x7f0000000100)=0xfffffffffffffff3)
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x58)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000040)=0xb615, 0x4)

09:38:22 executing program 2:
r0 = syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x58)
read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2020)
r2 = getpgid(0x0)
ptrace$peek(0xffffffffffffffff, r2, 0x0)
r3 = syz_clone3(&(0x7f00000023c0)={0x100000, &(0x7f0000002240), &(0x7f0000002280), &(0x7f00000022c0), {0x1a}, &(0x7f0000002300)=""/60, 0x3c, &(0x7f0000002340)=""/25, &(0x7f0000002380)=[0x0, r0, r0], 0x3}, 0x58)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000002500), 0x501000)
syz_clone3(&(0x7f0000002480)={0x1000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2d}, &(0x7f00000000c0)=""/51, 0x33, &(0x7f0000000100)=""/59, &(0x7f0000002440)=[r0, r1, r0, r2, r3, r0], 0x6}, 0x58)

09:38:22 executing program 3:
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1}, 0x58)

09:38:22 executing program 4:
r0 = getpgid(0x0)
syz_clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[r0], 0x1}, 0x58)

09:38:22 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0xc40, 0xf1, 0x4, 0xe40, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1, 0x3}, 0x48)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffb000/0x4000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/135, 0xfffffffffffffdf1, 0x1, &(0x7f0000000400)=""/162, 0x9a}, &(0x7f0000000100)=0xfffffffffffffff3)
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x58)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000040)=0xb615, 0x4)

09:38:22 executing program 3:
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1}, 0x58)

09:38:22 executing program 4:
getpgid(0x0)
syz_clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

09:38:23 executing program 3:
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1}, 0x58)

09:38:23 executing program 0:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000002400)=[0x0, 0x0], 0x2, {r0}}, 0x58)

09:38:23 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0xc40, 0xf1, 0x4, 0xe40, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1, 0x3}, 0x48)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffb000/0x4000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/135, 0xfffffffffffffdf1, 0x1, &(0x7f0000000400)=""/162, 0x9a}, &(0x7f0000000100)=0xfffffffffffffff3)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000040)=0xb615, 0x4)

09:38:23 executing program 1:
getpgid(0x0)
syz_clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

09:38:23 executing program 4:
getpgid(0x0)
syz_clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

09:38:23 executing program 2:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000002400)=[0x0, 0x0], 0x2, {r0}}, 0x58)

09:38:23 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0xc40, 0xf1, 0x4, 0xe40, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1, 0x3}, 0x48)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000040)=0xb615, 0x4)

09:38:23 executing program 3:
r0 = getpgid(0x0)
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[r0], 0x1}, 0x58)

09:38:23 executing program 4:
getpgid(0x0)
syz_clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

09:38:23 executing program 5:
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0xc40, 0xf1, 0x4, 0xe40, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1, 0x3}, 0x48)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000040)=0xb615, 0x4)

09:38:23 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0xc40, 0xf1, 0x4, 0xe40, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1, 0x3}, 0x48)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000040)=0xb615, 0x4)

09:38:23 executing program 3:
getpgid(0x0)
syz_clone3(0x0, 0x0)

09:38:23 executing program 5:
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000040)=0xb615, 0x4)

09:38:23 executing program 0:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000002400)=[0x0, 0x0], 0x2, {r0}}, 0x58)

09:38:23 executing program 4:
getpgid(0x0)
syz_clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)}, 0x58)

09:38:23 executing program 3:
getpgid(0x0)
syz_clone3(0x0, 0x0)

09:38:23 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000002400)=[0x0, 0x0], 0x2, {r0}}, 0x58)

09:38:23 executing program 2:
getpgid(0x0)
syz_clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

09:38:23 executing program 5:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000040)=0xb615, 0x4)

09:38:23 executing program 3:
getpgid(0x0)
syz_clone3(0x0, 0x0)

09:38:23 executing program 4:
getpgid(0x0)
syz_clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)}, 0x58)

09:38:23 executing program 5:
socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000040)=0xb615, 0x4)

09:38:24 executing program 3:
r0 = getpgid(0x0)
syz_clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[r0], 0x1}, 0x58)

09:38:24 executing program 4:
getpgid(0x0)
syz_clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)}, 0x58)

09:38:24 executing program 5:
socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000040)=0xb615, 0x4)

09:38:24 executing program 0:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000002400)=[0x0, 0x0], 0x2, {r0}}, 0x58)

09:38:24 executing program 4:
getpgid(0x0)
syz_clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1}, 0x58)

09:38:24 executing program 2:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000002400)=[0x0, 0x0], 0x2, {r0}}, 0x58)

09:38:24 executing program 1:
r0 = getpgid(0x0)
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[r0], 0x1}, 0x58)

09:38:24 executing program 3:
getpgid(0x0)
syz_clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

09:38:24 executing program 5:
socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000040)=0xb615, 0x4)

09:38:24 executing program 4:
getpgid(0x0)
syz_clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1}, 0x58)

09:38:24 executing program 5:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0xb615, 0x4)

09:38:24 executing program 3:
getpgid(0x0)
syz_clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

09:38:24 executing program 5:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0xb615, 0x4)

09:38:24 executing program 1:
r0 = getpgid(0x0)
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[r0], 0x1}, 0x58)

09:38:24 executing program 3:
getpgid(0x0)
syz_clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

09:38:24 executing program 0:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000002400)=[0x0, 0x0], 0x2, {r0}}, 0x58)

09:38:24 executing program 4:
getpgid(0x0)
syz_clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1}, 0x58)

09:38:24 executing program 2:
getpgid(0x0)
syz_clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

09:38:24 executing program 5:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0xb615, 0x4)

09:38:24 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000002400)=[0x0, 0x0], 0x2, {r0}}, 0x58)

09:38:24 executing program 3:
getpgid(0x0)
syz_clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)}, 0x58)

09:38:24 executing program 1:
r0 = getpgid(0x0)
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[r0], 0x1}, 0x58)

09:38:24 executing program 3:
getpgid(0x0)
syz_clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)}, 0x58)

09:38:24 executing program 5:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, 0x0, 0x0)

09:38:25 executing program 5:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, 0x0, 0x0)

09:38:25 executing program 3:
getpgid(0x0)
syz_clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)}, 0x58)

09:38:25 executing program 1:
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1}, 0x58)

09:38:25 executing program 0:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000002400)=[0x0, 0x0], 0x2, {r0}}, 0x58)

09:38:25 executing program 2:
getpgid(0x0)
syz_clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

09:38:25 executing program 5:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, 0x0, 0x0)

09:38:25 executing program 3:
getpgid(0x0)
syz_clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1}, 0x58)

09:38:25 executing program 2:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0xc40, 0xf1, 0x4, 0xe40, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1, 0x3}, 0x48)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffb000/0x4000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/135, 0xfffffffffffffdf1, 0x1, &(0x7f0000000400)=""/162, 0x9a}, &(0x7f0000000100)=0xfffffffffffffff3)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000040)=0xb615, 0x4)

09:38:25 executing program 1:
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1}, 0x58)

09:38:25 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000002400)=[0x0, 0x0], 0x2, {r0}}, 0x58)

09:38:25 executing program 5:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000040), 0x4)

09:38:25 executing program 3:
getpgid(0x0)
syz_clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1}, 0x58)

09:38:25 executing program 1:
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1}, 0x58)

09:38:25 executing program 5:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000040), 0x4)

09:38:25 executing program 2:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000040), 0x4)

09:38:25 executing program 0:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000002400)=[0x0, 0x0], 0x2, {r0}}, 0x58)

09:38:25 executing program 3:
getpgid(0x0)
syz_clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1}, 0x58)

09:38:25 executing program 5:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000040), 0x4)

09:38:25 executing program 2:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000040), 0x4)

09:38:25 executing program 1:
getpgid(0x0)
syz_clone3(0x0, 0x0)

09:38:25 executing program 5:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000040), 0x4)

09:38:25 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000002400)=[0x0, 0x0], 0x2, {r0}}, 0x58)

09:38:25 executing program 1:
getpgid(0x0)
syz_clone3(0x0, 0x0)

09:38:25 executing program 2:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000040), 0x4)

09:38:25 executing program 3:
getpgid(0x0)
syz_clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1}, 0x58)

09:38:25 executing program 5:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000040), 0x4)

09:38:26 executing program 1:
getpgid(0x0)
syz_clone3(0x0, 0x0)

09:38:26 executing program 0:
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000002400)=[0x0, 0x0], 0x2}, 0x58)

09:38:26 executing program 2:
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000040), 0x4)

09:38:26 executing program 5:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000040), 0x4)

09:38:26 executing program 1:
r0 = getpgid(0x0)
syz_clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[r0], 0x1}, 0x58)

09:38:26 executing program 3:
r0 = getpgid(0x0)
syz_clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[r0], 0x1}, 0x58)

09:38:26 executing program 2:
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000040), 0x4)

09:38:26 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000002400)=[0x0, 0x0], 0x2, {r0}}, 0x58)

09:38:26 executing program 5:
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000040), 0x4)

09:38:26 executing program 0:
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000002400)=[0x0, 0x0], 0x2}, 0x58)

09:38:26 executing program 1:
getpgid(0x0)
syz_clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

09:38:26 executing program 2:
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000040), 0x4)

09:38:26 executing program 3:
r0 = getpgid(0x0)
syz_clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[r0], 0x1}, 0x58)

09:38:26 executing program 0:
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000002400)=[0x0, 0x0], 0x2}, 0x58)

09:38:26 executing program 5:
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000040), 0x4)

09:38:26 executing program 2:
socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000040), 0x4)

09:38:26 executing program 1:
getpgid(0x0)
syz_clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

09:38:26 executing program 5:
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000040), 0x4)

09:38:26 executing program 2:
socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000040), 0x4)

09:38:27 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f0000002300)={0x240041400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000002400)=[0x0, 0x0], 0x2, {r0}}, 0x58)

09:38:27 executing program 0:
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1}, 0x58)

09:38:27 executing program 3:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0xc40, 0xf1, 0x4, 0xe40, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1, 0x3}, 0x48)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffb000/0x4000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/135, 0xfffffffffffffdf1, 0x1, &(0x7f0000000400)=""/162, 0x9a}, &(0x7f0000000100)=0xfffffffffffffff3)
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x58)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000040)=0xb615, 0x4)

09:38:27 executing program 1:
getpgid(0x0)
syz_clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

09:38:27 executing program 2:
socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000040), 0x4)

09:38:27 executing program 5:
socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000040), 0x4)

09:38:27 executing program 5:
socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000040), 0x4)

09:38:27 executing program 2:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040), 0x4)

09:38:27 executing program 1:
getpgid(0x0)
syz_clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)}, 0x58)

09:38:27 executing program 5:
socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000040), 0x4)

09:38:27 executing program 2:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040), 0x4)

09:38:27 executing program 0:
r0 = syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x58)
read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2020)
r2 = getpgid(0x0)
ptrace$peek(0xffffffffffffffff, r2, 0x0)
r3 = syz_clone3(&(0x7f00000023c0)={0x100000, &(0x7f0000002240), &(0x7f0000002280), &(0x7f00000022c0), {0x1a}, &(0x7f0000002300)=""/60, 0x3c, &(0x7f0000002340)=""/25, &(0x7f0000002380)=[0x0, r0, r0], 0x3}, 0x58)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000002500), 0x501000)
syz_clone3(&(0x7f0000002480)={0x1000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2d}, &(0x7f00000000c0)=""/51, 0x33, &(0x7f0000000100)=""/59, &(0x7f0000002440)=[r0, r1, r0, r2, r3, r0], 0x6}, 0x58)

09:38:27 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0xc48000, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
pidfd_getfd(r0, r1, 0x0)
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000280), 0x606242, 0x0)
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x58)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000000)={0x3, 0xd82f, 0x4, 0x0, 0x2})

09:38:27 executing program 1:
getpgid(0x0)
syz_clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)}, 0x58)

09:38:27 executing program 3:
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000240), 0x8, &(0x7f0000000080))

09:38:27 executing program 2:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040), 0x4)

09:38:27 executing program 5:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040), 0x4)

09:38:27 executing program 5:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040), 0x4)

09:38:27 executing program 2:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, 0x0, 0x0)

09:38:27 executing program 1:
getpgid(0x0)
syz_clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)}, 0x58)

09:38:27 executing program 2:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, 0x0, 0x0)

09:38:27 executing program 1:
getpgid(0x0)
syz_clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1}, 0x58)

09:38:27 executing program 5:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040), 0x4)

09:38:27 executing program 0:
ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100))
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fddbdf2508000000090000000000000008001700", @ANYRES32, @ANYBLOB="08001900e00000010500130002000000"], 0x34}, 0x1, 0x0, 0x0, 0x4801}, 0x800)
syz_clone3(&(0x7f0000001280)={0x8000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x0)
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xc8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x80}]}, 0x24}}, 0x80c0)
socket$nl_generic(0x10, 0x3, 0x10)

09:38:27 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0xc48000, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
pidfd_getfd(r0, r1, 0x0)
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000280), 0x606242, 0x0)
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x58)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000000)={0x3, 0xd82f, 0x4, 0x0, 0x2})

09:38:27 executing program 2:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, 0x0, 0x0)

09:38:28 executing program 1:
getpgid(0x0)
syz_clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1}, 0x58)

09:38:28 executing program 5:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, 0x0, 0x0)

09:38:28 executing program 2:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff], 0x1, {r0}}, 0x58)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000240), 0x0, &(0x7f0000000080))

09:38:28 executing program 0:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff], 0x1, {r0}}, 0x58)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000240), 0x0, &(0x7f0000000080))

09:38:28 executing program 4:
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000240), 0x8, &(0x7f0000000080))

09:38:28 executing program 3:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff], 0x1, {r0}}, 0x58)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080))

09:38:28 executing program 5:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, 0x0, 0x0)

09:38:28 executing program 1:
getpgid(0x0)
syz_clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1}, 0x58)

09:38:28 executing program 5:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, 0x0, 0x0)

09:38:28 executing program 5:
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff], 0x1}, 0x58)

09:38:28 executing program 1:
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000240), 0x8, &(0x7f0000000080))

09:38:28 executing program 0:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff], 0x1, {r0}}, 0x58)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080))

09:38:28 executing program 4:
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000240), 0x8, &(0x7f0000000080))

09:38:28 executing program 2:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff], 0x1, {r0}}, 0x58)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000240), 0x0, &(0x7f0000000080))

09:38:29 executing program 3:
syz_clone3(&(0x7f0000001280)={0x8000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000))

09:38:29 executing program 1:
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff], 0x1}, 0x58)

09:38:29 executing program 5:
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff], 0x1}, 0x58)

09:38:29 executing program 3:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)

09:38:29 executing program 0:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff], 0x1, {r0}}, 0x58)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080))

09:38:29 executing program 2:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff], 0x1, {r0}}, 0x58)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000240), 0x0, &(0x7f0000000080))

09:38:29 executing program 4:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff], 0x1, {r0}}, 0x58)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080))

09:38:30 executing program 1:
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
syz_clone3(&(0x7f0000001280)={0x8000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

09:38:30 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000))
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x58)

09:38:30 executing program 3:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)

09:38:30 executing program 1:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)

09:38:30 executing program 0:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff], 0x1, {r0}}, 0x58)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080))

09:38:30 executing program 4:
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff], 0x1}, 0x58)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000240), 0x8, &(0x7f0000000080))

09:38:30 executing program 5:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)

09:38:30 executing program 2:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)

09:38:30 executing program 3:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)

09:38:37 executing program 0:
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff], 0x1}, 0x58)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000240), 0x8, &(0x7f0000000080))

09:38:38 executing program 5:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)

09:38:39 executing program 0:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)

09:38:40 executing program 5:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)

09:38:40 executing program 2:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)

09:38:40 executing program 4:
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff], 0x1}, 0x58)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000240), 0x8, &(0x7f0000000080))

09:38:41 executing program 1:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)

09:38:41 executing program 5:
syz_clone3(&(0x7f0000001280)={0x8000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000140)=0xc00000)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000100)={0xa, 0x4, 0x7fffffff, 0x10001, '\x00', 0xef5f})
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000800}, 0x400c084)

09:38:41 executing program 3:
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58)

09:38:41 executing program 2:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)

09:38:41 executing program 5:
r0 = syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x58)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)
r2 = getpgid(r0)
r3 = getpgid(0x0)
syz_clone3(&(0x7f0000001600)={0x6010080, &(0x7f0000000480)=<r4=>0xffffffffffffffff, &(0x7f00000004c0)=<r5=>0x0, &(0x7f0000000500), {0xd}, &(0x7f0000000540)=""/103, 0x67, &(0x7f00000005c0)=""/4082, &(0x7f00000015c0), 0x0, {r1}}, 0x58)
getpgid(r5)
ptrace$peek(0xffffffffffffffff, r3, 0x0)
r6 = getpgid(0x0)
ptrace$peek(0x3, r2, 0x0)
r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r8 = getpgid(r3)
ioctl$BINDER_GET_FROZEN_INFO(r7, 0xc00c620f, &(0x7f00000036c0)={r8})
r9 = pidfd_getfd(r4, r1, 0x0)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r9, 0xc018620c, &(0x7f0000003700)={0x2})
sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
read$FUSE(r7, &(0x7f0000001680)={0x2020}, 0x2020)
syz_clone3(&(0x7f0000000400)={0x100400, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x6}, &(0x7f0000000200)=""/199, 0xc7, &(0x7f0000000300)=""/216, &(0x7f0000000100)=[r2, 0xffffffffffffffff, r3, r0, r6], 0x5, {r1}}, 0x58)

09:38:41 executing program 1:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)

09:38:41 executing program 3:
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58)

09:38:41 executing program 4:
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58)

09:38:43 executing program 0:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)

09:38:43 executing program 3:
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58)

09:38:43 executing program 2:
r0 = syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x58)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)
r2 = getpgid(r0)
r3 = getpgid(0x0)
syz_clone3(&(0x7f0000001600)={0x6010080, &(0x7f0000000480)=<r4=>0xffffffffffffffff, &(0x7f00000004c0)=<r5=>0x0, &(0x7f0000000500), {0xd}, &(0x7f0000000540)=""/103, 0x67, &(0x7f00000005c0)=""/4082, &(0x7f00000015c0), 0x0, {r1}}, 0x58)
getpgid(r5)
ptrace$peek(0xffffffffffffffff, r3, 0x0)
r6 = getpgid(0x0)
ptrace$peek(0x3, r2, 0x0)
r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r8 = getpgid(r3)
ioctl$BINDER_GET_FROZEN_INFO(r7, 0xc00c620f, &(0x7f00000036c0)={r8})
r9 = pidfd_getfd(r4, r1, 0x0)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r9, 0xc018620c, &(0x7f0000003700)={0x2})
sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
read$FUSE(r7, &(0x7f0000001680)={0x2020}, 0x2020)
syz_clone3(&(0x7f0000000400)={0x100400, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x6}, &(0x7f0000000200)=""/199, 0xc7, &(0x7f0000000300)=""/216, &(0x7f0000000100)=[r2, 0xffffffffffffffff, r3, r0, r6], 0x5, {r1}}, 0x58)

09:38:43 executing program 4:
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58)

09:38:43 executing program 1:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000240), 0x8, &(0x7f0000000080))

09:38:43 executing program 5:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff], 0x1, {r0}}, 0x58)

09:38:43 executing program 2:
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4)
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x58)

09:38:44 executing program 3:
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(0x0, 0x0)

09:38:44 executing program 2:
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58)

09:38:44 executing program 4:
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58)

09:38:44 executing program 1:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff], 0x1, {r0}}, 0x58)

09:38:44 executing program 5:
syz_clone3(&(0x7f0000000000)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x58)
r0 = getpgid(0xffffffffffffffff)
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x200100, 0x0)
syz_clone3(&(0x7f0000000300)={0x20020400, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x12}, &(0x7f0000000180)=""/188, 0xbc, &(0x7f0000000240)=""/62, &(0x7f0000000280)=[r0], 0x1, {r1}}, 0x58)

09:38:44 executing program 0:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff], 0x1, {r0}}, 0x58)

09:38:44 executing program 3:
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(0x0, 0x0)

09:38:44 executing program 3:
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(0x0, 0x0)

09:38:44 executing program 3:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)

09:38:44 executing program 5:
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000040)=0x3ff)
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x58)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

09:38:44 executing program 2:
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58)

09:38:44 executing program 3:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)

09:38:44 executing program 1:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)

09:38:44 executing program 4:
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58)

09:38:44 executing program 0:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000240), 0x8, &(0x7f0000000080))

09:38:44 executing program 3:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)

09:38:44 executing program 5:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)

09:38:45 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x13, 0x1, 0x2, 0x3, 0x893, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x5}, 0x48)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000080)={0x3}, 0x8)
syz_clone3(&(0x7f0000001280)={0x8000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

09:38:45 executing program 3:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)

09:38:45 executing program 5:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)

09:38:45 executing program 1:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)

09:38:45 executing program 2:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff], 0x1, {r0}}, 0x58)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000240), 0x8, &(0x7f0000000080))

09:38:45 executing program 5:
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080)=[@sack_perm, @window={0x3, 0x8, 0x9cc}, @mss, @timestamp, @sack_perm, @mss={0x2, 0x1}], 0x6)
close$fd_v4l2_buffer(r0)
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)=0x80000000)
syz_clone3(&(0x7f0000001280)={0x8000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = socket$caif_stream(0x25, 0x1, 0x2)
setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f00000000c0)=0x4050, 0x4)

09:38:45 executing program 1:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)

09:38:45 executing program 4:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff], 0x1, {r0}}, 0x58)

09:38:45 executing program 0:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff], 0x1, {r0}}, 0x58)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000240), 0x8, &(0x7f0000000080))

09:38:45 executing program 3:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)

09:38:45 executing program 5:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)

09:38:45 executing program 1:
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff], 0x1}, 0x58)

09:38:45 executing program 4:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff], 0x1, {r0}}, 0x58)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000240), 0x8, &(0x7f0000000080))

09:38:46 executing program 2:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff], 0x1, {r0}}, 0x58)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000240), 0x8, &(0x7f0000000080))

09:38:46 executing program 0:
ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000040)=0x8)
syz_clone3(&(0x7f0000001280)={0x8000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0x10001)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)

09:38:46 executing program 3:
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

09:38:46 executing program 5:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)

09:38:46 executing program 0:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)

09:38:46 executing program 4:
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff], 0x1}, 0x58)

09:38:46 executing program 1:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff], 0x1, {r0}}, 0x58)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000240), 0x8, &(0x7f0000000080))

09:38:46 executing program 2:
bpf$LINK_GET_NEXT_ID(0x17, 0x0, 0x0)
r0 = syz_clone3(&(0x7f0000000180)={0x44840080, 0x0, 0x0, 0x0, {}, 0x0, 0xfffffffffffffeda, 0x0, &(0x7f0000000140), 0x1}, 0x58)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2c040004}, 0x40048d0)
r2 = getpgid(0x0)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000002580)=0x1, 0x4)
ptrace$peek(0xffffffffffffffff, r2, 0x0)
read$FUSE(r1, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x2020)
r5 = getpgid(r0)
r6 = getpgid(r0)
syz_clone3(&(0x7f0000002500)={0x120002000, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300), {0x14}, &(0x7f0000000340)=""/69, 0x45, &(0x7f00000003c0)=""/180, &(0x7f00000024c0)=[r2, r4, r0, r0, r0, r5, r6, 0xffffffffffffffff], 0x8, {r1}}, 0x58)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14)

09:38:46 executing program 1:
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

09:38:47 executing program 3:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff], 0x1, {r0}}, 0x58)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000240), 0x8, &(0x7f0000000080))

09:38:47 executing program 5:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)

09:38:47 executing program 2:
syz_clone3(&(0x7f0000001280)={0x8000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)=""/9, &(0x7f0000000040)=0x9)

09:38:47 executing program 3:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff], 0x1, {r0}}, 0x58)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000240), 0x8, &(0x7f0000000080))

09:38:47 executing program 0:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)

09:38:47 executing program 4:
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff], 0x1}, 0x58)

09:38:47 executing program 2:
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff], 0x1}, 0x58)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000240), 0x8, &(0x7f0000000080))

09:38:47 executing program 1:
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

09:38:47 executing program 3:
ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000000)=""/184)
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x58)

09:38:47 executing program 3:
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff], 0x1}, 0x58)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000240), 0x8, &(0x7f0000000080))

09:38:47 executing program 5:
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff], 0x1}, 0x58)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000240), 0x8, &(0x7f0000000080))

09:38:48 executing program 0:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "60fd470203cf152e", "9bd553277cd58f2aa527ad0b3593a322", "8db76599", "0e1f74978c1b992a"}, 0x28)
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x58)

09:38:48 executing program 4:
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x58)

09:38:48 executing program 2:
keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x2})
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x58)

09:38:48 executing program 1:
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

09:38:48 executing program 4:
r0 = getpgid(0x0)
ptrace$peek(0xffffffffffffffff, r0, 0x0)
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[r0], 0x1}, 0x58)

09:38:48 executing program 0:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "60fd470203cf152e", "9bd553277cd58f2aa527ad0b3593a322", "8db76599", "0e1f74978c1b992a"}, 0x28)
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x58)

09:38:48 executing program 3:
r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff)
r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xa, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe8c2, 0x0, 0x0, 0x0, 0x5}, [@generic={0x2, 0x5, 0x4, 0x4, 0x5}, @generic={0x0, 0x0, 0x8, 0x7, 0x3}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x5}, @ldst={0x2ff829d9e247ba1b, 0x3, 0x3, 0x9, 0x7, 0xfffffffffffffff4}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000100)='GPL\x00', 0x7fff, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x0, 0xa, 0x7f, 0xff}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000280)={r0, r1, 0x4, r2}, 0x10)

09:38:48 executing program 5:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x44820000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff], 0x1, {r0}}, 0x58)

09:38:48 executing program 2:
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x58)
socket$inet_udp(0x2, 0x2, 0x0)

09:38:48 executing program 4:
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x41)

09:38:48 executing program 0:
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x58)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
process_mrelease(r0, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000))
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000040)=0x81)

09:38:48 executing program 3:
getresgid(&(0x7f0000000080)=<r0=>0x0, &(0x7f00000000c0), &(0x7f0000000100))
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x0, {0x5, 0x3, 0x80, 0x2f3b, 0x4fb8, 0x8, {0x1, 0x8, 0x6, 0xfff, 0xffff, 0x2, 0x7fff, 0xebf1, 0x9, 0x2000, 0x3, 0xee01, r0, 0x5, 0xffffffff}}}, 0x90)
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
unshare(0x2000200)
r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$FUSE(r2, &(0x7f0000002380)={0x2020}, 0x2020)
read$FUSE(r1, &(0x7f0000000300)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_OPEN(r2, &(0x7f0000002340)={0x20, 0x0, r3, {0x0, 0x10}}, 0x20)
ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000040)=r1)

09:38:48 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000580)={<r1=>0xffffffffffffffff}, 0x13f, 0xa}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000600)={0x1, 0x10, 0xfa00, {&(0x7f0000000100), r1}}, 0x18)
r2 = syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x58)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
pidfd_send_signal(r3, 0x24, &(0x7f0000000500)={0x2f, 0x5, 0xfffffc00}, 0x0)
syz_clone3(&(0x7f00000003c0)={0x200000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x15}, &(0x7f0000000200)=""/163, 0xa3, &(0x7f00000002c0)=""/212, &(0x7f00000000c0)=[r2, 0x0, r2], 0x3, {r3}}, 0x58)
ioctl$EVIOCGKEYCODE(r3, 0x80084504, &(0x7f0000000440)=""/146)

09:38:48 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r0)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0xf0}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x200000d1)
ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000000))
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0xa6483)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000100)={0xffff8000, 0x1, 0x0, 'queue0\x00', 0x6})

09:38:48 executing program 3:
getresgid(&(0x7f0000000080)=<r0=>0x0, &(0x7f00000000c0), &(0x7f0000000100))
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x0, {0x5, 0x3, 0x80, 0x2f3b, 0x4fb8, 0x8, {0x1, 0x8, 0x6, 0xfff, 0xffff, 0x2, 0x7fff, 0xebf1, 0x9, 0x2000, 0x3, 0xee01, r0, 0x5, 0xffffffff}}}, 0x90)
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
unshare(0x2000200)
r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$FUSE(r2, &(0x7f0000002380)={0x2020}, 0x2020)
read$FUSE(r1, &(0x7f0000000300)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_OPEN(r2, &(0x7f0000002340)={0x20, 0x0, r3, {0x0, 0x10}}, 0x20)
ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000040)=r1)

09:38:48 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x28}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4)
read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x2020)
syz_clone3(&(0x7f0000000000)={0x20880000, 0x0, 0x0, 0x0, {0x17}, 0x0, 0x0, 0x0, &(0x7f0000000080)=[r2], 0x1}, 0x58)

09:38:48 executing program 0:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0xa6483)
ioctl$IOCTL_START_ACCEL_DEV(0xffffffffffffffff, 0x40096102, &(0x7f0000000000)={{}, 0x7})

09:38:49 executing program 1:
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x416283, 0x0)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x83ecba79c9fe9187, {r0}}, 0x58)
ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000080)={0x3, 0x37, &(0x7f0000000000)="9e5db6cfd30bbee6080cdbb0a24fff563a579afcd7ba9a083da10465b42a0dce7557a26f52d61314020d043423471a70b5698b35238fb8"})

09:38:49 executing program 3:
getresgid(&(0x7f0000000080)=<r0=>0x0, &(0x7f00000000c0), &(0x7f0000000100))
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x0, {0x5, 0x3, 0x80, 0x2f3b, 0x4fb8, 0x8, {0x1, 0x8, 0x6, 0xfff, 0xffff, 0x2, 0x7fff, 0xebf1, 0x9, 0x2000, 0x3, 0xee01, r0, 0x5, 0xffffffff}}}, 0x90)
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
unshare(0x2000200)
r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$FUSE(r2, &(0x7f0000002380)={0x2020}, 0x2020)
read$FUSE(r1, &(0x7f0000000300)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_OPEN(r2, &(0x7f0000002340)={0x20, 0x0, r3, {0x0, 0x10}}, 0x20)
ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000040)=r1)

09:38:49 executing program 5:
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000300)={{0x3, 0x7f}, 'port1\x00', 0x3, 0x10009, 0x8, 0x0, 0xfffffffd, 0x1ff, 0x2, 0x0, 0x4, 0x1})
ioctl$IOCTL_START_ACCEL_DEV(r0, 0x40096102, &(0x7f00000002c0)={{&(0x7f0000000240)={'Accelerator\x00', {&(0x7f0000000040)=@adf_dec={@format={'Dc', '4', 'RingAsymTx\x00'}, {0x8000000000000001}}}, {&(0x7f00000001c0)={'GENERAL\x00', {&(0x7f0000000100)=@adf_str={@bank={'Bank', '2', 'InterruptCoalescingEnabled\x00'}, {"4a3634d5fef7830ac155e04fce5b7322c8aa29b4e5ff1345616446b655efd86b48366f3c4dd92fa680a32a2472c4128311433876393e885dd6ec53b6738f2cd3"}}}}}}}, 0x4})

09:38:49 executing program 0:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xbd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000000}, 0x8000)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000100)=[0x304])
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x58)

09:38:49 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x30, r2, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
openat$cgroup_subtree(r0, &(0x7f0000000040), 0x2, 0x0)
pidfd_send_signal(r0, 0x4, &(0x7f0000000240)={0xa, 0x1, 0x215}, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0xa000)

09:38:49 executing program 4:
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x3}, 0x44001)
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x58)

09:38:49 executing program 3:
getresgid(&(0x7f0000000080)=<r0=>0x0, &(0x7f00000000c0), &(0x7f0000000100))
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x0, {0x5, 0x3, 0x80, 0x2f3b, 0x4fb8, 0x8, {0x1, 0x8, 0x6, 0xfff, 0xffff, 0x2, 0x7fff, 0xebf1, 0x9, 0x2000, 0x3, 0xee01, r0, 0x5, 0xffffffff}}}, 0x90)
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
unshare(0x2000200)
r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$FUSE(r2, &(0x7f0000002380)={0x2020}, 0x2020)
read$FUSE(r1, &(0x7f0000000300)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_OPEN(r2, &(0x7f0000002340)={0x20, 0x0, r3, {0x0, 0x10}}, 0x20)

09:38:49 executing program 2:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x200)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x9, 0x4)

09:38:49 executing program 1:
socket$l2tp(0x2, 0x2, 0x73)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001600), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r1, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c010}, 0x4040890)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0xa6483)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4)
r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000100)={r3, r4, 0x0, r5}, 0x10)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001580)={0xd4, 0x0, &(0x7f0000001380)=[@acquire={0x40046305, 0x2}, @acquire={0x40046305, 0x2}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@fda={0x66646185, 0x3, 0x1, 0x1c}, @flat=@handle={0x73682a85, 0x100, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/4096, 0x1000, 0x0, 0x3a}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f00000012c0)={@fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x1, &(0x7f0000001280)=""/13, 0xd, 0x0, 0x3f}, @fda={0x66646185, 0x1, 0x2, 0x36}}, &(0x7f0000001340)={0x0, 0x18, 0x40}}}, @increfs={0x40046304, 0x3}, @increfs_done={0x40106308, 0x2}, @acquire_done, @dead_binder_done], 0xc7, 0x0, &(0x7f0000001480)="9b06e884f04809f9ade741e1e1542c05664d82885fc60772d8e473d5741b66947e6934e35b61574de8e079fc691ee7e8c9bfce1b8acd7dcdf0ec78a5852fb89834b035c54d7993bc86844b7dd08ce7b0a5a709457393f8e14d6914934077bcfd5d1d4dfdb2b21543af45c9893c07ff2b3d692c0c52d4392469655962ad1985cecfe121a5f2a18e9d29a166d60b86f0df6b7050a642e1412a58c969125ba3a1452676909e66a16c385855c7fac780f79e244f2d6700eb38cc024b752096e3554debfd460693b4c5"})
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4)

09:38:49 executing program 5:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xa, 0xffffffffffffffff)

09:38:49 executing program 3:
getresgid(&(0x7f0000000080)=<r0=>0x0, &(0x7f00000000c0), &(0x7f0000000100))
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x0, {0x5, 0x3, 0x80, 0x2f3b, 0x4fb8, 0x8, {0x1, 0x8, 0x6, 0xfff, 0xffff, 0x2, 0x7fff, 0xebf1, 0x9, 0x2000, 0x3, 0xee01, r0, 0x5, 0xffffffff}}}, 0x90)
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
unshare(0x2000200)
r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$FUSE(r2, &(0x7f0000002380)={0x2020}, 0x2020)
read$FUSE(r1, &(0x7f0000000300)={0x2020}, 0x2020)

09:38:49 executing program 0:
read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020}, 0x2020)
syz_clone3(&(0x7f0000000080)={0x6800000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x58)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)

09:38:49 executing program 2:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x200)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x9, 0x4)

09:38:49 executing program 5:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xa, 0xffffffffffffffff)

09:38:49 executing program 1:
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x58)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x14, 0xf7, 0x3f5, 0xfffffffc, 0x980, 0x1, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2}, 0x48)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @exit], &(0x7f0000000040)='GPL\x00', 0xffff0000, 0x66, &(0x7f0000000080)=""/102, 0x40f00, 0x1c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0x7, 0x6, 0x7fffffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r0, r1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, r2, 0xffffffffffffffff]}, 0x80)

09:38:49 executing program 3:
getresgid(&(0x7f0000000080)=<r0=>0x0, &(0x7f00000000c0), &(0x7f0000000100))
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x0, {0x5, 0x3, 0x80, 0x2f3b, 0x4fb8, 0x8, {0x1, 0x8, 0x6, 0xfff, 0xffff, 0x2, 0x7fff, 0xebf1, 0x9, 0x2000, 0x3, 0xee01, r0, 0x5, 0xffffffff}}}, 0x90)
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
unshare(0x2000200)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020)

09:38:49 executing program 2:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x200)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x9, 0x4)

09:38:49 executing program 4:
getresgid(&(0x7f0000000080)=<r0=>0x0, &(0x7f00000000c0), &(0x7f0000000100))
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x0, {0x5, 0x3, 0x80, 0x2f3b, 0x4fb8, 0x8, {0x1, 0x8, 0x6, 0xfff, 0xffff, 0x2, 0x7fff, 0xebf1, 0x9, 0x2000, 0x3, 0xee01, r0, 0x5, 0xffffffff}}}, 0x90)
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
unshare(0x2000200)
r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$FUSE(r2, &(0x7f0000002380)={0x2020}, 0x2020)
read$FUSE(r1, &(0x7f0000000300)={0x2020}, 0x2020)

09:38:49 executing program 5:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xa, 0xffffffffffffffff)

09:38:49 executing program 3:
getresgid(&(0x7f0000000080)=<r0=>0x0, &(0x7f00000000c0), &(0x7f0000000100))
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x0, {0x5, 0x3, 0x80, 0x2f3b, 0x4fb8, 0x8, {0x1, 0x8, 0x6, 0xfff, 0xffff, 0x2, 0x7fff, 0xebf1, 0x9, 0x2000, 0x3, 0xee01, r0, 0x5, 0xffffffff}}}, 0x90)
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
unshare(0x2000200)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)

09:38:49 executing program 4:
getresgid(&(0x7f0000000080)=<r0=>0x0, &(0x7f00000000c0), &(0x7f0000000100))
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x0, {0x5, 0x3, 0x80, 0x2f3b, 0x4fb8, 0x8, {0x1, 0x8, 0x6, 0xfff, 0xffff, 0x2, 0x7fff, 0xebf1, 0x9, 0x2000, 0x3, 0xee01, r0, 0x5, 0xffffffff}}}, 0x90)
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
unshare(0x2000200)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020)

09:38:49 executing program 5:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xa, 0xffffffffffffffff)

09:38:49 executing program 2:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x200)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000000)=0x9, 0x4)

09:38:49 executing program 0:
syz_clone3(&(0x7f0000001280)={0x8000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x58)

09:38:49 executing program 3:
getresgid(&(0x7f0000000080)=<r0=>0x0, &(0x7f00000000c0), &(0x7f0000000100))
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x0, {0x5, 0x3, 0x80, 0x2f3b, 0x4fb8, 0x8, {0x1, 0x8, 0x6, 0xfff, 0xffff, 0x2, 0x7fff, 0xebf1, 0x9, 0x2000, 0x3, 0xee01, r0, 0x5, 0xffffffff}}}, 0x90)
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
unshare(0x2000200)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)

09:38:49 executing program 1:
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x58)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
pidfd_send_signal(r0, 0x5, &(0x7f0000000000)={0x2e, 0x1, 0x20}, 0x0)

09:38:49 executing program 4:
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x10}, 0x58)

09:38:49 executing program 2:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x200)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000000)=0x9, 0x4)

09:38:49 executing program 5:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xa, 0xffffffffffffffff)

09:38:49 executing program 0:
syz_clone3(&(0x7f0000001280)={0x8000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x58)

09:38:49 executing program 3:
getresgid(&(0x7f0000000080)=<r0=>0x0, &(0x7f00000000c0), &(0x7f0000000100))
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x0, {0x5, 0x3, 0x80, 0x2f3b, 0x4fb8, 0x8, {0x1, 0x8, 0x6, 0xfff, 0xffff, 0x2, 0x7fff, 0xebf1, 0x9, 0x2000, 0x3, 0xee01, r0, 0x5, 0xffffffff}}}, 0x90)
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
unshare(0x2000200)

09:38:50 executing program 0:
syz_clone3(&(0x7f0000001280)={0x8000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x58)

09:38:50 executing program 2:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x200)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000000)=0x9, 0x4)

09:38:50 executing program 5:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xa, 0xffffffffffffffff)

09:38:50 executing program 3:
getresgid(&(0x7f0000000080)=<r0=>0x0, &(0x7f00000000c0), &(0x7f0000000100))
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x0, {0x5, 0x3, 0x80, 0x2f3b, 0x4fb8, 0x8, {0x1, 0x8, 0x6, 0xfff, 0xffff, 0x2, 0x7fff, 0xebf1, 0x9, 0x2000, 0x3, 0xee01, r0, 0x5, 0xffffffff}}}, 0x90)
unshare(0x2000200)

09:38:50 executing program 2:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x9, 0x4)

09:38:50 executing program 4:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x200)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000000)=0x9, 0x4)

09:38:50 executing program 1:
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0xe}, 0x58)

09:38:50 executing program 0:
syz_clone3(0x0, 0x0)

09:38:50 executing program 3:
getresgid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100))
unshare(0x2000200)

09:38:50 executing program 5:
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xa, 0xffffffffffffffff)

09:38:50 executing program 2:
socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000000)=0x9, 0x4)

09:38:50 executing program 0:
syz_clone3(0x0, 0x0)

09:38:50 executing program 4:
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x57)

09:38:50 executing program 5:
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xa, 0xffffffffffffffff)

09:38:50 executing program 3:
unshare(0x2000200)

09:38:50 executing program 0:
syz_clone3(0x0, 0x0)

09:38:50 executing program 2:
socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000000)=0x9, 0x4)

09:38:50 executing program 5:
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xa, 0xffffffffffffffff)

09:38:50 executing program 1:
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x4000}, 0x58)

09:38:50 executing program 3:
unshare(0x0)

09:38:50 executing program 0:
syz_clone3(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x58)

09:38:50 executing program 5:
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xa, 0xffffffffffffffff)

09:38:50 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000002280)="975b8b28a930a5fd648b4b0fb98c2a4e24fdd72fc30c1fd6e9058fe7b2d4e09a30d581f374ca8a068ae47642a7448a61af76c3a2202159fbc79214e408444997642c60a19328c4bfc6bbdeba707555bf9a6eb825c27ca9eb14bd74b691326b768479da156bb64d5324361793dc493996c2fccaf641fb5813a21d7d577e09ec5d2f771199d5288502c812bd09d8db6193462c6a107e822e67269c8a3458f04a0880ed6320b7a96e0476439d5a4717562a279119b4ce00fb9c783d38de84ecb9421eedf6d2db9d54c9a25ae9c85d063306dc0d01a055a81eea7a2190ebffe1b47a6a458381", &(0x7f0000000040)=@tcp6}, 0x20)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x197483)
keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x0})
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, <r2=>0x0}, 0x2020)
keyctl$join(0x1, &(0x7f0000002380)={'syz', 0x3})
write$FUSE_DIRENT(r1, &(0x7f0000002140)=ANY=[@ANYBLOB="30010000daffffff", @ANYRES64=r2, @ANYBLOB="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"], 0x130)

09:38:50 executing program 3:
unshare(0x0)

09:38:50 executing program 2:
socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000000)=0x9, 0x4)

09:38:50 executing program 1:
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x4000}, 0x58)

09:38:50 executing program 5:
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xa, 0xffffffffffffffff)

09:38:50 executing program 0:
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1c}, 0x58)

09:38:50 executing program 1:
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x4000}, 0x58)

09:38:50 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000002280)="975b8b28a930a5fd648b4b0fb98c2a4e24fdd72fc30c1fd6e9058fe7b2d4e09a30d581f374ca8a068ae47642a7448a61af76c3a2202159fbc79214e408444997642c60a19328c4bfc6bbdeba707555bf9a6eb825c27ca9eb14bd74b691326b768479da156bb64d5324361793dc493996c2fccaf641fb5813a21d7d577e09ec5d2f771199d5288502c812bd09d8db6193462c6a107e822e67269c8a3458f04a0880ed6320b7a96e0476439d5a4717562a279119b4ce00fb9c783d38de84ecb9421eedf6d2db9d54c9a25ae9c85d063306dc0d01a055a81eea7a2190ebffe1b47a6a458381", &(0x7f0000000040)=@tcp6}, 0x20)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x197483)
keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x0})
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, <r2=>0x0}, 0x2020)
keyctl$join(0x1, &(0x7f0000002380)={'syz', 0x3})
write$FUSE_DIRENT(r1, &(0x7f0000002140)=ANY=[@ANYBLOB="30010000daffffff", @ANYRES64=r2, @ANYBLOB="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"], 0x130)

09:38:50 executing program 2:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000000)=0x9, 0x4)

09:38:50 executing program 3:
unshare(0x0)

09:38:50 executing program 1:
syz_clone3(0x0, 0x0)

09:38:50 executing program 5:
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xa, 0xffffffffffffffff)

09:38:50 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000002280)="975b8b28a930a5fd648b4b0fb98c2a4e24fdd72fc30c1fd6e9058fe7b2d4e09a30d581f374ca8a068ae47642a7448a61af76c3a2202159fbc79214e408444997642c60a19328c4bfc6bbdeba707555bf9a6eb825c27ca9eb14bd74b691326b768479da156bb64d5324361793dc493996c2fccaf641fb5813a21d7d577e09ec5d2f771199d5288502c812bd09d8db6193462c6a107e822e67269c8a3458f04a0880ed6320b7a96e0476439d5a4717562a279119b4ce00fb9c783d38de84ecb9421eedf6d2db9d54c9a25ae9c85d063306dc0d01a055a81eea7a2190ebffe1b47a6a458381", &(0x7f0000000040)=@tcp6}, 0x20)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x197483)
keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x0})
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, <r2=>0x0}, 0x2020)
keyctl$join(0x1, &(0x7f0000002380)={'syz', 0x3})
write$FUSE_DIRENT(r1, &(0x7f0000002140)=ANY=[@ANYBLOB="30010000daffffff", @ANYRES64=r2, @ANYBLOB="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"], 0x130)

09:38:50 executing program 2:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000000)=0x9, 0x4)

09:38:50 executing program 3:
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xa, 0xffffffffffffffff)

09:38:50 executing program 0:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000a, 0xffffffffffffffff)
r0 = pkey_alloc(0x0, 0x1)
pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, r0)

09:38:50 executing program 1:
syz_clone3(0x0, 0x0)

09:38:50 executing program 5:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xa, 0xffffffffffffffff)

09:38:50 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000002280)="975b8b28a930a5fd648b4b0fb98c2a4e24fdd72fc30c1fd6e9058fe7b2d4e09a30d581f374ca8a068ae47642a7448a61af76c3a2202159fbc79214e408444997642c60a19328c4bfc6bbdeba707555bf9a6eb825c27ca9eb14bd74b691326b768479da156bb64d5324361793dc493996c2fccaf641fb5813a21d7d577e09ec5d2f771199d5288502c812bd09d8db6193462c6a107e822e67269c8a3458f04a0880ed6320b7a96e0476439d5a4717562a279119b4ce00fb9c783d38de84ecb9421eedf6d2db9d54c9a25ae9c85d063306dc0d01a055a81eea7a2190ebffe1b47a6a458381", &(0x7f0000000040)=@tcp6}, 0x20)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x197483)
keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x0})
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020}, 0x2020)
keyctl$join(0x1, &(0x7f0000002380)={'syz', 0x3})

09:38:50 executing program 2:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000000)=0x9, 0x4)

09:38:51 executing program 3:
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xa, 0xffffffffffffffff)

09:38:51 executing program 0:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000a, 0xffffffffffffffff)
r0 = pkey_alloc(0x0, 0x1)
pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, r0)

09:38:51 executing program 5:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xa, 0xffffffffffffffff)

09:38:51 executing program 1:
syz_clone3(0x0, 0x0)

09:38:51 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000002280)="975b8b28a930a5fd648b4b0fb98c2a4e24fdd72fc30c1fd6e9058fe7b2d4e09a30d581f374ca8a068ae47642a7448a61af76c3a2202159fbc79214e408444997642c60a19328c4bfc6bbdeba707555bf9a6eb825c27ca9eb14bd74b691326b768479da156bb64d5324361793dc493996c2fccaf641fb5813a21d7d577e09ec5d2f771199d5288502c812bd09d8db6193462c6a107e822e67269c8a3458f04a0880ed6320b7a96e0476439d5a4717562a279119b4ce00fb9c783d38de84ecb9421eedf6d2db9d54c9a25ae9c85d063306dc0d01a055a81eea7a2190ebffe1b47a6a458381", &(0x7f0000000040)=@tcp6}, 0x20)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x197483)
keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x0})
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
keyctl$join(0x1, &(0x7f0000002380)={'syz', 0x3})

09:38:51 executing program 2:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x4, 0x0, 0x0)

09:38:51 executing program 3:
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xa, 0xffffffffffffffff)

09:38:51 executing program 0:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000a, 0xffffffffffffffff)
r0 = pkey_alloc(0x0, 0x1)
pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, r0)

09:38:51 executing program 1:
syz_clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x4000}, 0x58)

09:38:51 executing program 5:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xa, 0xffffffffffffffff)

09:38:51 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000002280)="975b8b28a930a5fd648b4b0fb98c2a4e24fdd72fc30c1fd6e9058fe7b2d4e09a30d581f374ca8a068ae47642a7448a61af76c3a2202159fbc79214e408444997642c60a19328c4bfc6bbdeba707555bf9a6eb825c27ca9eb14bd74b691326b768479da156bb64d5324361793dc493996c2fccaf641fb5813a21d7d577e09ec5d2f771199d5288502c812bd09d8db6193462c6a107e822e67269c8a3458f04a0880ed6320b7a96e0476439d5a4717562a279119b4ce00fb9c783d38de84ecb9421eedf6d2db9d54c9a25ae9c85d063306dc0d01a055a81eea7a2190ebffe1b47a6a458381", &(0x7f0000000040)=@tcp6}, 0x20)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x197483)
keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x0})
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
keyctl$join(0x1, &(0x7f0000002380)={'syz', 0x3})

09:38:51 executing program 2:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x4, 0x0, 0x0)

09:38:51 executing program 1:
syz_clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

09:38:51 executing program 3:
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xa, 0xffffffffffffffff)

09:38:51 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000002280)="975b8b28a930a5fd648b4b0fb98c2a4e24fdd72fc30c1fd6e9058fe7b2d4e09a30d581f374ca8a068ae47642a7448a61af76c3a2202159fbc79214e408444997642c60a19328c4bfc6bbdeba707555bf9a6eb825c27ca9eb14bd74b691326b768479da156bb64d5324361793dc493996c2fccaf641fb5813a21d7d577e09ec5d2f771199d5288502c812bd09d8db6193462c6a107e822e67269c8a3458f04a0880ed6320b7a96e0476439d5a4717562a279119b4ce00fb9c783d38de84ecb9421eedf6d2db9d54c9a25ae9c85d063306dc0d01a055a81eea7a2190ebffe1b47a6a458381", &(0x7f0000000040)=@tcp6}, 0x20)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x197483)
keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x0})
keyctl$join(0x1, &(0x7f0000002380)={'syz', 0x3})

09:38:51 executing program 0:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000a, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0xffffffffffffffff)

09:38:51 executing program 5:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff)

09:38:51 executing program 2:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x4, 0x0, 0x0)

09:38:51 executing program 3:
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xa, 0xffffffffffffffff)

09:38:51 executing program 0:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0xffffffffffffffff)

09:38:51 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000002280)="975b8b28a930a5fd648b4b0fb98c2a4e24fdd72fc30c1fd6e9058fe7b2d4e09a30d581f374ca8a068ae47642a7448a61af76c3a2202159fbc79214e408444997642c60a19328c4bfc6bbdeba707555bf9a6eb825c27ca9eb14bd74b691326b768479da156bb64d5324361793dc493996c2fccaf641fb5813a21d7d577e09ec5d2f771199d5288502c812bd09d8db6193462c6a107e822e67269c8a3458f04a0880ed6320b7a96e0476439d5a4717562a279119b4ce00fb9c783d38de84ecb9421eedf6d2db9d54c9a25ae9c85d063306dc0d01a055a81eea7a2190ebffe1b47a6a458381", &(0x7f0000000040)=@tcp6}, 0x20)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x197483)
keyctl$join(0x1, &(0x7f0000002380)={'syz', 0x3})

09:38:51 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000002280)="975b8b28a930a5fd648b4b0fb98c2a4e24fdd72fc30c1fd6e9058fe7b2d4e09a30d581f374ca8a068ae47642a7448a61af76c3a2202159fbc79214e408444997642c60a19328c4bfc6bbdeba707555bf9a6eb825c27ca9eb14bd74b691326b768479da156bb64d5324361793dc493996c2fccaf641fb5813a21d7d577e09ec5d2f771199d5288502c812bd09d8db6193462c6a107e822e67269c8a3458f04a0880ed6320b7a96e0476439d5a4717562a279119b4ce00fb9c783d38de84ecb9421eedf6d2db9d54c9a25ae9c85d063306dc0d01a055a81eea7a2190ebffe1b47a6a458381", &(0x7f0000000040)=@tcp6}, 0x20)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x197483)
keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x0})
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
keyctl$join(0x1, &(0x7f0000002380)={'syz', 0x3})

09:38:51 executing program 1:
syz_clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

09:38:51 executing program 2:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000), 0x4)

09:38:51 executing program 0:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0xffffffffffffffff)

09:38:51 executing program 3:
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xa, 0xffffffffffffffff)

09:38:51 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000002280)="975b8b28a930a5fd648b4b0fb98c2a4e24fdd72fc30c1fd6e9058fe7b2d4e09a30d581f374ca8a068ae47642a7448a61af76c3a2202159fbc79214e408444997642c60a19328c4bfc6bbdeba707555bf9a6eb825c27ca9eb14bd74b691326b768479da156bb64d5324361793dc493996c2fccaf641fb5813a21d7d577e09ec5d2f771199d5288502c812bd09d8db6193462c6a107e822e67269c8a3458f04a0880ed6320b7a96e0476439d5a4717562a279119b4ce00fb9c783d38de84ecb9421eedf6d2db9d54c9a25ae9c85d063306dc0d01a055a81eea7a2190ebffe1b47a6a458381", &(0x7f0000000040)=@tcp6}, 0x20)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x197483)
keyctl$join(0x1, &(0x7f0000002380)={'syz', 0x3})

09:38:51 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000002280)="975b8b28a930a5fd648b4b0fb98c2a4e24fdd72fc30c1fd6e9058fe7b2d4e09a30d581f374ca8a068ae47642a7448a61af76c3a2202159fbc79214e408444997642c60a19328c4bfc6bbdeba707555bf9a6eb825c27ca9eb14bd74b691326b768479da156bb64d5324361793dc493996c2fccaf641fb5813a21d7d577e09ec5d2f771199d5288502c812bd09d8db6193462c6a107e822e67269c8a3458f04a0880ed6320b7a96e0476439d5a4717562a279119b4ce00fb9c783d38de84ecb9421eedf6d2db9d54c9a25ae9c85d063306dc0d01a055a81eea7a2190ebffe1b47a6a458381", &(0x7f0000000040)=@tcp6}, 0x20)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x197483)
keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x0})
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
keyctl$join(0x1, &(0x7f0000002380)={'syz', 0x3})

09:38:51 executing program 2:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000), 0x4)

09:38:51 executing program 3:
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xa, 0xffffffffffffffff)

09:38:51 executing program 0:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0xffffffffffffffff)

09:38:51 executing program 1:
syz_clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

09:38:51 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000002280)="975b8b28a930a5fd648b4b0fb98c2a4e24fdd72fc30c1fd6e9058fe7b2d4e09a30d581f374ca8a068ae47642a7448a61af76c3a2202159fbc79214e408444997642c60a19328c4bfc6bbdeba707555bf9a6eb825c27ca9eb14bd74b691326b768479da156bb64d5324361793dc493996c2fccaf641fb5813a21d7d577e09ec5d2f771199d5288502c812bd09d8db6193462c6a107e822e67269c8a3458f04a0880ed6320b7a96e0476439d5a4717562a279119b4ce00fb9c783d38de84ecb9421eedf6d2db9d54c9a25ae9c85d063306dc0d01a055a81eea7a2190ebffe1b47a6a458381", &(0x7f0000000040)=@tcp6}, 0x20)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x197483)
keyctl$join(0x1, &(0x7f0000002380)={'syz', 0x3})

09:38:51 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000002280)="975b8b28a930a5fd648b4b0fb98c2a4e24fdd72fc30c1fd6e9058fe7b2d4e09a30d581f374ca8a068ae47642a7448a61af76c3a2202159fbc79214e408444997642c60a19328c4bfc6bbdeba707555bf9a6eb825c27ca9eb14bd74b691326b768479da156bb64d5324361793dc493996c2fccaf641fb5813a21d7d577e09ec5d2f771199d5288502c812bd09d8db6193462c6a107e822e67269c8a3458f04a0880ed6320b7a96e0476439d5a4717562a279119b4ce00fb9c783d38de84ecb9421eedf6d2db9d54c9a25ae9c85d063306dc0d01a055a81eea7a2190ebffe1b47a6a458381", &(0x7f0000000040)=@tcp6}, 0x20)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x197483)
keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x0})
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
keyctl$join(0x1, &(0x7f0000002380)={'syz', 0x3})

09:38:51 executing program 2:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000), 0x4)

09:38:51 executing program 0:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0xffffffffffffffff)

09:38:51 executing program 3:
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xa, 0xffffffffffffffff)

09:38:51 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000002280)="975b8b28a930a5fd648b4b0fb98c2a4e24fdd72fc30c1fd6e9058fe7b2d4e09a30d581f374ca8a068ae47642a7448a61af76c3a2202159fbc79214e408444997642c60a19328c4bfc6bbdeba707555bf9a6eb825c27ca9eb14bd74b691326b768479da156bb64d5324361793dc493996c2fccaf641fb5813a21d7d577e09ec5d2f771199d5288502c812bd09d8db6193462c6a107e822e67269c8a3458f04a0880ed6320b7a96e0476439d5a4717562a279119b4ce00fb9c783d38de84ecb9421eedf6d2db9d54c9a25ae9c85d063306dc0d01a055a81eea7a2190ebffe1b47a6a458381", &(0x7f0000000040)=@tcp6}, 0x20)
keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x0})
keyctl$join(0x1, &(0x7f0000002380)={'syz', 0x3})

09:38:51 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000002280)="975b8b28a930a5fd648b4b0fb98c2a4e24fdd72fc30c1fd6e9058fe7b2d4e09a30d581f374ca8a068ae47642a7448a61af76c3a2202159fbc79214e408444997642c60a19328c4bfc6bbdeba707555bf9a6eb825c27ca9eb14bd74b691326b768479da156bb64d5324361793dc493996c2fccaf641fb5813a21d7d577e09ec5d2f771199d5288502c812bd09d8db6193462c6a107e822e67269c8a3458f04a0880ed6320b7a96e0476439d5a4717562a279119b4ce00fb9c783d38de84ecb9421eedf6d2db9d54c9a25ae9c85d063306dc0d01a055a81eea7a2190ebffe1b47a6a458381", &(0x7f0000000040)=@tcp6}, 0x20)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x197483)
keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x0})
keyctl$join(0x1, &(0x7f0000002380)={'syz', 0x3})

09:38:51 executing program 1:
syz_clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)}, 0x58)

09:38:51 executing program 2:
syz_clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

09:38:51 executing program 0:
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0xffffffffffffffff)

09:38:51 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x0})
keyctl$join(0x1, &(0x7f0000002380)={'syz', 0x3})

09:38:51 executing program 3:
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xa, 0xffffffffffffffff)

09:38:51 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000002280)="975b8b28a930a5fd648b4b0fb98c2a4e24fdd72fc30c1fd6e9058fe7b2d4e09a30d581f374ca8a068ae47642a7448a61af76c3a2202159fbc79214e408444997642c60a19328c4bfc6bbdeba707555bf9a6eb825c27ca9eb14bd74b691326b768479da156bb64d5324361793dc493996c2fccaf641fb5813a21d7d577e09ec5d2f771199d5288502c812bd09d8db6193462c6a107e822e67269c8a3458f04a0880ed6320b7a96e0476439d5a4717562a279119b4ce00fb9c783d38de84ecb9421eedf6d2db9d54c9a25ae9c85d063306dc0d01a055a81eea7a2190ebffe1b47a6a458381", &(0x7f0000000040)=@tcp6}, 0x20)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x197483)
keyctl$join(0x1, &(0x7f0000002380)={'syz', 0x3})

09:38:52 executing program 0:
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0xffffffffffffffff)

09:38:52 executing program 1:
syz_clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)}, 0x58)

09:38:52 executing program 3:
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xa, 0xffffffffffffffff)

09:38:52 executing program 4:
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x0})
keyctl$join(0x1, &(0x7f0000002380)={'syz', 0x3})

09:38:52 executing program 2:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000002280)="975b8b28a930a5fd648b4b0fb98c2a4e24fdd72fc30c1fd6e9058fe7b2d4e09a30d581f374ca8a068ae47642a7448a61af76c3a2202159fbc79214e408444997642c60a19328c4bfc6bbdeba707555bf9a6eb825c27ca9eb14bd74b691326b768479da156bb64d5324361793dc493996c2fccaf641fb5813a21d7d577e09ec5d2f771199d5288502c812bd09d8db6193462c6a107e822e67269c8a3458f04a0880ed6320b7a96e0476439d5a4717562a279119b4ce00fb9c783d38de84ecb9421eedf6d2db9d54c9a25ae9c85d063306dc0d01a055a81eea7a2190ebffe1b47a6a458381", &(0x7f0000000040)=@tcp6}, 0x20)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x197483)
keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x0})
keyctl$join(0x1, &(0x7f0000002380)={'syz', 0x3})

09:38:52 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000002280)="975b8b28a930a5fd648b4b0fb98c2a4e24fdd72fc30c1fd6e9058fe7b2d4e09a30d581f374ca8a068ae47642a7448a61af76c3a2202159fbc79214e408444997642c60a19328c4bfc6bbdeba707555bf9a6eb825c27ca9eb14bd74b691326b768479da156bb64d5324361793dc493996c2fccaf641fb5813a21d7d577e09ec5d2f771199d5288502c812bd09d8db6193462c6a107e822e67269c8a3458f04a0880ed6320b7a96e0476439d5a4717562a279119b4ce00fb9c783d38de84ecb9421eedf6d2db9d54c9a25ae9c85d063306dc0d01a055a81eea7a2190ebffe1b47a6a458381", &(0x7f0000000040)=@tcp6}, 0x20)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x197483)
keyctl$join(0x1, &(0x7f0000002380)={'syz', 0x3})

09:38:52 executing program 0:
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0xffffffffffffffff)

09:38:52 executing program 3:
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff)

09:38:52 executing program 1:
syz_clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)}, 0x58)

09:38:52 executing program 4:
keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x0})
keyctl$join(0x1, &(0x7f0000002380)={'syz', 0x3})

09:38:52 executing program 0:
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0xffffffffffffffff)

09:38:52 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000002280)="975b8b28a930a5fd648b4b0fb98c2a4e24fdd72fc30c1fd6e9058fe7b2d4e09a30d581f374ca8a068ae47642a7448a61af76c3a2202159fbc79214e408444997642c60a19328c4bfc6bbdeba707555bf9a6eb825c27ca9eb14bd74b691326b768479da156bb64d5324361793dc493996c2fccaf641fb5813a21d7d577e09ec5d2f771199d5288502c812bd09d8db6193462c6a107e822e67269c8a3458f04a0880ed6320b7a96e0476439d5a4717562a279119b4ce00fb9c783d38de84ecb9421eedf6d2db9d54c9a25ae9c85d063306dc0d01a055a81eea7a2190ebffe1b47a6a458381", &(0x7f0000000040)=@tcp6}, 0x20)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x197483)
keyctl$join(0x1, &(0x7f0000002380)={'syz', 0x3})

09:38:52 executing program 1:
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xa, 0xffffffffffffffff)

09:38:52 executing program 3:
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xa, 0xffffffffffffffff)

09:38:52 executing program 2:
syz_clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

09:38:52 executing program 4:
keyctl$join(0x1, 0x0)
keyctl$join(0x1, &(0x7f0000002380)={'syz', 0x3})

09:38:52 executing program 0:
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0xffffffffffffffff)

09:38:52 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000002280)="975b8b28a930a5fd648b4b0fb98c2a4e24fdd72fc30c1fd6e9058fe7b2d4e09a30d581f374ca8a068ae47642a7448a61af76c3a2202159fbc79214e408444997642c60a19328c4bfc6bbdeba707555bf9a6eb825c27ca9eb14bd74b691326b768479da156bb64d5324361793dc493996c2fccaf641fb5813a21d7d577e09ec5d2f771199d5288502c812bd09d8db6193462c6a107e822e67269c8a3458f04a0880ed6320b7a96e0476439d5a4717562a279119b4ce00fb9c783d38de84ecb9421eedf6d2db9d54c9a25ae9c85d063306dc0d01a055a81eea7a2190ebffe1b47a6a458381", &(0x7f0000000040)=@tcp6}, 0x20)
keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x0})
keyctl$join(0x1, &(0x7f0000002380)={'syz', 0x3})

09:38:52 executing program 3:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000), 0x4)

09:38:52 executing program 1:
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xa, 0xffffffffffffffff)

09:38:52 executing program 4:
keyctl$join(0x1, 0x0)
keyctl$join(0x1, 0x0)

09:38:52 executing program 0:
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0xffffffffffffffff)

09:38:52 executing program 1:
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xa, 0xffffffffffffffff)

09:38:52 executing program 2:
syz_clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

09:38:52 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x0})
keyctl$join(0x1, &(0x7f0000002380)={'syz', 0x3})

09:38:52 executing program 3:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000), 0x4)

09:38:52 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000002280)="975b8b28a930a5fd648b4b0fb98c2a4e24fdd72fc30c1fd6e9058fe7b2d4e09a30d581f374ca8a068ae47642a7448a61af76c3a2202159fbc79214e408444997642c60a19328c4bfc6bbdeba707555bf9a6eb825c27ca9eb14bd74b691326b768479da156bb64d5324361793dc493996c2fccaf641fb5813a21d7d577e09ec5d2f771199d5288502c812bd09d8db6193462c6a107e822e67269c8a3458f04a0880ed6320b7a96e0476439d5a4717562a279119b4ce00fb9c783d38de84ecb9421eedf6d2db9d54c9a25ae9c85d063306dc0d01a055a81eea7a2190ebffe1b47a6a458381", &(0x7f0000000040)=@tcp6}, 0x20)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x197483)
keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x0})
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
keyctl$join(0x1, &(0x7f0000002380)={'syz', 0x3})

09:38:52 executing program 0:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0xffffffffffffffff)

09:38:52 executing program 5:
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x0})
keyctl$join(0x1, &(0x7f0000002380)={'syz', 0x3})

09:38:52 executing program 1:
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xa, 0xffffffffffffffff)

09:38:52 executing program 3:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000), 0x4)

09:38:52 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000002280)="975b8b28a930a5fd648b4b0fb98c2a4e24fdd72fc30c1fd6e9058fe7b2d4e09a30d581f374ca8a068ae47642a7448a61af76c3a2202159fbc79214e408444997642c60a19328c4bfc6bbdeba707555bf9a6eb825c27ca9eb14bd74b691326b768479da156bb64d5324361793dc493996c2fccaf641fb5813a21d7d577e09ec5d2f771199d5288502c812bd09d8db6193462c6a107e822e67269c8a3458f04a0880ed6320b7a96e0476439d5a4717562a279119b4ce00fb9c783d38de84ecb9421eedf6d2db9d54c9a25ae9c85d063306dc0d01a055a81eea7a2190ebffe1b47a6a458381", &(0x7f0000000040)=@tcp6}, 0x20)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x197483)
keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x0})
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
keyctl$join(0x1, &(0x7f0000002380)={'syz', 0x3})

09:38:52 executing program 2:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xa, 0xffffffffffffffff)

09:38:52 executing program 0:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff)

09:38:52 executing program 1:
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xa, 0xffffffffffffffff)

09:38:52 executing program 3:
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000000), 0x4)

09:38:52 executing program 5:
keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x0})
keyctl$join(0x1, &(0x7f0000002380)={'syz', 0x3})

09:38:52 executing program 4:
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xa, 0xffffffffffffffff)

09:38:52 executing program 2:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xa, 0xffffffffffffffff)

09:38:52 executing program 0:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff)

09:38:52 executing program 1:
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xa, 0xffffffffffffffff)

09:38:52 executing program 3:
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000000), 0x4)

09:38:52 executing program 5:
keyctl$join(0x1, 0x0)
keyctl$join(0x1, &(0x7f0000002380)={'syz', 0x3})

09:38:52 executing program 4:
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0xa}, 0x58)

09:38:53 executing program 2:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xa, 0xffffffffffffffff)

09:38:53 executing program 0:
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x10}, 0x58)

09:38:53 executing program 3:
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000000), 0x4)

09:38:53 executing program 5:
keyctl$join(0x1, 0x0)
keyctl$join(0x1, 0x0)

09:38:53 executing program 1:
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff)

09:38:53 executing program 3:
socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000000), 0x4)

09:38:53 executing program 2:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xa, 0xffffffffffffffff)

09:38:53 executing program 1:
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff)

09:38:53 executing program 5:
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xa, 0xffffffffffffffff)

09:38:53 executing program 3:
socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000000), 0x4)

09:38:53 executing program 4:
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000240)=0x2, 0x4)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x20000000, &(0x7f0000000040))
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4)
brk(0x1f)
pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff)
waitid(0x1, 0x0, &(0x7f0000000280), 0x2, &(0x7f0000000180))

09:38:53 executing program 2:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xa, 0xffffffffffffffff)

09:38:53 executing program 0:
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x3}, 0x58)

09:38:53 executing program 5:
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x5}, 0x58)

09:38:53 executing program 1:
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff)

09:38:53 executing program 2:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xa, 0xffffffffffffffff)

09:38:53 executing program 4:
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000240)=0x2, 0x4)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x20000000, &(0x7f0000000040))
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4)
brk(0x1f)
pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff)
waitid(0x1, 0x0, &(0x7f0000000280), 0x2, &(0x7f0000000180))

09:38:53 executing program 3:
socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000000), 0x4)

09:38:53 executing program 1:
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x3}, 0x58)

09:38:53 executing program 2:
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xa, 0xffffffffffffffff)

09:38:53 executing program 4:
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000240)=0x2, 0x4)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x20000000, &(0x7f0000000040))
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4)
brk(0x1f)
pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff)
waitid(0x1, 0x0, &(0x7f0000000280), 0x2, &(0x7f0000000180))

09:38:53 executing program 3:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000000), 0x4)

09:38:53 executing program 0:
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="e4d54308977cae5df07e65206494c302", 0x10)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff)

09:38:53 executing program 5:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff)
ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000040)=0x606)

09:38:53 executing program 2:
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff)

09:38:53 executing program 0:
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xa, 0xffffffffffffffff)

09:38:53 executing program 3:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000000), 0x4)

09:38:53 executing program 4:
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000240)=0x2, 0x4)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x20000000, &(0x7f0000000040))
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4)
brk(0x1f)
pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff)

09:38:53 executing program 1:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2a083)
getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000280)=""/199, &(0x7f0000000140)=0xc7)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000040)={0x2, 0x1, 'client1\x00', 0x7, "7d3d0275d891dcc8", "825a1f21e8a17e9a69968ef506968bdc6fba052d11a3215135eeecd4f23b7f00", 0x7, 0x8001})
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000100)={0x80}, 0x4)

09:38:53 executing program 5:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0xa6483)
r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x4903, 0x0)
waitid$P_PIDFD(0x3, r0, &(0x7f0000000040), 0x8, &(0x7f0000000100))

09:38:53 executing program 2:
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff)

09:38:53 executing program 3:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000000), 0x4)

09:38:53 executing program 0:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
getsockopt$inet_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000040)=""/74, &(0x7f00000000c0)=0x4a)

09:38:53 executing program 4:
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000240)=0x2, 0x4)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x20000000, &(0x7f0000000040))
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4)
brk(0x1f)

09:38:53 executing program 2:
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff)

09:38:53 executing program 1:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2a083)
getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000280)=""/199, &(0x7f0000000140)=0xc7)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000040)={0x2, 0x1, 'client1\x00', 0x7, "7d3d0275d891dcc8", "825a1f21e8a17e9a69968ef506968bdc6fba052d11a3215135eeecd4f23b7f00", 0x7, 0x8001})
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000100)={0x80}, 0x4)

09:38:53 executing program 5:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0xa6483)
r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x4903, 0x0)
waitid$P_PIDFD(0x3, r0, &(0x7f0000000040), 0x8, &(0x7f0000000100))

09:38:53 executing program 3:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x4, 0x0, 0x0)

09:38:53 executing program 0:
syz_clone3(&(0x7f0000001280)={0x8000, 0x0, 0x0, 0x0, {}, 0x0, 0x1d00, 0x0, 0x0}, 0x58)

09:38:54 executing program 4:
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000240)=0x2, 0x4)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x20000000, &(0x7f0000000040))
brk(0x1f)

09:38:54 executing program 2:
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff)

09:38:54 executing program 1:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2a083)
getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000280)=""/199, &(0x7f0000000140)=0xc7)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000040)={0x2, 0x1, 'client1\x00', 0x7, "7d3d0275d891dcc8", "825a1f21e8a17e9a69968ef506968bdc6fba052d11a3215135eeecd4f23b7f00", 0x7, 0x8001})
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000100)={0x80}, 0x4)

09:38:54 executing program 3:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x4, 0x0, 0x0)

09:38:54 executing program 0:
syz_clone3(&(0x7f0000001280)={0x8000, 0x0, 0x0, 0x0, {}, 0x0, 0x1d00, 0x0, 0x0}, 0x58)

09:38:54 executing program 4:
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000240)=0x2, 0x4)
brk(0x1f)

09:38:54 executing program 2:
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff)

09:38:54 executing program 5:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0xa6483)
r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x4903, 0x0)
waitid$P_PIDFD(0x3, r0, &(0x7f0000000040), 0x8, &(0x7f0000000100))

09:38:54 executing program 1:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2a083)
getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000280)=""/199, &(0x7f0000000140)=0xc7)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000040)={0x2, 0x1, 'client1\x00', 0x7, "7d3d0275d891dcc8", "825a1f21e8a17e9a69968ef506968bdc6fba052d11a3215135eeecd4f23b7f00", 0x7, 0x8001})
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)

09:38:54 executing program 3:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x4, 0x0, 0x0)

09:38:54 executing program 0:
syz_clone3(&(0x7f0000001280)={0x8000, 0x0, 0x0, 0x0, {}, 0x0, 0x1d00, 0x0, 0x0}, 0x58)

09:38:54 executing program 4:
brk(0x1f)

09:38:54 executing program 5:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0xa6483)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x4903, 0x0)

09:38:54 executing program 1:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2a083)
getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000280)=""/199, &(0x7f0000000140)=0xc7)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000040)={0x2, 0x1, 'client1\x00', 0x7, "7d3d0275d891dcc8", "825a1f21e8a17e9a69968ef506968bdc6fba052d11a3215135eeecd4f23b7f00", 0x7, 0x8001})
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)

09:38:54 executing program 2:
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff)

09:38:54 executing program 3:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x212403)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x41938000, 0x280)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f0000000040))

09:38:54 executing program 0:
syz_clone3(0x0, 0x0)

09:38:54 executing program 4:
brk(0x0)

09:38:54 executing program 1:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2a083)
getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000280)=""/199, &(0x7f0000000140)=0xc7)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000040)={0x2, 0x1, 'client1\x00', 0x7, "7d3d0275d891dcc8", "825a1f21e8a17e9a69968ef506968bdc6fba052d11a3215135eeecd4f23b7f00", 0x7, 0x8001})

09:38:54 executing program 5:
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x4903, 0x0)

09:38:54 executing program 0:
syz_clone3(0x0, 0x0)

09:38:54 executing program 2:
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff)

09:38:54 executing program 3:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x212403)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x41938000, 0x280)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f0000000040))

09:38:54 executing program 4:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x42c482)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000000)={0x3, 0x7, 0x1, 'queue1\x00', 0xcb04})
r2 = pidfd_getfd(r1, r1, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/custom0\x00', 0x0, 0x0)
pidfd_send_signal(r2, 0x3a, &(0x7f00000001c0)={0x2f, 0x3ff, 0xffffffff}, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x20000090)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r2, 0xc0bc5310, &(0x7f0000000100))

09:38:54 executing program 5:
openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x4903, 0x0)

09:38:54 executing program 1:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2a083)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000040)={0x2, 0x1, 'client1\x00', 0x7, "7d3d0275d891dcc8", "825a1f21e8a17e9a69968ef506968bdc6fba052d11a3215135eeecd4f23b7f00", 0x7, 0x8001})

09:38:54 executing program 0:
syz_clone3(0x0, 0x0)

09:38:54 executing program 3:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x212403)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x41938000, 0x280)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f0000000040))

09:38:54 executing program 4:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2a083)
getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000280)=""/199, &(0x7f0000000140)=0xc7)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000040)={0x2, 0x1, 'client1\x00', 0x7, "7d3d0275d891dcc8", "825a1f21e8a17e9a69968ef506968bdc6fba052d11a3215135eeecd4f23b7f00", 0x7, 0x8001})

09:38:54 executing program 2:
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff)

09:38:54 executing program 1:
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000040)={0x2, 0x1, 'client1\x00', 0x7, "7d3d0275d891dcc8", "825a1f21e8a17e9a69968ef506968bdc6fba052d11a3215135eeecd4f23b7f00", 0x7, 0x8001})

09:38:54 executing program 5:
openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x4903, 0x0)

09:38:54 executing program 0:
syz_clone3(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x1d00, 0x0, 0x0}, 0x58)

09:38:54 executing program 3:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x212403)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x41938000, 0x280)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f0000000040))

09:38:54 executing program 4:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0xffffff48)
pkey_alloc(0x0, 0x0)
r0 = pkey_alloc(0x0, 0x3)
pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r0)

09:38:54 executing program 2:
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff)

09:38:54 executing program 1:
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000040)={0x2, 0x1, 'client1\x00', 0x7, "7d3d0275d891dcc8", "825a1f21e8a17e9a69968ef506968bdc6fba052d11a3215135eeecd4f23b7f00", 0x7, 0x8001})

09:38:54 executing program 5:
openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x4903, 0x0)

09:38:54 executing program 0:
r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=0xffffffffffffffff, 0x3)
pkey_mprotect(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1000007, 0xffffffffffffffff)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x10)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
pidfd_send_signal(r2, 0x38, &(0x7f0000000280)={0x6, 0x8, 0x7f}, 0x0)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80500, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r0, r1, 0x4, r4}, 0x10)
pkey_alloc(0x0, 0x2)

09:38:54 executing program 3:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x212403)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x41938000, 0x280)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f0000000040))

09:38:54 executing program 4:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0xffffff48)
pkey_alloc(0x0, 0x0)
r0 = pkey_alloc(0x0, 0x3)
pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r0)

09:38:54 executing program 0:
r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=0xffffffffffffffff, 0x3)
pkey_mprotect(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1000007, 0xffffffffffffffff)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x10)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
pidfd_send_signal(r2, 0x38, &(0x7f0000000280)={0x6, 0x8, 0x7f}, 0x0)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80500, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r0, r1, 0x4, r4}, 0x10)
pkey_alloc(0x0, 0x2)

09:38:54 executing program 2:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x212403)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x41938000, 0x280)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f0000000040))

09:38:54 executing program 1:
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000040)={0x2, 0x1, 'client1\x00', 0x7, "7d3d0275d891dcc8", "825a1f21e8a17e9a69968ef506968bdc6fba052d11a3215135eeecd4f23b7f00", 0x7, 0x8001})

09:38:54 executing program 5:
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

09:38:55 executing program 4:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0xffffff48)
pkey_alloc(0x0, 0x0)
r0 = pkey_alloc(0x0, 0x3)
pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r0)

09:38:55 executing program 3:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x212403)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, &(0x7f0000000040))

09:38:55 executing program 2:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x212403)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x41938000, 0x280)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f0000000040))

09:38:55 executing program 5:
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

09:38:55 executing program 0:
r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=0xffffffffffffffff, 0x3)
pkey_mprotect(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1000007, 0xffffffffffffffff)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x10)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
pidfd_send_signal(r2, 0x38, &(0x7f0000000280)={0x6, 0x8, 0x7f}, 0x0)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80500, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r0, r1, 0x4, r4}, 0x10)
pkey_alloc(0x0, 0x2)

09:38:55 executing program 3:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x212403)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, &(0x7f0000000040))

09:38:55 executing program 1:
r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x2a083)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000040)={0x2, 0x1, 'client1\x00', 0x7, "7d3d0275d891dcc8", "825a1f21e8a17e9a69968ef506968bdc6fba052d11a3215135eeecd4f23b7f00", 0x7, 0x8001})

09:38:55 executing program 4:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0xffffff48)
pkey_alloc(0x0, 0x0)
pkey_alloc(0x0, 0x3)

09:38:55 executing program 5:
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

09:38:55 executing program 2:
r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=0xffffffffffffffff, 0x3)
pkey_mprotect(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1000007, 0xffffffffffffffff)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x10)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
pidfd_send_signal(r2, 0x38, &(0x7f0000000280)={0x6, 0x8, 0x7f}, 0x0)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80500, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r0, r1, 0x4, r4}, 0x10)
pkey_alloc(0x0, 0x2)

09:38:55 executing program 1:
r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x2a083)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000040)={0x2, 0x1, 'client1\x00', 0x7, "7d3d0275d891dcc8", "825a1f21e8a17e9a69968ef506968bdc6fba052d11a3215135eeecd4f23b7f00", 0x7, 0x8001})

09:38:55 executing program 0:
r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=0xffffffffffffffff, 0x3)
pkey_mprotect(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1000007, 0xffffffffffffffff)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x10)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
pidfd_send_signal(r2, 0x38, &(0x7f0000000280)={0x6, 0x8, 0x7f}, 0x0)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80500, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r0, r1, 0x4, r4}, 0x10)

09:38:55 executing program 3:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x212403)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, &(0x7f0000000040))

09:38:55 executing program 4:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0xffffff48)
pkey_alloc(0x0, 0x3)

09:38:55 executing program 2:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x3}, 0x8)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000080)={0x40, <r0=>0x0}, 0x8)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0)=r0, 0x4)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000100)={0x1, <r1=>0x0}, 0x8)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140)=r1, 0x4)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff)

09:38:55 executing program 5:
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000000c0)={0x3fb15b1e, <r0=>0x0}, 0x8)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r0, 0x4)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x3d, &(0x7f0000000200)={0x0}}, 0x20000010)
r2 = socket$caif_seqpacket(0x25, 0x5, 0x3)
setsockopt$CAIFSO_LINK_SELECT(r2, 0x116, 0x7f, &(0x7f0000000080)=0x4, 0x4)
bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r1, 0x4)
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff)

09:38:55 executing program 0:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=0xffffffffffffffff, 0x3)
pkey_mprotect(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1000007, 0xffffffffffffffff)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x10)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
pidfd_send_signal(r1, 0x38, &(0x7f0000000280)={0x6, 0x8, 0x7f}, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80500, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10)

09:38:55 executing program 1:
r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x2a083)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000040)={0x2, 0x1, 'client1\x00', 0x7, "7d3d0275d891dcc8", "825a1f21e8a17e9a69968ef506968bdc6fba052d11a3215135eeecd4f23b7f00", 0x7, 0x8001})

09:38:55 executing program 4:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0xffffff48)
pkey_alloc(0x0, 0x3)

09:38:55 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0)
ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000140)=""/251)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
mq_unlink(&(0x7f00000000c0)='-&!{.[:]\xd3!\x00\x97h<:\xa7n\xfe\xe6+\xff^\a\x05\x10\xcf\xa0j\xe7\xe8\xbf\xa5\xf9\x93\x84\xcaY\xa5`\xff\x81*\xa4\x93\x01\xb4\xbf\xc1\xddP\xd4\xd8t&\x84\xab\xea\xba\xd9\xb1\x1f\xf6fY\xed\x80,\xac\x8e\xf9\xfe}\xae\xa5k\xa8\xb0 rJQ\vY:\xde.z')
setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000240)="635795e96107599ad1414ca992dfb2c7a56c9fc1defecaeeb297677efca4a83069c9fc194926c3ac2e597936c5e200d5dfabb141fdafc99510653366a4be4a95886cb8a8074b78ddc21643ede8dfd307669a5a36d1431822", 0x58)
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000003, 0xffffffffffffffff)

09:38:55 executing program 2:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8)
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff)

09:38:55 executing program 3:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x212403)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x41938000, 0x280)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000040))

09:38:55 executing program 1:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000040)={0x2, 0x1, 'client1\x00', 0x7, "7d3d0275d891dcc8", "825a1f21e8a17e9a69968ef506968bdc6fba052d11a3215135eeecd4f23b7f00", 0x7, 0x8001})

09:38:55 executing program 2:
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0)={0xffffffffffffffff}, 0x4)
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x400800, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x19, 0x4, 0x4aea, 0x0, 0x712, 0x1, 0x5f, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x4f}, [@generic={0x17, 0x3, 0x1, 0x9, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f00000000c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000100)={0x1, 0xa, 0xff, 0x237}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000200)=[r1, r2]}, 0x80)

09:38:55 executing program 4:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0xffffff48)
pkey_alloc(0x0, 0x3)

09:38:55 executing program 5:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x4)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0xa6483)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)

09:38:55 executing program 0:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=0xffffffffffffffff, 0x3)
pkey_mprotect(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1000007, 0xffffffffffffffff)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x10)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
pidfd_send_signal(r1, 0x38, &(0x7f0000000280)={0x6, 0x8, 0x7f}, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80500, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10)

09:38:55 executing program 3:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x212403)
r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x41938000, 0x280)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000040))

09:38:55 executing program 1:
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000040)={0x2, 0x1, 'client1\x00', 0x7, "7d3d0275d891dcc8", "825a1f21e8a17e9a69968ef506968bdc6fba052d11a3215135eeecd4f23b7f00", 0x7, 0x8001})

09:38:55 executing program 4:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
pkey_alloc(0x0, 0x0)
pkey_alloc(0x0, 0x3)

09:38:55 executing program 0:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=0xffffffffffffffff, 0x3)
pkey_mprotect(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1000007, 0xffffffffffffffff)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x10)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
pidfd_send_signal(r1, 0x38, &(0x7f0000000280)={0x6, 0x8, 0x7f}, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10)

09:38:55 executing program 2:
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0)={0xffffffffffffffff}, 0x4)
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x400800, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x19, 0x4, 0x4aea, 0x0, 0x712, 0x1, 0x5f, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x4f}, [@generic={0x17, 0x3, 0x1, 0x9, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f00000000c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000100)={0x1, 0xa, 0xff, 0x237}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000200)=[r1, r2]}, 0x80)

09:38:55 executing program 5:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=0xffffffffffffffff, 0x3)
pkey_mprotect(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1000007, 0xffffffffffffffff)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x10)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
pidfd_send_signal(r1, 0x38, &(0x7f0000000280)={0x6, 0x8, 0x7f}, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80500, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10)

09:38:55 executing program 3:
r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x41938000, 0x280)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000040))

09:38:55 executing program 0:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=0xffffffffffffffff, 0x3)
pkey_mprotect(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1000007, 0xffffffffffffffff)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x10)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10)

09:38:55 executing program 4:
pkey_alloc(0x0, 0x0)
pkey_alloc(0x0, 0x3)

09:38:55 executing program 1:
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000040)={0x2, 0x1, 'client1\x00', 0x7, "7d3d0275d891dcc8", "825a1f21e8a17e9a69968ef506968bdc6fba052d11a3215135eeecd4f23b7f00", 0x7, 0x8001})

09:38:55 executing program 2:
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0)={0xffffffffffffffff}, 0x4)
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x400800, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x19, 0x4, 0x4aea, 0x0, 0x712, 0x1, 0x5f, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x4f}, [@generic={0x17, 0x3, 0x1, 0x9, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f00000000c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000100)={0x1, 0xa, 0xff, 0x237}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000200)=[r1, r2]}, 0x80)

09:38:55 executing program 5:
syz_clone3(&(0x7f0000001280)={0x8000, 0x0, 0x0, 0x0, {0x70}, 0x0, 0x0, 0x0, 0x0}, 0x58)

09:38:55 executing program 3:
r0 = syz_open_dev$sndctrl(0x0, 0x41938000, 0x280)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000040))

09:38:55 executing program 1:
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000040)={0x2, 0x1, 'client1\x00', 0x7, "7d3d0275d891dcc8", "825a1f21e8a17e9a69968ef506968bdc6fba052d11a3215135eeecd4f23b7f00", 0x7, 0x8001})

09:38:56 executing program 2:
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0)={0xffffffffffffffff}, 0x4)
bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8)
openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x400800, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x19, 0x4, 0x4aea, 0x0, 0x712, 0x1, 0x5f, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4}, 0x48)

09:38:56 executing program 4:
pkey_alloc(0x0, 0x0)
pkey_alloc(0x0, 0x0)

09:38:56 executing program 5:
syz_clone3(&(0x7f0000001280)={0x8000, 0x0, 0x0, 0x0, {0x70}, 0x0, 0x0, 0x0, 0x0}, 0x58)

09:38:56 executing program 0:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=0xffffffffffffffff, 0x3)
pkey_mprotect(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1000007, 0xffffffffffffffff)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x10)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10)

09:38:56 executing program 3:
r0 = syz_open_dev$sndctrl(0x0, 0x41938000, 0x280)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000040))

09:38:56 executing program 2:
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0)={0xffffffffffffffff}, 0x4)
bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8)
openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x400800, 0x0)

09:38:56 executing program 4:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff)
pkey_free(0xffffffffffffffff)

09:38:56 executing program 1:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, 0x0)

09:38:56 executing program 5:
syz_clone3(&(0x7f0000001280)={0x8000, 0x0, 0x0, 0x0, {0x70}, 0x0, 0x0, 0x0, 0x0}, 0x58)

09:38:56 executing program 0:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=0xffffffffffffffff, 0x3)
pkey_mprotect(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1000007, 0xffffffffffffffff)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x10)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10)

09:38:56 executing program 3:
r0 = syz_open_dev$sndctrl(0x0, 0x41938000, 0x280)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000040))

09:38:56 executing program 2:
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0)={0xffffffffffffffff}, 0x4)
bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8)

09:38:56 executing program 4:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=0xffffffffffffffff, 0x3)
pkey_mprotect(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1000007, 0xffffffffffffffff)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x10)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10)

09:38:56 executing program 5:
syz_clone3(0x0, 0x0)

09:38:56 executing program 0:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=0xffffffffffffffff, 0x3)
pkey_mprotect(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1000007, 0xffffffffffffffff)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x10)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10)

09:38:56 executing program 1:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, 0x0)

09:38:56 executing program 3:
r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x280)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000040))

09:38:56 executing program 2:
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0)={0xffffffffffffffff}, 0x4)
bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)

09:38:56 executing program 5:
syz_clone3(0x0, 0x0)

09:38:56 executing program 4:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=0xffffffffffffffff, 0x3)
pkey_mprotect(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1000007, 0xffffffffffffffff)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x10)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10)

09:38:56 executing program 0:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=0xffffffffffffffff, 0x3)
pkey_mprotect(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1000007, 0xffffffffffffffff)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x10)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10)

09:38:56 executing program 2:
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0)={0xffffffffffffffff}, 0x4)

09:38:56 executing program 3:
r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000040))

09:38:56 executing program 1:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, 0x0)

09:38:56 executing program 5:
syz_clone3(0x0, 0x0)

09:38:56 executing program 4:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=0xffffffffffffffff, 0x3)
pkey_mprotect(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1000007, 0xffffffffffffffff)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x10)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10)

09:38:56 executing program 3:
syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, &(0x7f0000000040))

09:38:56 executing program 2:
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)

09:38:56 executing program 0:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=0xffffffffffffffff, 0x3)
pkey_mprotect(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1000007, 0xffffffffffffffff)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10)

09:38:56 executing program 1:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000040)={0x0, 0x1, 'client1\x00', 0x7, "7d3d0275d891dcc8", "825a1f21e8a17e9a69968ef506968bdc6fba052d11a3215135eeecd4f23b7f00", 0x7, 0x8001})

09:38:56 executing program 5:
syz_clone3(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, {0x70}, 0x0, 0x0, 0x0, 0x0}, 0x58)

09:38:56 executing program 4:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=0xffffffffffffffff, 0x3)
pkey_mprotect(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1000007, 0xffffffffffffffff)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x10)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10)

09:38:56 executing program 2:
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)

09:38:56 executing program 0:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=0xffffffffffffffff, 0x3)
pkey_mprotect(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1000007, 0xffffffffffffffff)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10)

09:38:56 executing program 3:
syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, &(0x7f0000000040))

09:38:56 executing program 1:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000040)={0x0, 0x0, 'client1\x00', 0x7, "7d3d0275d891dcc8", "825a1f21e8a17e9a69968ef506968bdc6fba052d11a3215135eeecd4f23b7f00", 0x7, 0x8001})

09:38:56 executing program 2:
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)

09:38:56 executing program 5:
syz_clone3(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

09:38:56 executing program 4:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=0xffffffffffffffff, 0x3)
pkey_mprotect(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1000007, 0xffffffffffffffff)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x10)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10)

09:38:56 executing program 0:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=0xffffffffffffffff, 0x3)
pkey_mprotect(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1000007, 0xffffffffffffffff)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10)

09:38:56 executing program 3:
syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, &(0x7f0000000040))

09:38:56 executing program 1:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000040)={0x0, 0x0, 'client1\x00', 0x0, "7d3d0275d891dcc8", "825a1f21e8a17e9a69968ef506968bdc6fba052d11a3215135eeecd4f23b7f00", 0x7, 0x8001})

09:38:57 executing program 0:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=0xffffffffffffffff, 0x3)
pkey_mprotect(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1000007, 0xffffffffffffffff)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x10)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10)

09:38:57 executing program 3:
r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, 0x0)

09:38:57 executing program 5:
syz_clone3(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

09:38:57 executing program 2:
syz_clone3(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

09:38:57 executing program 1:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000040)={0x0, 0x0, 'client1\x00', 0x0, "7d3d0275d891dcc8", "825a1f21e8a17e9a69968ef506968bdc6fba052d11a3215135eeecd4f23b7f00", 0x0, 0x8001})

09:38:57 executing program 4:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=0xffffffffffffffff, 0x3)
pkey_mprotect(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1000007, 0xffffffffffffffff)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x10)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10)

09:38:57 executing program 2:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=0xffffffffffffffff, 0x3)
pkey_mprotect(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1000007, 0xffffffffffffffff)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x10)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10)

09:38:57 executing program 0:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=0xffffffffffffffff, 0x3)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x10)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10)

09:38:57 executing program 3:
r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, 0x0)

09:38:57 executing program 5:
syz_clone3(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

09:38:57 executing program 4:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=0xffffffffffffffff, 0x3)
pkey_mprotect(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1000007, 0xffffffffffffffff)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10)

09:38:57 executing program 1:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000040)={0x0, 0x0, 'client1\x00', 0x0, "7d3d0275d891dcc8", "825a1f21e8a17e9a69968ef506968bdc6fba052d11a3215135eeecd4f23b7f00"})

09:38:57 executing program 3:
r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, 0x0)

09:38:57 executing program 4:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=0xffffffffffffffff, 0x3)
pkey_mprotect(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1000007, 0xffffffffffffffff)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10)

09:38:57 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, 0x0)

09:38:57 executing program 2:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=0xffffffffffffffff, 0x3)
pkey_mprotect(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1000007, 0xffffffffffffffff)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10)

09:38:57 executing program 3:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=0xffffffffffffffff, 0x3)
pkey_mprotect(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1000007, 0xffffffffffffffff)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x10)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10)

09:38:57 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x10)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10)

09:38:57 executing program 4:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=0xffffffffffffffff, 0x3)
pkey_mprotect(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1000007, 0xffffffffffffffff)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10)

09:38:57 executing program 1:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=0xffffffffffffffff, 0x3)
pkey_mprotect(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1000007, 0xffffffffffffffff)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x10)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10)

09:38:57 executing program 0:
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10)

09:38:57 executing program 2:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x1a5503)
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000040)={0x7, 0x2, 0x8001, 0x0, 0x5})

09:38:57 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, 0x0)

09:38:57 executing program 3:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=0xffffffffffffffff, 0x3)
pkey_mprotect(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1000007, 0xffffffffffffffff)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x10)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10)

09:38:57 executing program 4:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=0xffffffffffffffff, 0x3)
pkey_mprotect(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1000007, 0xffffffffffffffff)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x10)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10)

09:38:57 executing program 1:
syz_clone3(&(0x7f0000001280)={0x8000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

09:38:57 executing program 0:
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10)

09:38:57 executing program 3:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=0xffffffffffffffff, 0x3)
pkey_mprotect(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1000007, 0xffffffffffffffff)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x10)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10)

09:38:57 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, 0x0)

09:38:58 executing program 2:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x10401, 0x0)
read$FUSE(r0, &(0x7f0000000680)={0x2020, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2020)
syz_clone3(&(0x7f0000002700)={0x24000100, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500), {0x33}, &(0x7f0000000540)=""/221, 0xdd, &(0x7f0000000640)=""/28, &(0x7f00000026c0)=[0xffffffffffffffff, 0x0, r1], 0x3, {r0}}, 0x58)
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)=0x7fffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0xa6483)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r2)
sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x4c, r3, 0x100, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2f}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008081}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, r3, 0x20, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x734}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1f}, @L2TP_ATTR_MRU={0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000010}, 0x10)

09:38:58 executing program 4:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=0xffffffffffffffff, 0x3)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x10)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10)

09:38:58 executing program 0:
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10)

09:38:58 executing program 5:
ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, 0x0)

09:38:58 executing program 1:
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x58)

09:38:58 executing program 3:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=0xffffffffffffffff, 0x3)
pkey_mprotect(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1000007, 0xffffffffffffffff)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x10)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10)

09:38:58 executing program 4:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x10)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10)

09:38:58 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0, 0x0, 0x10}, 0x10)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10)

09:38:58 executing program 3:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=0xffffffffffffffff, 0x3)
pkey_mprotect(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1000007, 0xffffffffffffffff)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10)

09:38:58 executing program 5:
ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, 0x0)

09:38:58 executing program 2:
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {0x9}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x58)

09:38:58 executing program 4:
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10)

09:38:58 executing program 3:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=0xffffffffffffffff, 0x3)
pkey_mprotect(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1000007, 0xffffffffffffffff)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10)

09:38:58 executing program 5:
ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, 0x0)

09:38:58 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0, 0x0, 0x10}, 0x10)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10)

09:38:58 executing program 4:
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10)

09:38:58 executing program 1:
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {0x900}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x58)

09:38:58 executing program 3:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=0xffffffffffffffff, 0x3)
pkey_mprotect(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1000007, 0xffffffffffffffff)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10)

09:38:58 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0, 0x0, 0x10}, 0x10)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10)

09:38:58 executing program 4:
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10)

09:38:58 executing program 5:
r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, 0x0)

09:38:58 executing program 1:
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {0x900}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x58)

09:38:58 executing program 2:
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x58)

09:38:58 executing program 3:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=0xffffffffffffffff, 0x3)
pkey_mprotect(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1000007, 0xffffffffffffffff)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x10)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10)

09:38:58 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00'}, 0x10)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10)

09:38:58 executing program 4:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0, 0x0, 0x10}, 0x10)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10)

09:38:58 executing program 5:
r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, 0x0)

09:38:58 executing program 1:
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {0x900}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x58)

09:38:58 executing program 3:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=0xffffffffffffffff, 0x3)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x10)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10)

09:38:58 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00'}, 0x10)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)

09:38:58 executing program 4:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0, 0x0, 0x10}, 0x10)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10)

09:38:58 executing program 5:
r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, 0x0)

09:38:58 executing program 1:
syz_clone3(0x0, 0x0)

09:38:58 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00'}, 0x10)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)

09:38:58 executing program 2:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0, 0x0, 0x10}, 0x10)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10)

09:38:58 executing program 3:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x10)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10)

09:38:58 executing program 4:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0, 0x0, 0x10}, 0x10)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10)

09:38:58 executing program 5:
syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, 0x0)

09:38:58 executing program 1:
syz_clone3(0x0, 0x0)

09:38:58 executing program 4:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00'}, 0x10)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10)

09:38:59 executing program 1:
syz_clone3(0x0, 0x0)

09:38:59 executing program 3:
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10)

09:38:59 executing program 5:
syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, 0x0)

09:38:59 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00'}, 0x10)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)

09:38:59 executing program 2:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0xd799)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x9, 0xffffffffffffffff)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0xffffffff, 0x400)
ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f00000000c0)=""/95)

09:38:59 executing program 4:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00'}, 0x10)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)

09:38:59 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00'}, 0x10)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={0x0, 0x0, 0x10}, 0x10)

09:38:59 executing program 5:
syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, 0x0)

09:38:59 executing program 3:
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10)

09:38:59 executing program 1:
syz_clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {0x900}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x58)

09:38:59 executing program 2:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0xa6483)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0xcc843, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000100)="ed20f2eb5459418af5814f280946c9a78009fe3c7697f2ca38988a1dd9aef2d26441c92d03a6dc255193f6b8d3b494ee1979e3499546a1128b78c13ee6eb09fd8e69ec582ab970aae0abf60aac0306e5576b6ffd4d225e7e2776f433b7c073eb7922cde2f9a92a2210cbf6cb092cbbab803d4c6d4502850a2264051559f14f3c7d7f7f782e3057f8b55a78f15af2a5454e97f2ec432d09cc01cc427bb020fb04d71ceb399dfc4c6d4c76bab9a4416e8658d0d85afaa955a0fb8d572a3b7561a3b1c9881b2523a8d1c2", 0xc9, <r1=>0x0})
ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x9, 0x7f, 0x8, 0x81, 0x3f, 0x74, 0x2, 0x4, "812ed7893a3ad74523137c00be2521b2582048429132712bebacaabd77623c7e"})
ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000580)=0x80000001)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000480)={r1})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000240)={0x0, 0x60, &(0x7f0000000540)={0x0}}, 0x20000090)
ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f00000003c0)=""/136)
r4 = getuid()
getresgid(&(0x7f0000000200)=<r5=>0x0, &(0x7f0000000240), &(0x7f0000000280))
r6 = syz_open_dev$sndctrl(&(0x7f00000004c0), 0x6, 0x60000)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r6, 0x40405515, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x5, 'syz0\x00', 0xfffffffa})
bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r0}, 0x8)
write$FUSE_CREATE_OPEN(r0, &(0x7f00000002c0)={0xa0, 0x0, 0x0, {{0x2, 0x0, 0x81, 0x5, 0x400, 0x7, {0x1, 0x0, 0x1ff, 0x80000001, 0x1, 0x180, 0x4, 0x401, 0x1, 0x5000, 0x2000, r4, r5, 0x800, 0x2b1}}, {0x0, 0x10}}}, 0xa0)
getuid()

09:38:59 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00'}, 0x10)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={0x0, 0x0, 0x10}, 0x10)

09:38:59 executing program 5:
syz_clone3(&(0x7f0000000180)={0x4802000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x58)

09:38:59 executing program 4:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00'}, 0x10)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)

09:38:59 executing program 3:
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10)

09:38:59 executing program 1:
syz_clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x58)

09:38:59 executing program 3:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0, 0x0, 0x10}, 0x10)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10)

09:38:59 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x96803)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000100)={0x9, 0x4d, 0x0, 'queue1\x00', 0x2})
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
setsockopt$inet_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000400)=0x4000006, 0x4)
setsockopt$inet_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000440)="25aca37d8088b1c4c57ae75f", 0xc)
r4 = syz_open_dev$evdev(&(0x7f00000003c0), 0x38, 0x402200)
ioctl$EVIOCSABS0(r4, 0x401845c0, &(0x7f0000000000)={0x93ef, 0x8001, 0x800, 0x3, 0x401, 0x4})
r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x80800, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/228, 0xe4, 0x0, &(0x7f00000002c0)=""/114, 0x72}, &(0x7f0000000380)=0x40)

09:38:59 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00'}, 0x10)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={0x0, 0x0, 0x10}, 0x10)

09:38:59 executing program 4:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00'}, 0x10)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)

09:38:59 executing program 5:
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0xa6483)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0xfffffffffffffd08, 0xfa00, {{0xa, 0x4e1d, 0x5, @mcast1, 0x3}, {0xa, 0x4c24, 0x7fff, @rand_addr=' \x01\x00', 0x2}, r1, 0x800}}, 0x48)
bpf$LINK_DETACH(0x22, &(0x7f0000000000), 0x4)

09:38:59 executing program 3:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0, 0x0, 0x10}, 0x10)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10)

09:38:59 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00'}, 0x10)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00'}, 0x10)

09:38:59 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x96803)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000100)={0x9, 0x4d, 0x0, 'queue1\x00', 0x2})
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
setsockopt$inet_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000400)=0x4000006, 0x4)
setsockopt$inet_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000440)="25aca37d8088b1c4c57ae75f", 0xc)
r4 = syz_open_dev$evdev(&(0x7f00000003c0), 0x38, 0x402200)
ioctl$EVIOCSABS0(r4, 0x401845c0, &(0x7f0000000000)={0x93ef, 0x8001, 0x800, 0x3, 0x401, 0x4})
r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x80800, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/228, 0xe4, 0x0, &(0x7f00000002c0)=""/114, 0x72}, &(0x7f0000000380)=0x40)

09:38:59 executing program 5:
syz_clone3(&(0x7f0000000180)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x58)

09:38:59 executing program 1:
syz_clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x58)

09:38:59 executing program 4:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00'}, 0x10)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={0x0, 0x0, 0x10}, 0x10)

09:38:59 executing program 3:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0, 0x0, 0x10}, 0x10)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10)

09:38:59 executing program 0:
syz_clone3(&(0x7f0000000180)={0x4800700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x58)

09:38:59 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x96803)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000100)={0x9, 0x4d, 0x0, 'queue1\x00', 0x2})
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
setsockopt$inet_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000400)=0x4000006, 0x4)
setsockopt$inet_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000440)="25aca37d8088b1c4c57ae75f", 0xc)
r4 = syz_open_dev$evdev(&(0x7f00000003c0), 0x38, 0x402200)
ioctl$EVIOCSABS0(r4, 0x401845c0, &(0x7f0000000000)={0x93ef, 0x8001, 0x800, 0x3, 0x401, 0x4})
r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x80800, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/228, 0xe4, 0x0, &(0x7f00000002c0)=""/114, 0x72}, &(0x7f0000000380)=0x40)

09:38:59 executing program 4:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00'}, 0x10)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={0x0, 0x0, 0x10}, 0x10)

09:38:59 executing program 3:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00'}, 0x10)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10)

09:38:59 executing program 1:
syz_clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x58)

09:38:59 executing program 5:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
mq_unlink(&(0x7f0000000180)='/dev/null\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000040)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x1, "a0337d", "c788448a2436cbf870dfdde7ebe8b679e0923cd2216a698d99b98812f43d59d624b5df9ae81e124e72447afb054d8fb97ca8faa24e80500d07bdbae9cb404bcdc615eb706ff1e3cc0adc28a8c1efe0ae2fe8b9422f546dfb054f715d11cbbee74693cf80e314b1eca1e6b92ce2ed424efa3a26a0e446298546cf4996cace969ed04519f8e44459b74067280b7b14a0d0ac37599e6470b3f70669a95d3c0285c9a7a2acf7ac864e3facad04d43962a0eeade70b8c9af9c0f75d72c55768ba0f720b0f0a307adb85f172c05e4a6b27bcf882bfa12bb28adb7b5ad2e56a9d9bc64768c2fd97a34f14e20cad8b07904523e5a74f9563ce98c067d1d90c8876cd6415"}}, 0x110)

09:38:59 executing program 4:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00'}, 0x10)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={0x0, 0x0, 0x10}, 0x10)

09:38:59 executing program 3:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00'}, 0x10)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)

09:38:59 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x96803)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000100)={0x9, 0x4d, 0x0, 'queue1\x00', 0x2})
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
setsockopt$inet_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000400)=0x4000006, 0x4)
setsockopt$inet_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000440)="25aca37d8088b1c4c57ae75f", 0xc)
r4 = syz_open_dev$evdev(&(0x7f00000003c0), 0x38, 0x402200)
ioctl$EVIOCSABS0(r4, 0x401845c0, &(0x7f0000000000)={0x93ef, 0x8001, 0x800, 0x3, 0x401, 0x4})
openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x80800, 0x0)

09:38:59 executing program 1:
syz_clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {0x900}, 0x0, 0x0, 0x0, 0x0}, 0x58)

09:38:59 executing program 4:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00'}, 0x10)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00'}, 0x10)

09:38:59 executing program 0:
syz_clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x58)

09:38:59 executing program 5:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
mq_unlink(&(0x7f0000000180)='/dev/null\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000040)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x1, "a0337d", "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"}}, 0x110)

09:38:59 executing program 3:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00'}, 0x10)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)

09:39:00 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x96803)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000100)={0x9, 0x4d, 0x0, 'queue1\x00', 0x2})
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
setsockopt$inet_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000400)=0x4000006, 0x4)
setsockopt$inet_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000440)="25aca37d8088b1c4c57ae75f", 0xc)
r4 = syz_open_dev$evdev(&(0x7f00000003c0), 0x38, 0x402200)
ioctl$EVIOCSABS0(r4, 0x401845c0, &(0x7f0000000000)={0x93ef, 0x8001, 0x800, 0x3, 0x401, 0x4})

09:39:00 executing program 1:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x96803)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000100)={0x9, 0x4d, 0x0, 'queue1\x00', 0x2})
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
setsockopt$inet_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000400)=0x4000006, 0x4)
setsockopt$inet_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000440)="25aca37d8088b1c4c57ae75f", 0xc)
r4 = syz_open_dev$evdev(&(0x7f00000003c0), 0x38, 0x402200)
ioctl$EVIOCSABS0(r4, 0x401845c0, &(0x7f0000000000)={0x93ef, 0x8001, 0x800, 0x3, 0x401, 0x4})
openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x80800, 0x0)

09:39:00 executing program 4:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x96803)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000100)={0x9, 0x4d, 0x0, 'queue1\x00', 0x2})
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
setsockopt$inet_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000400)=0x4000006, 0x4)
setsockopt$inet_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000440)="25aca37d8088b1c4c57ae75f", 0xc)
r4 = syz_open_dev$evdev(&(0x7f00000003c0), 0x38, 0x402200)
ioctl$EVIOCSABS0(r4, 0x401845c0, &(0x7f0000000000)={0x93ef, 0x8001, 0x800, 0x3, 0x401, 0x4})
openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x80800, 0x0)

09:39:00 executing program 5:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
mq_unlink(&(0x7f0000000180)='/dev/null\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000040)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x1, "a0337d", "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"}}, 0x110)

09:39:00 executing program 3:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00'}, 0x10)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)

09:39:00 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x96803)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000100)={0x9, 0x4d, 0x0, 'queue1\x00', 0x2})
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
setsockopt$inet_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000400)=0x4000006, 0x4)
setsockopt$inet_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000440)="25aca37d8088b1c4c57ae75f", 0xc)
syz_open_dev$evdev(&(0x7f00000003c0), 0x38, 0x402200)

09:39:00 executing program 1:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00'}, 0x10)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)

09:39:00 executing program 0:
syz_clone3(&(0x7f0000002480)={0x1000200, &(0x7f0000001280), &(0x7f00000012c0)=<r0=>0x0, &(0x7f0000001300), {0x10}, &(0x7f0000001340)=""/4096, 0x1000, &(0x7f0000002340)=""/215, &(0x7f0000002440)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x5}, 0x58)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002800)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002840)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r3 = syz_clone3(&(0x7f00000026c0)={0x1000, &(0x7f0000002500), &(0x7f0000002540), &(0x7f0000002580), {0x2e}, &(0x7f00000025c0)=""/117, 0x75, &(0x7f0000002640)=""/7, &(0x7f0000002680)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x8, {r2}}, 0x58)
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
openat$cgroup_subtree(r1, &(0x7f0000003a40), 0x2, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
sendmsg$802154_dgram(r4, &(0x7f0000003900)={&(0x7f0000002880)={0x24, @short={0x2, 0x3, 0xaaa3}}, 0x14, &(0x7f00000038c0)={&(0x7f00000028c0)="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", 0x1000}, 0x1, 0x0, 0x0, 0x24008014}, 0x4000)
syz_clone3(&(0x7f0000003dc0)={0x20000000, &(0x7f0000003ac0), &(0x7f0000003b00), &(0x7f0000003b40)=<r5=>0x0, {0x2e}, &(0x7f0000003b80)=""/221, 0xdd, &(0x7f0000003c80)=""/193, &(0x7f0000003d80)=[r0], 0x1, {r2}}, 0x58)
syz_clone3(&(0x7f0000002780)={0x90000100, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x21}, &(0x7f0000000200)=""/103, 0x67, &(0x7f0000000280)=""/4096, &(0x7f0000002740)=[0xffffffffffffffff, r5, 0xffffffffffffffff, r0, r3], 0x5}, 0x58)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4860000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='2\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002dbd7000fedbdf250600000014001f00ff020000000000000000000000000001"], 0x28}, 0x1, 0x0, 0x0, 0x20000841}, 0x8000)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0xa6483)
sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000003a00)={&(0x7f0000003940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003980)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24048000}, 0x8001)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000003a80), 0x2, 0x0)

09:39:00 executing program 4:
syz_clone3(&(0x7f0000002480)={0x1000200, &(0x7f0000001280), &(0x7f00000012c0)=<r0=>0x0, &(0x7f0000001300), {0x10}, &(0x7f0000001340)=""/4096, 0x1000, &(0x7f0000002340)=""/215, &(0x7f0000002440)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x5}, 0x58)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002800)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002840)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r3 = syz_clone3(&(0x7f00000026c0)={0x1000, &(0x7f0000002500), &(0x7f0000002540), &(0x7f0000002580), {0x2e}, &(0x7f00000025c0)=""/117, 0x75, &(0x7f0000002640)=""/7, &(0x7f0000002680)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x8, {r2}}, 0x58)
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
openat$cgroup_subtree(r1, &(0x7f0000003a40), 0x2, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
sendmsg$802154_dgram(r4, &(0x7f0000003900)={&(0x7f0000002880)={0x24, @short={0x2, 0x3, 0xaaa3}}, 0x14, &(0x7f00000038c0)={&(0x7f00000028c0)="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", 0x1000}, 0x1, 0x0, 0x0, 0x24008014}, 0x4000)
syz_clone3(&(0x7f0000003dc0)={0x20000000, &(0x7f0000003ac0), &(0x7f0000003b00), &(0x7f0000003b40)=<r5=>0x0, {0x2e}, &(0x7f0000003b80)=""/221, 0xdd, &(0x7f0000003c80)=""/193, &(0x7f0000003d80)=[r0], 0x1, {r2}}, 0x58)
syz_clone3(&(0x7f0000002780)={0x90000100, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x21}, &(0x7f0000000200)=""/103, 0x67, &(0x7f0000000280)=""/4096, &(0x7f0000002740)=[0xffffffffffffffff, r5, 0xffffffffffffffff, r0, r3], 0x5}, 0x58)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4860000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='2\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002dbd7000fedbdf250600000014001f00ff020000000000000000000000000001"], 0x28}, 0x1, 0x0, 0x0, 0x20000841}, 0x8000)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0xa6483)
sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000003a00)={&(0x7f0000003940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003980)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24048000}, 0x8001)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000003a80), 0x2, 0x0)

09:39:00 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x96803)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000100)={0x9, 0x4d, 0x0, 'queue1\x00', 0x2})
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
setsockopt$inet_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000400)=0x4000006, 0x4)
setsockopt$inet_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000440)="25aca37d8088b1c4c57ae75f", 0xc)

09:39:00 executing program 3:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00'}, 0x10)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={0x0, 0x0, 0x10}, 0x10)

09:39:00 executing program 5:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
mq_unlink(&(0x7f0000000180)='/dev/null\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)

09:39:00 executing program 1:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0xf4, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000140)={@flat=@weak_handle={0x77682a85, 0x100, 0x3}, @fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x8, 0x1, 0x26}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}, 0x34ccd8a617c8968f}, @acquire={0x40046305, 0x2}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x5, 0x0, 0x24}, @fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/19, 0x13, 0x0, 0x2c}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@fda={0x66646185, 0x4, 0x1, 0x2a}, @fda={0x66646185, 0x9, 0x1, 0x3a}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000380)={0x0, 0x20, 0x40}}}], 0x67, 0x0, &(0x7f00000004c0)="eca275666d9376fd364661079a6b9526ef741fd8fe7509df009d9a7086848198c734536b24400006532e927e37aee96deaafecfcceacf979f51eb068a696f9d93dd41ee4812ef5799b6fc6e28ea353444968e4ee549910091cae0de8c5d55c6a262e95bff105e8"})
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x9, 0xc8, 0x8}}}, 0x8)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000000)={0x2, 0x4, 0x49, 0x0, 0x3})

09:39:00 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x96803)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000100)={0x9, 0x4d, 0x0, 'queue1\x00', 0x2})
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
setsockopt$inet_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000400)=0x4000006, 0x4)

09:39:00 executing program 3:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00'}, 0x10)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={0x0, 0x0, 0x10}, 0x10)

09:39:00 executing program 5:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
mq_unlink(&(0x7f0000000180)='/dev/null\x00')

09:39:00 executing program 1:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00'}, 0x10)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={0x0, 0x0, 0x10}, 0x10)

09:39:00 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x96803)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000100)={0x9, 0x4d, 0x0, 'queue1\x00', 0x2})
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)

09:39:00 executing program 3:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00'}, 0x10)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={0x0, 0x0, 0x10}, 0x10)

09:39:00 executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x96803)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000100)={0x9, 0x4d, 0x0, 'queue1\x00', 0x2})
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)

09:39:00 executing program 4:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0xa6483)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x84, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}, @register_looper, @clear_death, @acquire={0x40046305, 0x1}, @enter_looper, @clear_death={0x400c630f, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x30000, 0x0)

09:39:00 executing program 5:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
mq_unlink(&(0x7f0000000180)='/dev/null\x00')

09:39:00 executing program 1:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x96803)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000100)={0x9, 0x4d, 0x0, 'queue1\x00', 0x2})
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
setsockopt$inet_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000400)=0x4000006, 0x4)
setsockopt$inet_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000440)="25aca37d8088b1c4c57ae75f", 0xc)

09:39:00 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x96803)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000100)={0x9, 0x4d, 0x0, 'queue1\x00', 0x2})
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)

09:39:00 executing program 3:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00'}, 0x10)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00'}, 0x10)

09:39:00 executing program 3:
r0 = getpgid(0xffffffffffffffff)
r1 = getpgid(0xffffffffffffffff)
r2 = getpgid(0x0)
ptrace$peek(0xffffffffffffffff, r2, 0x0)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
rt_sigqueueinfo(0x0, 0x3e, &(0x7f00000003c0)={0x38, 0x3f, 0x800})
syz_clone3(&(0x7f0000000280)={0x1100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0xe}, &(0x7f0000000100)=""/5, 0x5, &(0x7f0000000140)=""/237, &(0x7f0000000240)=[r0, 0x0, 0x0, r1, r2], 0x5, {r3}}, 0x58)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0xa6483)
getsockopt$inet_tcp_buf(r3, 0x6, 0x1c, &(0x7f0000000300)=""/112, &(0x7f0000000380)=0x70)

09:39:00 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x96803)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000100)={0x9, 0x4d, 0x0, 'queue1\x00', 0x2})
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)

09:39:00 executing program 5:
mq_unlink(&(0x7f0000000180)='/dev/null\x00')

09:39:00 executing program 1:
ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f00000003c0)=""/176)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0xa6483)
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, 0x0, 0x300, 0x6, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048001}, 0x40000)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="08002c4c8c8b9edbdf250800000008000c000300000006001c0001040000080009000006001a004e230000050004000787000008001700"/71, @ANYRES32=r2, @ANYBLOB="06001a004e2400000c001600070000000000000014000800766c616e300000000000000000000000060001000b000000"], 0x74}, 0x1, 0x0, 0x0, 0x44045}, 0x4000)
socket$inet_udp(0x2, 0x2, 0x0)

09:39:01 executing program 0:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0xa6483)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000040)=""/77)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x4c481)

09:39:01 executing program 4:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0xa6483)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x84, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}, @register_looper, @clear_death, @acquire={0x40046305, 0x1}, @enter_looper, @clear_death={0x400c630f, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x30000, 0x0)

09:39:01 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x96803)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
pidfd_getfd(0xffffffffffffffff, r0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)

09:39:01 executing program 5:
mq_unlink(0x0)

09:39:01 executing program 1:
ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f00000003c0)=""/176)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0xa6483)
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, 0x0, 0x300, 0x6, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048001}, 0x40000)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="08002c4c8c8b9edbdf250800000008000c000300000006001c0001040000080009000006001a004e230000050004000787000008001700"/71, @ANYRES32=r2, @ANYBLOB="06001a004e2400000c001600070000000000000014000800766c616e300000000000000000000000060001000b000000"], 0x74}, 0x1, 0x0, 0x0, 0x44045}, 0x4000)
socket$inet_udp(0x2, 0x2, 0x0)

09:39:01 executing program 0:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4)
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff)

09:39:01 executing program 2:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x96803)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)

09:39:01 executing program 4:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0xa6483)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x84, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}, @register_looper, @clear_death, @acquire={0x40046305, 0x1}, @enter_looper, @clear_death={0x400c630f, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x30000, 0x0)

09:39:01 executing program 3:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff)
pkey_free(0xffffffffffffffff)

09:39:01 executing program 1:
ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f00000003c0)=""/176)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0xa6483)
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, 0x0, 0x300, 0x6, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048001}, 0x40000)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="08002c4c8c8b9edbdf250800000008000c000300000006001c0001040000080009000006001a004e230000050004000787000008001700"/71, @ANYRES32=r2, @ANYBLOB="06001a004e2400000c001600070000000000000014000800766c616e300000000000000000000000060001000b000000"], 0x74}, 0x1, 0x0, 0x0, 0x44045}, 0x4000)
socket$inet_udp(0x2, 0x2, 0x0)

09:39:01 executing program 0:
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f00000000c0)=0x4)
ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000040)=""/109)
r2 = pkey_alloc(0x0, 0x1)
pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x200000d, r2)

09:39:01 executing program 5:
mq_unlink(0x0)

09:39:01 executing program 2:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x96803)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)

09:39:01 executing program 4:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0xa6483)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x84, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}, @register_looper, @clear_death, @acquire={0x40046305, 0x1}, @enter_looper, @clear_death={0x400c630f, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:01 executing program 3:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff)
pkey_free(0xffffffffffffffff)

09:39:01 executing program 0:
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f00000000c0)=0x4)
ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000040)=""/109)
r2 = pkey_alloc(0x0, 0x1)
pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x200000d, r2)

09:39:01 executing program 5:
mq_unlink(0x0)

09:39:01 executing program 1:
ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f00000003c0)=""/176)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0xa6483)
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, 0x0, 0x300, 0x6, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048001}, 0x40000)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="08002c4c8c8b9edbdf250800000008000c000300000006001c0001040000080009000006001a004e230000050004000787000008001700"/71, @ANYRES32=r2, @ANYBLOB="06001a004e2400000c001600070000000000000014000800766c616e300000000000000000000000060001000b000000"], 0x74}, 0x1, 0x0, 0x0, 0x44045}, 0x4000)

09:39:01 executing program 4:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0xa6483)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x84, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}, @register_looper, @clear_death, @acquire={0x40046305, 0x1}, @enter_looper, @clear_death={0x400c630f, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:01 executing program 2:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x96803)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)

09:39:01 executing program 5:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
getsockopt$inet_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000040)=""/195, &(0x7f0000000140)=0xc3)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
write$FUSE_IOCTL(r1, &(0x7f00000008c0)={0x20, 0x0, 0x0, {0x40, 0x4, 0x7, 0x101}}, 0x20)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000800)={0x50, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000005c0)={@flat=@binder={0x73622a85, 0x100a}, @ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/249, 0xf9, 0x1, 0x12}, @fda={0x66646185, 0x3, 0x1, 0x1a}}, &(0x7f0000000640)={0x0, 0x18, 0x40}}, 0x1000}, @exit_looper], 0xc9, 0x0, &(0x7f0000000700)="4c642c18ef7258d83e118caa0a4a8f62e147b1735f341498401ddc685dd82ab681c2ab19aa248951fd8b2f3d7903021c8cbcc23c30656299918f9b2805133c7c1401d82a0646c6e7149cad22be6dc0208e3af64332668d8ea3208e987c8e3cc1097f39afc23eb8fc26a6238ed729fb3542e24500ee02c9e95fce178afae7f9a8301170b6d757d6bbe57c40fceed4beed0ae93672383fd55850d06b0b4018b289131b10f57a2bb25e9c93de5c570cf57c9ca4bba25ded28fa32ab2268802fa6c35cc1438fbbb1623c0e"})
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r2, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040000}, 0xc805)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r0)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000fddbdf250300000008001700", @ANYRES32=r0, @ANYBLOB="080009000400000008001900ac1e000114000800697036746e6c300000fe000000000000"], 0x40}}, 0x20004050)
pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x32ef489b4292ccbf, 0xffffffffffffffff)
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r4, 0xc02c5341, &(0x7f0000000840))

09:39:01 executing program 1:
ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f00000003c0)=""/176)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0xa6483)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, 0x0, 0x300, 0x6, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048001}, 0x40000)
socket$l2tp6(0xa, 0x2, 0x73)
socket$l2tp6(0xa, 0x2, 0x73)

09:39:01 executing program 3:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff)
pkey_free(0xffffffffffffffff)

09:39:01 executing program 0:
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f00000000c0)=0x4)
ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000040)=""/109)
r2 = pkey_alloc(0x0, 0x1)
pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x200000d, r2)

09:39:01 executing program 4:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0xa6483)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x84, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}, @register_looper, @clear_death, @acquire={0x40046305, 0x1}, @enter_looper, @clear_death={0x400c630f, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:01 executing program 2:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x96803)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)

09:39:01 executing program 0:
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f00000000c0)=0x4)
ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000040)=""/109)
pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x200000d, 0xffffffffffffffff)

09:39:01 executing program 4:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0xa6483)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x84, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}, @register_looper, @clear_death, @acquire={0x40046305, 0x1}, @enter_looper, @clear_death={0x400c630f, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:01 executing program 3:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
pkey_free(0xffffffffffffffff)

09:39:01 executing program 5:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
getsockopt$inet_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000040)=""/195, &(0x7f0000000140)=0xc3)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
write$FUSE_IOCTL(r1, &(0x7f00000008c0)={0x20, 0x0, 0x0, {0x40, 0x4, 0x7, 0x101}}, 0x20)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000800)={0x50, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000005c0)={@flat=@binder={0x73622a85, 0x100a}, @ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/249, 0xf9, 0x1, 0x12}, @fda={0x66646185, 0x3, 0x1, 0x1a}}, &(0x7f0000000640)={0x0, 0x18, 0x40}}, 0x1000}, @exit_looper], 0xc9, 0x0, &(0x7f0000000700)="4c642c18ef7258d83e118caa0a4a8f62e147b1735f341498401ddc685dd82ab681c2ab19aa248951fd8b2f3d7903021c8cbcc23c30656299918f9b2805133c7c1401d82a0646c6e7149cad22be6dc0208e3af64332668d8ea3208e987c8e3cc1097f39afc23eb8fc26a6238ed729fb3542e24500ee02c9e95fce178afae7f9a8301170b6d757d6bbe57c40fceed4beed0ae93672383fd55850d06b0b4018b289131b10f57a2bb25e9c93de5c570cf57c9ca4bba25ded28fa32ab2268802fa6c35cc1438fbbb1623c0e"})
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r2, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040000}, 0xc805)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r0)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000fddbdf250300000008001700", @ANYRES32=r0, @ANYBLOB="080009000400000008001900ac1e000114000800697036746e6c300000fe000000000000"], 0x40}}, 0x20004050)
pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x32ef489b4292ccbf, 0xffffffffffffffff)
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r4, 0xc02c5341, &(0x7f0000000840))

09:39:01 executing program 1:
ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f00000003c0)=""/176)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0xa6483)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, 0x0, 0x300, 0x6, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048001}, 0x40000)
socket$l2tp6(0xa, 0x2, 0x73)

09:39:01 executing program 2:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)

09:39:01 executing program 0:
bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f00000000c0)=0x4)
pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x200000d, 0xffffffffffffffff)

09:39:01 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x84, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}, @register_looper, @clear_death, @acquire={0x40046305, 0x1}, @enter_looper, @clear_death={0x400c630f, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:01 executing program 5:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
getsockopt$inet_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000040)=""/195, &(0x7f0000000140)=0xc3)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
write$FUSE_IOCTL(r1, &(0x7f00000008c0)={0x20, 0x0, 0x0, {0x40, 0x4, 0x7, 0x101}}, 0x20)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000800)={0x50, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000005c0)={@flat=@binder={0x73622a85, 0x100a}, @ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/249, 0xf9, 0x1, 0x12}, @fda={0x66646185, 0x3, 0x1, 0x1a}}, &(0x7f0000000640)={0x0, 0x18, 0x40}}, 0x1000}, @exit_looper], 0xc9, 0x0, &(0x7f0000000700)="4c642c18ef7258d83e118caa0a4a8f62e147b1735f341498401ddc685dd82ab681c2ab19aa248951fd8b2f3d7903021c8cbcc23c30656299918f9b2805133c7c1401d82a0646c6e7149cad22be6dc0208e3af64332668d8ea3208e987c8e3cc1097f39afc23eb8fc26a6238ed729fb3542e24500ee02c9e95fce178afae7f9a8301170b6d757d6bbe57c40fceed4beed0ae93672383fd55850d06b0b4018b289131b10f57a2bb25e9c93de5c570cf57c9ca4bba25ded28fa32ab2268802fa6c35cc1438fbbb1623c0e"})
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r2, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040000}, 0xc805)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r0)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000fddbdf250300000008001700", @ANYRES32=r0, @ANYBLOB="080009000400000008001900ac1e000114000800697036746e6c300000fe000000000000"], 0x40}}, 0x20004050)
pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x32ef489b4292ccbf, 0xffffffffffffffff)
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r4, 0xc02c5341, &(0x7f0000000840))

09:39:01 executing program 3:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
pkey_free(0xffffffffffffffff)

09:39:01 executing program 1:
ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f00000003c0)=""/176)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0xa6483)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, 0x0, 0x300, 0x6, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048001}, 0x40000)
socket$l2tp6(0xa, 0x2, 0x73)

09:39:01 executing program 0:
bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x200000d, 0xffffffffffffffff)

09:39:01 executing program 2:
socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)

09:39:01 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x84, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}, @register_looper, @clear_death, @acquire={0x40046305, 0x1}, @enter_looper, @clear_death={0x400c630f, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:01 executing program 3:
pkey_free(0xffffffffffffffff)

09:39:01 executing program 5:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
getsockopt$inet_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000040)=""/195, &(0x7f0000000140)=0xc3)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
write$FUSE_IOCTL(r1, &(0x7f00000008c0)={0x20, 0x0, 0x0, {0x40, 0x4, 0x7, 0x101}}, 0x20)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000800)={0x50, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000005c0)={@flat=@binder={0x73622a85, 0x100a}, @ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/249, 0xf9, 0x1, 0x12}, @fda={0x66646185, 0x3, 0x1, 0x1a}}, &(0x7f0000000640)={0x0, 0x18, 0x40}}, 0x1000}, @exit_looper], 0xc9, 0x0, &(0x7f0000000700)="4c642c18ef7258d83e118caa0a4a8f62e147b1735f341498401ddc685dd82ab681c2ab19aa248951fd8b2f3d7903021c8cbcc23c30656299918f9b2805133c7c1401d82a0646c6e7149cad22be6dc0208e3af64332668d8ea3208e987c8e3cc1097f39afc23eb8fc26a6238ed729fb3542e24500ee02c9e95fce178afae7f9a8301170b6d757d6bbe57c40fceed4beed0ae93672383fd55850d06b0b4018b289131b10f57a2bb25e9c93de5c570cf57c9ca4bba25ded28fa32ab2268802fa6c35cc1438fbbb1623c0e"})
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r2, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040000}, 0xc805)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r0)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000fddbdf250300000008001700", @ANYRES32=r0, @ANYBLOB="080009000400000008001900ac1e000114000800697036746e6c300000fe000000000000"], 0x40}}, 0x20004050)
pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x32ef489b4292ccbf, 0xffffffffffffffff)
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)

09:39:01 executing program 1:
ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f00000003c0)=""/176)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0xa6483)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, 0x0, 0x300, 0x6, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048001}, 0x40000)
socket$l2tp6(0xa, 0x2, 0x73)

09:39:01 executing program 0:
bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x200000d, 0xffffffffffffffff)

09:39:01 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x84, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}, @register_looper, @clear_death, @acquire={0x40046305, 0x1}, @enter_looper, @clear_death={0x400c630f, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:01 executing program 3:
bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f00000000c0)=0x4)
pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x200000d, 0xffffffffffffffff)

09:39:01 executing program 2:
socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)

09:39:02 executing program 1:
ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f00000003c0)=""/176)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0xa6483)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
socket$l2tp6(0xa, 0x2, 0x73)
socket$l2tp6(0xa, 0x2, 0x73)

09:39:02 executing program 5:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
getsockopt$inet_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000040)=""/195, &(0x7f0000000140)=0xc3)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
write$FUSE_IOCTL(r1, &(0x7f00000008c0)={0x20, 0x0, 0x0, {0x40, 0x4, 0x7, 0x101}}, 0x20)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000800)={0x50, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000005c0)={@flat=@binder={0x73622a85, 0x100a}, @ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/249, 0xf9, 0x1, 0x12}, @fda={0x66646185, 0x3, 0x1, 0x1a}}, &(0x7f0000000640)={0x0, 0x18, 0x40}}, 0x1000}, @exit_looper], 0xc9, 0x0, &(0x7f0000000700)="4c642c18ef7258d83e118caa0a4a8f62e147b1735f341498401ddc685dd82ab681c2ab19aa248951fd8b2f3d7903021c8cbcc23c30656299918f9b2805133c7c1401d82a0646c6e7149cad22be6dc0208e3af64332668d8ea3208e987c8e3cc1097f39afc23eb8fc26a6238ed729fb3542e24500ee02c9e95fce178afae7f9a8301170b6d757d6bbe57c40fceed4beed0ae93672383fd55850d06b0b4018b289131b10f57a2bb25e9c93de5c570cf57c9ca4bba25ded28fa32ab2268802fa6c35cc1438fbbb1623c0e"})
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r2, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040000}, 0xc805)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r0)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000fddbdf250300000008001700", @ANYRES32=r0, @ANYBLOB="080009000400000008001900ac1e000114000800697036746e6c300000fe000000000000"], 0x40}}, 0x20004050)
pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x32ef489b4292ccbf, 0xffffffffffffffff)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)

09:39:02 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x84, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}, @register_looper, @clear_death, @acquire={0x40046305, 0x1}, @enter_looper, @clear_death={0x400c630f, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:02 executing program 3:
ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f00000003c0)=""/176)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0xa6483)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, 0x0, 0x300, 0x6, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048001}, 0x40000)
socket$l2tp6(0xa, 0x2, 0x73)

09:39:02 executing program 2:
socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)

09:39:02 executing program 0:
bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x200000d, 0xffffffffffffffff)

09:39:02 executing program 5:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
getsockopt$inet_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000040)=""/195, &(0x7f0000000140)=0xc3)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
write$FUSE_IOCTL(r1, &(0x7f00000008c0)={0x20, 0x0, 0x0, {0x40, 0x4, 0x7, 0x101}}, 0x20)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000800)={0x50, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000005c0)={@flat=@binder={0x73622a85, 0x100a}, @ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/249, 0xf9, 0x1, 0x12}, @fda={0x66646185, 0x3, 0x1, 0x1a}}, &(0x7f0000000640)={0x0, 0x18, 0x40}}, 0x1000}, @exit_looper], 0xc9, 0x0, &(0x7f0000000700)="4c642c18ef7258d83e118caa0a4a8f62e147b1735f341498401ddc685dd82ab681c2ab19aa248951fd8b2f3d7903021c8cbcc23c30656299918f9b2805133c7c1401d82a0646c6e7149cad22be6dc0208e3af64332668d8ea3208e987c8e3cc1097f39afc23eb8fc26a6238ed729fb3542e24500ee02c9e95fce178afae7f9a8301170b6d757d6bbe57c40fceed4beed0ae93672383fd55850d06b0b4018b289131b10f57a2bb25e9c93de5c570cf57c9ca4bba25ded28fa32ab2268802fa6c35cc1438fbbb1623c0e"})
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r2, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040000}, 0xc805)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r0)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000fddbdf250300000008001700", @ANYRES32=r0, @ANYBLOB="080009000400000008001900ac1e000114000800697036746e6c300000fe000000000000"], 0x40}}, 0x20004050)
pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x32ef489b4292ccbf, 0xffffffffffffffff)

09:39:02 executing program 1:
ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f00000003c0)=""/176)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0xa6483)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
socket$l2tp6(0xa, 0x2, 0x73)

09:39:02 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x84, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}, @register_looper, @clear_death, @acquire={0x40046305, 0x1}, @enter_looper, @clear_death={0x400c630f, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:02 executing program 0:
pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x200000d, 0xffffffffffffffff)

09:39:02 executing program 3:
ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f00000003c0)=""/176)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0xa6483)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, 0x0, 0x300, 0x6, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048001}, 0x40000)
socket$l2tp6(0xa, 0x2, 0x73)
socket$l2tp6(0xa, 0x2, 0x73)

09:39:02 executing program 2:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0)

09:39:02 executing program 5:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
getsockopt$inet_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000040)=""/195, &(0x7f0000000140)=0xc3)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
write$FUSE_IOCTL(r1, &(0x7f00000008c0)={0x20, 0x0, 0x0, {0x40, 0x4, 0x7, 0x101}}, 0x20)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000800)={0x50, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000005c0)={@flat=@binder={0x73622a85, 0x100a}, @ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/249, 0xf9, 0x1, 0x12}, @fda={0x66646185, 0x3, 0x1, 0x1a}}, &(0x7f0000000640)={0x0, 0x18, 0x40}}, 0x1000}, @exit_looper], 0xc9, 0x0, &(0x7f0000000700)="4c642c18ef7258d83e118caa0a4a8f62e147b1735f341498401ddc685dd82ab681c2ab19aa248951fd8b2f3d7903021c8cbcc23c30656299918f9b2805133c7c1401d82a0646c6e7149cad22be6dc0208e3af64332668d8ea3208e987c8e3cc1097f39afc23eb8fc26a6238ed729fb3542e24500ee02c9e95fce178afae7f9a8301170b6d757d6bbe57c40fceed4beed0ae93672383fd55850d06b0b4018b289131b10f57a2bb25e9c93de5c570cf57c9ca4bba25ded28fa32ab2268802fa6c35cc1438fbbb1623c0e"})
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r2, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040000}, 0xc805)
syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r0)
pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x32ef489b4292ccbf, 0xffffffffffffffff)

09:39:02 executing program 1:
ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f00000003c0)=""/176)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0xa6483)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
socket$l2tp6(0xa, 0x2, 0x73)
socket$l2tp6(0xa, 0x2, 0x73)

09:39:02 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x84, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}, @register_looper, @clear_death, @acquire={0x40046305, 0x1}, @enter_looper, @clear_death={0x400c630f, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:02 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x84, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}, @register_looper, @clear_death, @acquire={0x40046305, 0x1}, @enter_looper, @clear_death={0x400c630f, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:02 executing program 0:
pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff)

09:39:02 executing program 2:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0)

09:39:02 executing program 5:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
getsockopt$inet_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000040)=""/195, &(0x7f0000000140)=0xc3)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
write$FUSE_IOCTL(r1, &(0x7f00000008c0)={0x20, 0x0, 0x0, {0x40, 0x4, 0x7, 0x101}}, 0x20)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000800)={0x50, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000005c0)={@flat=@binder={0x73622a85, 0x100a}, @ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/249, 0xf9, 0x1, 0x12}, @fda={0x66646185, 0x3, 0x1, 0x1a}}, &(0x7f0000000640)={0x0, 0x18, 0x40}}, 0x1000}, @exit_looper], 0xc9, 0x0, &(0x7f0000000700)="4c642c18ef7258d83e118caa0a4a8f62e147b1735f341498401ddc685dd82ab681c2ab19aa248951fd8b2f3d7903021c8cbcc23c30656299918f9b2805133c7c1401d82a0646c6e7149cad22be6dc0208e3af64332668d8ea3208e987c8e3cc1097f39afc23eb8fc26a6238ed729fb3542e24500ee02c9e95fce178afae7f9a8301170b6d757d6bbe57c40fceed4beed0ae93672383fd55850d06b0b4018b289131b10f57a2bb25e9c93de5c570cf57c9ca4bba25ded28fa32ab2268802fa6c35cc1438fbbb1623c0e"})
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r2, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040000}, 0xc805)
pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x32ef489b4292ccbf, 0xffffffffffffffff)

09:39:02 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x84, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}, @register_looper, @clear_death, @acquire={0x40046305, 0x1}, @enter_looper, @clear_death={0x400c630f, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:02 executing program 0:
pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff)

09:39:02 executing program 1:
ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f00000003c0)=""/176)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0xa6483)
socket$l2tp6(0xa, 0x2, 0x73)
socket$l2tp6(0xa, 0x2, 0x73)

09:39:02 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x84, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}, @register_looper, @clear_death, @acquire={0x40046305, 0x1}, @enter_looper, @clear_death={0x400c630f, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:02 executing program 2:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0)

09:39:02 executing program 5:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
getsockopt$inet_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000040)=""/195, &(0x7f0000000140)=0xc3)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
write$FUSE_IOCTL(r1, &(0x7f00000008c0)={0x20, 0x0, 0x0, {0x40, 0x4, 0x7, 0x101}}, 0x20)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000800)={0x50, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000005c0)={@flat=@binder={0x73622a85, 0x100a}, @ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/249, 0xf9, 0x1, 0x12}, @fda={0x66646185, 0x3, 0x1, 0x1a}}, &(0x7f0000000640)={0x0, 0x18, 0x40}}, 0x1000}, @exit_looper], 0xc9, 0x0, &(0x7f0000000700)="4c642c18ef7258d83e118caa0a4a8f62e147b1735f341498401ddc685dd82ab681c2ab19aa248951fd8b2f3d7903021c8cbcc23c30656299918f9b2805133c7c1401d82a0646c6e7149cad22be6dc0208e3af64332668d8ea3208e987c8e3cc1097f39afc23eb8fc26a6238ed729fb3542e24500ee02c9e95fce178afae7f9a8301170b6d757d6bbe57c40fceed4beed0ae93672383fd55850d06b0b4018b289131b10f57a2bb25e9c93de5c570cf57c9ca4bba25ded28fa32ab2268802fa6c35cc1438fbbb1623c0e"})
syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0)
pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x32ef489b4292ccbf, 0xffffffffffffffff)

09:39:02 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x84, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}, @register_looper, @clear_death, @acquire={0x40046305, 0x1}, @enter_looper, @clear_death={0x400c630f, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:02 executing program 4:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x84, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}, @register_looper, @clear_death, @acquire={0x40046305, 0x1}, @enter_looper, @clear_death={0x400c630f, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:02 executing program 1:
ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f00000003c0)=""/176)
socket$l2tp6(0xa, 0x2, 0x73)
socket$l2tp6(0xa, 0x2, 0x73)

09:39:02 executing program 0:
pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff)

09:39:02 executing program 2:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4)

09:39:02 executing program 3:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x84, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}, @register_looper, @clear_death, @acquire={0x40046305, 0x1}, @enter_looper, @clear_death={0x400c630f, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:02 executing program 4:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x84, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}, @register_looper, @clear_death, @acquire={0x40046305, 0x1}, @enter_looper, @clear_death={0x400c630f, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:02 executing program 5:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
getsockopt$inet_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000040)=""/195, &(0x7f0000000140)=0xc3)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
write$FUSE_IOCTL(r1, &(0x7f00000008c0)={0x20, 0x0, 0x0, {0x40, 0x4, 0x7, 0x101}}, 0x20)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000800)={0x50, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000005c0)={@flat=@binder={0x73622a85, 0x100a}, @ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/249, 0xf9, 0x1, 0x12}, @fda={0x66646185, 0x3, 0x1, 0x1a}}, &(0x7f0000000640)={0x0, 0x18, 0x40}}, 0x1000}, @exit_looper], 0xc9, 0x0, &(0x7f0000000700)="4c642c18ef7258d83e118caa0a4a8f62e147b1735f341498401ddc685dd82ab681c2ab19aa248951fd8b2f3d7903021c8cbcc23c30656299918f9b2805133c7c1401d82a0646c6e7149cad22be6dc0208e3af64332668d8ea3208e987c8e3cc1097f39afc23eb8fc26a6238ed729fb3542e24500ee02c9e95fce178afae7f9a8301170b6d757d6bbe57c40fceed4beed0ae93672383fd55850d06b0b4018b289131b10f57a2bb25e9c93de5c570cf57c9ca4bba25ded28fa32ab2268802fa6c35cc1438fbbb1623c0e"})
pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x32ef489b4292ccbf, 0xffffffffffffffff)

09:39:02 executing program 1:
socket$l2tp6(0xa, 0x2, 0x73)
socket$l2tp6(0xa, 0x2, 0x73)

09:39:02 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x84, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}, @register_looper, @clear_death, @acquire={0x40046305, 0x1}, @enter_looper, @clear_death={0x400c630f, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:02 executing program 2:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4)

09:39:02 executing program 3:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x84, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}, @register_looper, @clear_death, @acquire={0x40046305, 0x1}, @enter_looper, @clear_death={0x400c630f, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:02 executing program 4:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x84, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}, @register_looper, @clear_death, @acquire={0x40046305, 0x1}, @enter_looper, @clear_death={0x400c630f, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:02 executing program 5:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
getsockopt$inet_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000040)=""/195, &(0x7f0000000140)=0xc3)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
write$FUSE_IOCTL(r1, &(0x7f00000008c0)={0x20, 0x0, 0x0, {0x40, 0x4, 0x7, 0x101}}, 0x20)
pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x32ef489b4292ccbf, 0xffffffffffffffff)

09:39:02 executing program 1:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4)

09:39:02 executing program 0:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4)
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0xffffffffffffffff)

09:39:02 executing program 2:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4)

09:39:02 executing program 3:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x84, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}, @register_looper, @clear_death, @acquire={0x40046305, 0x1}, @enter_looper, @clear_death={0x400c630f, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:02 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

09:39:02 executing program 5:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
getsockopt$inet_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000040)=""/195, &(0x7f0000000140)=0xc3)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x32ef489b4292ccbf, 0xffffffffffffffff)

09:39:02 executing program 1:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4)

09:39:02 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x84, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}, @register_looper, @clear_death, @acquire={0x40046305, 0x1}, @enter_looper, @clear_death={0x400c630f, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:02 executing program 0:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4)
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0xffffffffffffffff)

09:39:02 executing program 2:
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0xa6483)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000000)={0x4, 0x1a66, 0x81, 0x0, 0xd})
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x240, 0x0)

09:39:03 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

09:39:03 executing program 5:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
getsockopt$inet_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000040)=""/195, &(0x7f0000000140)=0xc3)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x32ef489b4292ccbf, 0xffffffffffffffff)

[  728.051112][T18752] binder: 18745:18752 ioctl c0306201 0 returned -14
09:39:03 executing program 1:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4)

09:39:03 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x84, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}, @register_looper, @clear_death, @acquire={0x40046305, 0x1}, @enter_looper, @clear_death={0x400c630f, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:03 executing program 0:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4)
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0xffffffffffffffff)

09:39:03 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

09:39:03 executing program 5:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
getsockopt$inet_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000040)=""/195, &(0x7f0000000140)=0xc3)
pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x32ef489b4292ccbf, 0xffffffffffffffff)

[  728.170766][T18763] binder: 18759:18763 ioctl c0306201 0 returned -14
09:39:03 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x84, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}, @register_looper, @clear_death, @acquire={0x40046305, 0x1}, @enter_looper, @clear_death={0x400c630f, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:03 executing program 0:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0xffffffffffffffff)

09:39:03 executing program 1:
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)

09:39:03 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

[  728.260880][T18774] binder: 18772:18774 ioctl c0306201 0 returned -14
09:39:03 executing program 2:
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0xa6483)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000000)={0x4, 0x1a66, 0x81, 0x0, 0xd})
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x240, 0x0)

09:39:03 executing program 5:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x32ef489b4292ccbf, 0xffffffffffffffff)

09:39:03 executing program 0:
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0xffffffffffffffff)

09:39:03 executing program 1:
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)

09:39:03 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:03 executing program 3:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x84, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}, @register_looper, @clear_death, @acquire={0x40046305, 0x1}, @enter_looper, @clear_death={0x400c630f, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:03 executing program 5:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x32ef489b4292ccbf, 0xffffffffffffffff)

09:39:03 executing program 1:
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)

09:39:03 executing program 0:
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff)

09:39:03 executing program 3:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x84, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}, @register_looper, @clear_death, @acquire={0x40046305, 0x1}, @enter_looper, @clear_death={0x400c630f, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:03 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:03 executing program 0:
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff)

09:39:03 executing program 2:
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0xa6483)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000000)={0x4, 0x1a66, 0x81, 0x0, 0xd})
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x240, 0x0)

09:39:03 executing program 5:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x32ef489b4292ccbf, 0xffffffffffffffff)

09:39:03 executing program 1:
socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)

09:39:03 executing program 3:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x84, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}, @register_looper, @clear_death, @acquire={0x40046305, 0x1}, @enter_looper, @clear_death={0x400c630f, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:03 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}, @register_looper, @clear_death, @acquire={0x40046305, 0x1}, @enter_looper], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:03 executing program 0:
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff)

09:39:03 executing program 5:
pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x32ef489b4292ccbf, 0xffffffffffffffff)

09:39:03 executing program 1:
socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)

09:39:03 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:03 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

09:39:03 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x70, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}, @register_looper, @clear_death, @acquire={0x40046305, 0x1}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:03 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x68, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}, @register_looper, @clear_death], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

[  728.857095][T18833] binder: 18825:18833 ioctl c0306201 0 returned -14
09:39:03 executing program 2:
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0xa6483)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x240, 0x0)

09:39:03 executing program 5:
pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff)

09:39:03 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:03 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

09:39:03 executing program 1:
socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)

09:39:03 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}, @register_looper], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:04 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:04 executing program 1:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0)

09:39:04 executing program 5:
pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff)

[  729.041908][T18843] binder: 18841:18843 ioctl c0306201 0 returned -14
09:39:04 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

09:39:04 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:04 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

[  729.232999][T18862] binder: 18861:18862 ioctl c0306201 0 returned -14
09:39:04 executing program 2:
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0xa6483)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x240, 0x0)

09:39:04 executing program 0:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:04 executing program 1:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0)

09:39:04 executing program 5:
pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff)

09:39:04 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:04 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:04 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:04 executing program 1:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0)

09:39:04 executing program 5:
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0xa6483)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x240, 0x0)

09:39:04 executing program 0:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:04 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:04 executing program 0:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:04 executing program 2:
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0xa6483)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x240, 0x0)

09:39:04 executing program 1:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x84, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}, @register_looper, @clear_death, @acquire={0x40046305, 0x1}, @enter_looper, @clear_death={0x400c630f, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:04 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:04 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:04 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:04 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}, @register_looper, @clear_death, @acquire={0x40046305, 0x1}, @enter_looper], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:04 executing program 5:
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0xa6483)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000000)={0x4, 0x1a66, 0x81, 0x0, 0xd})
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x240, 0x0)

09:39:04 executing program 1:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff)
pkey_alloc(0x0, 0x3)
mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x7)

09:39:04 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:04 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:04 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x70, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}, @register_looper, @clear_death, @acquire={0x40046305, 0x1}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:04 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:04 executing program 2:
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x240, 0x0)

09:39:04 executing program 1:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x880)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000000)={0x4, 0x4, 0x3, 0x0, 0x6})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
write$FUSE_OPEN(r1, &(0x7f0000000080)={0x20, 0x0, 0x0, {0x0, 0x1d}}, 0x20)

09:39:04 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:04 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:04 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x68, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}, @register_looper, @clear_death], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:04 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:05 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:05 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:05 executing program 1:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x880)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000000)={0x4, 0x4, 0x3, 0x0, 0x6})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
write$FUSE_OPEN(r1, &(0x7f0000000080)={0x20, 0x0, 0x0, {0x0, 0x1d}}, 0x20)

09:39:05 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}, @register_looper], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:05 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:05 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:05 executing program 2:
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x240, 0x0)

09:39:05 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:05 executing program 1:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x880)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000000)={0x4, 0x4, 0x3, 0x0, 0x6})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
write$FUSE_OPEN(r1, &(0x7f0000000080)={0x20, 0x0, 0x0, {0x0, 0x1d}}, 0x20)

09:39:05 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:05 executing program 0:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:05 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:05 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:05 executing program 0:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:05 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:05 executing program 1:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x880)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000000)={0x4, 0x4, 0x3, 0x0, 0x6})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)

09:39:05 executing program 2:
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x240, 0x0)

09:39:05 executing program 1:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x880)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000000)={0x4, 0x4, 0x3, 0x0, 0x6})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)

09:39:05 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:05 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:05 executing program 0:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:05 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:05 executing program 2:
openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x240, 0x0)

09:39:05 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:05 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:05 executing program 1:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x880)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000000)={0x4, 0x4, 0x3, 0x0, 0x6})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)

09:39:05 executing program 5:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:05 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

09:39:05 executing program 2:
openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x240, 0x0)

09:39:05 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:05 executing program 1:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x880)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)

09:39:05 executing program 5:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:05 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[  730.719928][T18987] binder: 18985:18987 ioctl c0306201 0 returned -14
09:39:05 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:05 executing program 2:
openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x240, 0x0)

09:39:05 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:05 executing program 5:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:05 executing program 1:
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)

09:39:05 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[  730.857418][T19000] binder: 18997:19000 ioctl c0306201 0 returned -14
09:39:05 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:05 executing program 2:
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)

09:39:05 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:05 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:05 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:05 executing program 1:
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)

09:39:05 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  730.989632][T19013] binder: 19009:19013 ioctl c0306201 0 returned -14
09:39:05 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:06 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs={0x40046307, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:06 executing program 1:
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)

09:39:06 executing program 2:
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)

09:39:06 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:06 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:39:06 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:06 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs={0x40046307, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:06 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:06 executing program 2:
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)

09:39:06 executing program 1:
r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x880)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)

09:39:06 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x0, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:06 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:39:06 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs={0x40046307, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:06 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x0, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:06 executing program 1:
r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x880)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)

09:39:06 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:06 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs={0x40046307, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:06 executing program 1:
r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x880)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)

09:39:06 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:06 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)})

09:39:06 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs={0x40046307, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:06 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:06 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x0, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:06 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:06 executing program 1:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)

09:39:06 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)})

09:39:06 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs={0x40046307, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:06 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:06 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x0, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:06 executing program 1:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)

09:39:06 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:06 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)})

09:39:06 executing program 2:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs={0x40046307, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:06 executing program 5:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:06 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x0, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:06 executing program 1:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)

09:39:06 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:06 executing program 2:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs={0x40046307, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:06 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x34, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768"})

09:39:06 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x0, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:06 executing program 5:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:06 executing program 2:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs={0x40046307, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:06 executing program 1:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)

09:39:06 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:06 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:06 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)})

09:39:06 executing program 5:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:07 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs={0x40046307, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:07 executing program 1:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:07 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:07 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:07 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs={0x40046307, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:07 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)})

09:39:07 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

09:39:07 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:07 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:07 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}, 0x40}, @decrefs={0x40046307, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:07 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs={0x40046307, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:07 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:07 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)})

[  732.310070][T19137] binder: 19134:19137 ioctl c0306201 0 returned -14
09:39:07 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

09:39:07 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}, 0x40}, @decrefs={0x40046307, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:07 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:07 executing program 2:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs={0x40046307, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:07 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:07 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

09:39:07 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1a, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500c"})

[  732.442820][T19151] binder: 19145:19151 ioctl c0306201 0 returned -14
09:39:07 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:07 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}, 0x40}, @decrefs={0x40046307, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:07 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)})

09:39:07 executing program 2:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs={0x40046307, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:07 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

[  732.557641][T19159] binder: 19155:19159 ioctl c0306201 0 returned -14
09:39:07 executing program 1:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:07 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:07 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x0, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:07 executing program 2:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs={0x40046307, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:07 executing program 1:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:07 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:07 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:07 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)})

09:39:07 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x0, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:07 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

09:39:07 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:07 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)})

09:39:07 executing program 1:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:07 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:07 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x0, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:07 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:07 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xd, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27"})

09:39:07 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[  732.957517][T19199] binder: 19191:19199 ioctl c0306201 0 returned -14
09:39:07 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:07 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:08 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x0, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:08 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)})

09:39:08 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:08 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

09:39:08 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:08 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x0, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

[  733.116289][T19211] binder: 19208:19211 ioctl c0306201 0 returned -14
09:39:08 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)})

09:39:08 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x0, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:08 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:08 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:08 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x0, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:08 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

[  733.244418][T19224] binder: 19220:19224 ioctl c0306201 0 returned -14
09:39:08 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:08 executing program 1:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:08 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x0, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:08 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)})

09:39:08 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x0, 0x0, 0x0})

09:39:08 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x0, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:08 executing program 1:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:08 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:08 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f00000002c0)="0c94779b3d72ad"})

09:39:08 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x0, 0x0, 0x0})

09:39:08 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:08 executing program 1:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:08 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:08 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:08 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)='\f'})

09:39:08 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x0, 0x0, 0x0})

09:39:08 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:08 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

09:39:08 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:08 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)})

09:39:08 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x0, 0x0, &(0x7f00000002c0)})

09:39:08 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:08 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:08 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:08 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

[  733.839486][T19278] binder: 19272:19278 ioctl c0306201 0 returned -14
09:39:08 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

09:39:08 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:08 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)})

09:39:08 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x0, 0x0, &(0x7f00000002c0)})

09:39:08 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:08 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, 0x0}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:08 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[  733.995883][T19292] binder: 19291:19292 ioctl c0306201 0 returned -14
09:39:08 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)})

09:39:09 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x0, 0x0, &(0x7f00000002c0)})

09:39:09 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x0, 0x0, 0x0})

09:39:09 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:09 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[  734.127013][T19303] binder: 19298:19303 ioctl c0306201 0 returned -14
09:39:09 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:09 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, 0x0}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:09 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x34, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768"})

09:39:09 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:09 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x0, 0x0, 0x0})

[  734.248899][T19314] binder: 19312:19314 ioctl c0306201 0 returned -14
09:39:09 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:09 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, 0x0}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:09 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, 0x0}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:09 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x0, 0x0, &(0x7f00000002c0)})

09:39:09 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, 0x0}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:09 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:09 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:09 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:09 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, 0x0}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:09 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:09 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x0, 0x0, &(0x7f00000002c0)})

09:39:09 executing program 2:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:09 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:09 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, 0x0}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:09 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:09 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:09 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x0, 0x0, &(0x7f00000002c0)})

09:39:09 executing program 2:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:09 executing program 0:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, 0x0}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:09 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:09 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:09 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x1a, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500c"})

09:39:09 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:09 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)})

09:39:09 executing program 0:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, 0x0}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:09 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x0, 0x0, 0x0})

09:39:09 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x0, 0x0, &(0x7f00000002c0)})

09:39:09 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x0, 0x0, 0x0})

09:39:09 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x0, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:09 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

09:39:09 executing program 0:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, 0x0}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:09 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:09 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x0, 0x0, &(0x7f00000002c0)})

09:39:09 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x0, 0x0, 0x0})

09:39:10 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:39:10 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x0, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

[  735.068362][T19384] binder: 19379:19384 ioctl c0306201 0 returned -14
09:39:10 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:39:10 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, 0x0}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:10 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x0, 0x0, &(0x7f00000002c0)})

09:39:10 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x0, 0x0, 0x0})

09:39:10 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x0, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:10 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x0, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:10 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0xd, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27"})

09:39:10 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

09:39:10 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, 0x0}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:10 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x0, 0x0, &(0x7f00000002c0)})

09:39:10 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:10 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:10 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:10 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x0, 0x0, &(0x7f00000002c0)})

[  735.358029][T19410] binder: 19409:19410 ioctl c0306201 0 returned -14
09:39:10 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, 0x0}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:10 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x0, 0x0, &(0x7f00000002c0)})

09:39:10 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x0, 0x0, &(0x7f00000002c0)})

09:39:10 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:10 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:10 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:10 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, 0x0}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:10 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x0, 0x0, &(0x7f00000002c0)})

09:39:10 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:10 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:10 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:10 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x0, 0x0, &(0x7f00000002c0)})

09:39:10 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, 0x0}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:10 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x34, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768"})

09:39:10 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, 0x0}, 0x40}, @decrefs={0x40046307, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:10 executing program 2:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:10 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x7, 0x0, &(0x7f00000002c0)="0c94779b3d72ad"})

09:39:10 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x34, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768"})

09:39:10 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, 0x0}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:10 executing program 1:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:10 executing program 2:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:10 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, 0x0}, 0x40}, @decrefs={0x40046307, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:10 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x1, 0x0, &(0x7f00000002c0)='\f'})

09:39:10 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x34, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768"})

09:39:10 executing program 0:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, 0x0}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:10 executing program 2:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:10 executing program 1:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:10 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, 0x0}, 0x40}, @decrefs={0x40046307, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:10 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x0, 0x0, &(0x7f00000002c0)})

09:39:11 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x4e, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c"})

09:39:11 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:11 executing program 0:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, 0x0}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:11 executing program 1:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:11 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}}, @decrefs={0x40046307, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:11 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x0, 0x0, &(0x7f00000002c0)})

09:39:11 executing program 0:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, 0x0}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:11 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x4e, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c"})

09:39:11 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:11 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:11 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}}, @decrefs={0x40046307, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:11 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x0, 0x0, &(0x7f00000002c0)})

09:39:11 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

09:39:11 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x4e, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c"})

09:39:11 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:11 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:11 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

09:39:11 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}}, @decrefs={0x40046307, 0x2}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:11 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x34, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768"})

[  736.374430][T19506] binder: 19504:19506 ioctl c0306201 0 returned -14
09:39:11 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x5b, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334"})

09:39:11 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:11 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x0, 0x0, 0x0})

09:39:11 executing program 2:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:11 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x34, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768"})

[  736.519199][T19519] binder: 19516:19519 ioctl c0306201 0 returned -14
09:39:11 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x5b, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334"})

09:39:11 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

09:39:11 executing program 1:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:11 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x0, 0x0, 0x0})

09:39:11 executing program 2:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:11 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:11 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x34, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768"})

[  736.658651][T19533] binder: 19530:19533 ioctl c0306201 0 returned -14
09:39:11 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x5b, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334"})

09:39:11 executing program 1:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:11 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x0, 0x0, 0x0})

09:39:11 executing program 2:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:11 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:11 executing program 5:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x34, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768"})

09:39:11 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x62, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6"})

09:39:11 executing program 1:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:11 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x0, 0x0, &(0x7f00000002c0)})

09:39:11 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

09:39:11 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:11 executing program 5:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x34, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768"})

09:39:11 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x62, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6"})

09:39:11 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

09:39:11 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

09:39:11 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, 0x0}, 0x40}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

[  737.006911][T19563] binder: 19562:19563 ioctl c0306201 0 returned -14
09:39:11 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x0, 0x0, &(0x7f00000002c0)})

09:39:12 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x62, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6"})

09:39:12 executing program 5:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x34, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768"})

09:39:12 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

09:39:12 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

09:39:12 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x0, 0x0, &(0x7f00000002c0)})

[  737.093815][T19571] binder: 19570:19571 ioctl c0306201 0 returned -14
[  737.107486][T19573] binder: 19572:19573 ioctl c0306201 0 returned -14
09:39:12 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, 0x0}, 0x40}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:12 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x34, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768"})

09:39:12 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x65, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd5"})

09:39:12 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

09:39:12 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x34, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768"})

09:39:12 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x34, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768"})

09:39:12 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

[  737.248426][T19582] binder: 19580:19582 ioctl c0306201 0 returned -14
[  737.261001][T19587] binder: 19579:19587 ioctl c0306201 0 returned -14
09:39:12 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, 0x0}, 0x40}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:12 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x34, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768"})

09:39:12 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x65, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd5"})

[  737.372906][T19596] binder: 19593:19596 ioctl c0306201 0 returned -14
09:39:12 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:12 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:12 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x34, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768"})

09:39:12 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:12 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x34, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768"})

09:39:12 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x65, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd5"})

09:39:12 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:12 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:12 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:12 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x34, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768"})

09:39:12 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x67, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd53038"})

09:39:12 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x4e, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c"})

09:39:12 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:12 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:12 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x34, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768"})

09:39:12 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:12 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x4e, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c"})

09:39:12 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x67, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd53038"})

09:39:12 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:12 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:12 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, 0x0}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:12 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x34, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768"})

09:39:12 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x67, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd53038"})

09:39:12 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x4e, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c"})

09:39:12 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:12 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, 0x0}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:12 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:12 executing program 5:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x34, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768"})

09:39:12 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:12 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x5b, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334"})

09:39:13 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:13 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:13 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, 0x0}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:13 executing program 5:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x34, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768"})

09:39:13 executing program 4:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x34, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768"})

09:39:13 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x5b, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334"})

09:39:13 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:13 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:13 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, 0x0}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:13 executing program 5:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x34, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768"})

09:39:13 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, 0x0}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:13 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x5b, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334"})

09:39:13 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:13 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:13 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

09:39:13 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:13 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x5b, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334"})

09:39:13 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:13 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:13 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x62, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6"})

09:39:13 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[  738.527355][T19700] binder: 19697:19700 ioctl c0306201 0 returned -14
09:39:13 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:13 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:13 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}, 0x40}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:13 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:13 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x62, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6"})

09:39:13 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x62, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6"})

09:39:13 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs], 0x0, 0x0, 0x0})

09:39:13 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[  738.670520][T19714] binder: 19713:19714 ioctl c0306201 0 returned -14
09:39:13 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:13 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}, 0x40}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:13 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x62, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6"})

09:39:13 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:13 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs], 0x0, 0x0, 0x0})

09:39:13 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x34, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768"})

09:39:13 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

[  738.842196][T19726] binder: 19725:19726 ioctl c0306201 0 returned -14
09:39:13 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:13 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs], 0x0, 0x0, 0x0})

09:39:13 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:13 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:13 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x65, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd5"})

09:39:13 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x34, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768"})

09:39:13 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:13 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs], 0x0, 0x0, &(0x7f00000002c0)})

09:39:14 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x65, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd5"})

09:39:14 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x65, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd5"})

09:39:14 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x34, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768"})

09:39:14 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:14 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs], 0x0, 0x0, &(0x7f00000002c0)})

09:39:14 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:14 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}], 0x34, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768"})

09:39:14 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:14 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x65, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd5"})

09:39:14 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs], 0x0, 0x0, &(0x7f00000002c0)})

09:39:14 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:14 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x0, 0x0, &(0x7f00000002c0)})

09:39:14 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x67, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd53038"})

09:39:14 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}], 0x34, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768"})

09:39:14 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f00000002c0)})

09:39:14 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs], 0x34, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768"})

09:39:14 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x0, 0x0, &(0x7f00000002c0)})

09:39:14 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:14 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x67, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd53038"})

09:39:14 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f00000002c0)})

09:39:14 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f00000002c0)})

09:39:14 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs], 0x34, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768"})

09:39:14 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}], 0x34, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768"})

09:39:14 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x0, 0x0, &(0x7f00000002c0)})

09:39:14 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x67, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd53038"})

09:39:14 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f00000002c0)})

09:39:14 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x34, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768"})

09:39:14 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f00000002c0)})

09:39:14 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs], 0x34, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768"})

09:39:14 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x67, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd53038"})

09:39:14 executing program 4:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x0, 0x0, &(0x7f00000002c0)})

09:39:14 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x34, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768"})

09:39:14 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs], 0x4e, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c"})

09:39:14 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x34, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768"})

09:39:14 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f00000002c0)})

09:39:14 executing program 4:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x0, 0x0, &(0x7f00000002c0)})

09:39:14 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, 0x0}, 0x40}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:14 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x34, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768"})

09:39:14 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs], 0x4e, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c"})

09:39:14 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x34, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768"})

09:39:14 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x34, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768"})

09:39:14 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f00000002c0)})

09:39:14 executing program 4:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x0, 0x0, &(0x7f00000002c0)})

09:39:14 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs], 0x4e, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c"})

09:39:14 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x34, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768"})

09:39:15 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x34, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768"})

09:39:15 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x34, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768"})

09:39:15 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x0, 0x0, &(0x7f00000002c0)})

09:39:15 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

09:39:15 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4e, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c"})

09:39:15 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x34, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768"})

09:39:15 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x34, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768"})

09:39:15 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs], 0x5b, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334"})

09:39:15 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x0, 0x0, &(0x7f00000002c0)})

09:39:15 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[  740.236706][T19853] binder: 19851:19853 ioctl c0306201 0 returned -14
09:39:15 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4e, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c"})

09:39:15 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs], 0x4e, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c"})

09:39:15 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4e, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c"})

09:39:15 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x34, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768"})

09:39:15 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x0, 0x0, &(0x7f00000002c0)})

09:39:15 executing program 3:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

[  740.372528][T19866] binder: 19863:19866 ioctl c0306201 0 returned -14
09:39:15 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs], 0x4e, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c"})

09:39:15 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4e, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c"})

09:39:15 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x34, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768"})

09:39:15 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4e, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c"})

09:39:15 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x5b, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334"})

09:39:15 executing program 4:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x0, 0x0, &(0x7f00000002c0)})

09:39:15 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs], 0x4e, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c"})

09:39:15 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x5b, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334"})

09:39:15 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4e, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c"})

09:39:15 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}, 0x40}, @decrefs], 0x34, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768"})

09:39:15 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x0, 0x0, &(0x7f00000002c0)})

09:39:15 executing program 4:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x0, 0x0, &(0x7f00000002c0)})

09:39:15 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4e, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c"})

09:39:15 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x5b, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334"})

09:39:15 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs], 0x55, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb6"})

09:39:15 executing program 4:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs={0x40046307, 0x2}], 0x0, 0x0, &(0x7f00000002c0)})

09:39:15 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@decrefs], 0x0, 0x0, &(0x7f00000002c0)})

09:39:15 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}, @decrefs], 0x34, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768"})

09:39:15 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4e, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c"})

09:39:15 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

09:39:15 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4e, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c"})

09:39:15 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs], 0x4f, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c81"})

09:39:15 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs], 0x34, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768"})

09:39:15 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:15 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4e, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c"})

09:39:15 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

09:39:15 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4e, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c"})

[  740.963769][T19921] binder: 19919:19921 ioctl c0306201 0 returned -14
09:39:15 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs], 0x4f, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c81"})

09:39:15 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs], 0x0, 0x0, 0x0})

09:39:15 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:16 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs], 0x0, 0x0, 0x0})

09:39:16 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs], 0x4f, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c81"})

09:39:16 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x55, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb6"})

09:39:16 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[  741.099194][T19934] binder: 19929:19934 ioctl c0306201 0 returned -14
09:39:16 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4e, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c"})

09:39:16 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:16 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs], 0x52, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c7"})

09:39:16 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)})

09:39:16 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs], 0x0, 0x0, 0x0})

09:39:16 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4f, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c81"})

09:39:16 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x55, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb6"})

[  741.248607][T19949] binder: 19942:19949 ioctl c0306201 0 returned -14
09:39:16 executing program 3:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:16 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs], 0x4f, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c81"})

09:39:16 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs], 0x0, 0x0, &(0x7f00000002c0)})

09:39:16 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)})

09:39:16 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4f, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c81"})

09:39:16 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4f, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c81"})

09:39:16 executing program 3:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:16 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs], 0x4f, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c81"})

09:39:16 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4f, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c81"})

09:39:16 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4f, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c81"})

09:39:16 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs], 0x0, 0x0, &(0x7f00000002c0)})

09:39:16 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)})

09:39:16 executing program 3:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:16 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs], 0x4f, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c81"})

09:39:16 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs], 0x0, 0x0, &(0x7f00000002c0)})

09:39:16 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}], 0x0, 0x0, &(0x7f00000002c0)})

09:39:16 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4f, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c81"})

09:39:16 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x52, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c7"})

09:39:16 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:16 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs], 0x51, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58"})

09:39:16 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f00000002c0)})

09:39:16 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs], 0x1a, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500c"})

09:39:16 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4f, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c81"})

09:39:16 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x52, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c7"})

09:39:16 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:16 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f00000002c0)})

09:39:16 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs], 0x0, 0x0, &(0x7f00000002c0)})

09:39:16 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4f, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c81"})

09:39:16 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4f, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c81"})

09:39:16 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs], 0x50, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b"})

09:39:16 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:16 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f00000002c0)})

09:39:17 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs], 0x4f, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c81"})

09:39:17 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4f, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c81"})

09:39:17 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs], 0x0, 0x0, &(0x7f00000002c0)})

09:39:17 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:17 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4f, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c81"})

09:39:17 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}], 0x0, 0x0, &(0x7f00000002c0)})

09:39:17 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs], 0x0, 0x0, &(0x7f00000002c0)})

09:39:17 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs], 0x4f, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c81"})

09:39:17 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4f, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c81"})

09:39:17 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x51, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58"})

09:39:17 executing program 3:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:17 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs], 0x4f, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c81"})

09:39:17 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs], 0xd, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27"})

09:39:17 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x51, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58"})

09:39:17 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}], 0x0, 0x0, &(0x7f00000002c0)})

09:39:17 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b"})

09:39:17 executing program 3:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:17 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}], 0x0, 0x0, &(0x7f00000002c0)})

09:39:17 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs], 0x0, 0x0, &(0x7f00000002c0)})

09:39:17 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}, 0x40}], 0x0, 0x0, &(0x7f00000002c0)})

09:39:17 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b"})

09:39:17 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4f, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c81"})

09:39:17 executing program 3:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:17 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs], 0x0, 0x0, &(0x7f00000002c0)})

09:39:17 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}], 0x0, 0x0, &(0x7f00000002c0)})

09:39:17 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, &(0x7f00000002c0)})

09:39:17 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4f, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c81"})

09:39:17 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4f, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c81"})

09:39:17 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs], 0x0, 0x0, &(0x7f00000002c0)})

09:39:17 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

09:39:17 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}], 0x0, 0x0, &(0x7f00000002c0)})

09:39:17 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f00000002c0)})

09:39:17 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4f, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c81"})

09:39:17 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4f, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c81"})

09:39:17 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs], 0x7, 0x0, &(0x7f00000002c0)="0c94779b3d72ad"})

09:39:17 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

09:39:17 executing program 0:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}], 0x0, 0x0, &(0x7f00000002c0)})

[  742.814501][T20084] binder: 20080:20084 ioctl c0306201 0 returned -14
09:39:17 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:17 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, &(0x7f00000002c0)})

09:39:17 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4f, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c81"})

09:39:17 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs], 0x1, 0x0, &(0x7f00000002c0)='\f'})

09:39:17 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

09:39:17 executing program 0:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}], 0x0, 0x0, &(0x7f00000002c0)})

09:39:17 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}, 0x40}], 0x0, 0x0, &(0x7f00000002c0)})

[  742.982072][T20098] binder: 20096:20098 ioctl c0306201 0 returned -14
09:39:17 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x51, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58"})

09:39:18 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4f, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c81"})

09:39:18 executing program 0:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}], 0x0, 0x0, &(0x7f00000002c0)})

09:39:18 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs], 0x1, 0x0, &(0x7f00000002c0)='\f'})

09:39:18 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:18 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

[  743.121636][T20113] binder: 20110:20113 ioctl c0306201 0 returned -14
09:39:18 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs], 0x0, 0x0, &(0x7f00000002c0)})

09:39:18 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}], 0x0, 0x0, &(0x7f00000002c0)})

09:39:18 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs], 0x1, 0x0, &(0x7f00000002c0)='\f'})

09:39:18 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)})

09:39:18 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x55, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb6"})

09:39:18 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:18 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

09:39:18 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}], 0x0, 0x0, &(0x7f00000002c0)})

09:39:18 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs], 0x4, 0x0, &(0x7f00000002c0)="0c94779b"})

09:39:18 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:18 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x880)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000000)={0x4, 0x4, 0x3, 0x0, 0x6})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
write$FUSE_OPEN(r1, &(0x7f0000000080)={0x20, 0x0, 0x0, {0x0, 0x1d}}, 0x20)

09:39:18 executing program 4:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x880)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000000)={0x4, 0x4, 0x3, 0x0, 0x6})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
write$FUSE_OPEN(r1, &(0x7f0000000080)={0x20, 0x0, 0x0, {0x0, 0x1d}}, 0x20)

[  743.379218][T20138] binder: 20136:20138 ioctl c0306201 0 returned -14
09:39:18 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}], 0x0, 0x0, &(0x7f00000002c0)})

09:39:18 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs], 0x1, 0x0, &(0x7f00000002c0)='\f'})

09:39:18 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:18 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:18 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x880)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000000)={0x4, 0x4, 0x3, 0x0, 0x6})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
write$FUSE_OPEN(r1, &(0x7f0000000080)={0x20, 0x0, 0x0, {0x0, 0x1d}}, 0x20)

09:39:18 executing program 4:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x4800)
ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000180))
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x80000000, <r1=>0x0}, 0x8)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c080}, 0x4004040)
setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000100)=@ccm_128={{0x303}, "9ed8add0fe07e54f", "7308d2f2968501e56e4130f9aef28d88", "cd5a3d50", "1dd9d7f3ca0668c9"}, 0x28)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r1, 0x4)

09:39:18 executing program 0:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}], 0x0, 0x0, &(0x7f00000002c0)})

09:39:18 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs], 0x1, 0x0, &(0x7f00000002c0)='\f'})

09:39:18 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:18 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x880)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000000)={0x4, 0x4, 0x3, 0x0, 0x6})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
write$FUSE_OPEN(r1, &(0x7f0000000080)={0x20, 0x0, 0x0, {0x0, 0x1d}}, 0x20)

09:39:18 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:18 executing program 4:
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2cc5c0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r1 = pidfd_getfd(r0, r0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000280)={0x81, 0x20, 0x6, {0xfff, 0x1ff}, 0x9, 0xffffffff})
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xf1, @empty, 0x5}, {0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x3b}, 0xd43}, 0xffffffffffffffff, 0x2}}, 0x48)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
waitid$P_PIDFD(0x3, r0, &(0x7f0000000040), 0x8, &(0x7f00000000c0))

09:39:18 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs], 0x1, 0x0, &(0x7f00000002c0)='\f'})

09:39:18 executing program 0:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}], 0x0, 0x0, &(0x7f00000002c0)})

09:39:18 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:18 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x880)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000000)={0x4, 0x4, 0x3, 0x0, 0x6})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)

09:39:18 executing program 1:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:18 executing program 4:
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2cc5c0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r1 = pidfd_getfd(r0, r0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000280)={0x81, 0x20, 0x6, {0xfff, 0x1ff}, 0x9, 0xffffffff})
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xf1, @empty, 0x5}, {0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x3b}, 0xd43}, 0xffffffffffffffff, 0x2}}, 0x48)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
waitid$P_PIDFD(0x3, r0, &(0x7f0000000040), 0x8, &(0x7f00000000c0))

09:39:18 executing program 0:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}], 0x0, 0x0, &(0x7f00000002c0)})

09:39:18 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs], 0x3, 0x0, &(0x7f00000002c0)="0c9477"})

09:39:18 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:18 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x880)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000000)={0x4, 0x4, 0x3, 0x0, 0x6})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)

09:39:18 executing program 4:
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2cc5c0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r1 = pidfd_getfd(r0, r0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000280)={0x81, 0x20, 0x6, {0xfff, 0x1ff}, 0x9, 0xffffffff})
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xf1, @empty, 0x5}, {0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x3b}, 0xd43}, 0xffffffffffffffff, 0x2}}, 0x48)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
waitid$P_PIDFD(0x3, r0, &(0x7f0000000040), 0x8, &(0x7f00000000c0))

09:39:18 executing program 1:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:18 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:18 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

09:39:18 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs], 0x3, 0x0, &(0x7f00000002c0)="0c9477"})

09:39:18 executing program 4:
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2cc5c0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r1 = pidfd_getfd(r0, r0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000280)={0x81, 0x20, 0x6, {0xfff, 0x1ff}, 0x9, 0xffffffff})
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xf1, @empty, 0x5}, {0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x3b}, 0xd43}, 0xffffffffffffffff, 0x2}}, 0x48)
waitid$P_PIDFD(0x3, r0, &(0x7f0000000040), 0x8, &(0x7f00000000c0))

09:39:18 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x880)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000000)={0x4, 0x4, 0x3, 0x0, 0x6})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)

09:39:18 executing program 1:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:19 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:19 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

09:39:19 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

[  744.074429][T20200] binder: 20195:20200 ioctl c0306201 0 returned -14
09:39:19 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs], 0x3, 0x0, &(0x7f00000002c0)="0c9477"})

09:39:19 executing program 4:
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2cc5c0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r1 = pidfd_getfd(r0, r0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000280)={0x81, 0x20, 0x6, {0xfff, 0x1ff}, 0x9, 0xffffffff})
waitid$P_PIDFD(0x3, r0, &(0x7f0000000040), 0x8, &(0x7f00000000c0))

09:39:19 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x880)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000000)={0x4, 0x4, 0x3, 0x0, 0x6})

09:39:19 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}, 0x40}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:19 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

09:39:19 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs], 0x1, 0x0, &(0x7f00000002c0)='\f'})

[  744.220816][T20215] binder: 20210:20215 ioctl c0306201 0 returned -14
09:39:19 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:19 executing program 4:
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2cc5c0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
pidfd_getfd(r0, r0, 0x0)
waitid$P_PIDFD(0x3, r0, &(0x7f0000000040), 0x8, &(0x7f00000000c0))

09:39:19 executing program 2:
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000000)={0x4, 0x4, 0x3, 0x0, 0x6})

09:39:19 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)})

09:39:19 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

[  744.324742][T20224] binder: 20220:20224 ioctl c0306201 0 returned -14
09:39:19 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x880)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000000)={0x4, 0x4, 0x3, 0x0, 0x6})

09:39:19 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:19 executing program 4:
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2cc5c0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
waitid$P_PIDFD(0x3, r0, &(0x7f0000000040), 0x8, &(0x7f00000000c0))

09:39:19 executing program 2:
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000000)={0x4, 0x4, 0x3, 0x0, 0x6})

09:39:19 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)})

09:39:19 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x880)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000000)={0x4, 0x4, 0x3, 0x0, 0x6})

09:39:19 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:19 executing program 2:
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000000)={0x4, 0x4, 0x3, 0x0, 0x6})

09:39:19 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:19 executing program 4:
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2cc5c0)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000040), 0x8, &(0x7f00000000c0))

09:39:19 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)})

09:39:19 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x880)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000000)={0x4, 0x4, 0x3, 0x0, 0x6})

09:39:19 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:19 executing program 1:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:19 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x880)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000000)={0x4, 0x4, 0x3, 0x0, 0x6})

09:39:19 executing program 4:
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2cc5c0)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000040), 0x8, &(0x7f00000000c0))

09:39:19 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f00000002c0)})

09:39:19 executing program 5:
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000000)={0x4, 0x4, 0x3, 0x0, 0x6})

09:39:19 executing program 1:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:19 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)})

09:39:19 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x880)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000000)={0x4, 0x4, 0x3, 0x0, 0x6})

09:39:19 executing program 4:
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2cc5c0)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000040), 0x8, &(0x7f00000000c0))

09:39:19 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f00000002c0)})

09:39:19 executing program 3:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xe, 0xffffffffffffffff)

09:39:19 executing program 5:
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000000)={0x4, 0x4, 0x3, 0x0, 0x6})

09:39:19 executing program 1:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:19 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x880)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000000)={0x4, 0x4, 0x3, 0x0, 0x6})

09:39:19 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
waitid$P_PIDFD(0x3, r0, &(0x7f0000000040), 0x8, &(0x7f00000000c0))

09:39:19 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f00000002c0)})

09:39:19 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

09:39:19 executing program 3:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:19 executing program 5:
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000000)={0x4, 0x4, 0x3, 0x0, 0x6})

09:39:19 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000000)={0x4, 0x4, 0x3, 0x0, 0x6})

09:39:20 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}], 0x0, 0x0, &(0x7f00000002c0)})

09:39:20 executing program 4:
r0 = openat$null(0xffffffffffffff9c, 0x0, 0x100, 0x0)
waitid$P_PIDFD(0x3, r0, &(0x7f0000000040), 0x8, &(0x7f00000000c0))

09:39:20 executing program 3:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @decrefs], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:20 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[  745.146191][T20297] binder: 20295:20297 ioctl c0306201 0 returned -14
09:39:20 executing program 2:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000000)={0x4, 0x4, 0x3, 0x0, 0x6})

09:39:20 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x880)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000000)={0x4, 0x4, 0x3, 0x0, 0x6})

09:39:20 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}, 0x40}], 0x0, 0x0, &(0x7f00000002c0)})

09:39:20 executing program 2:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000000)={0x4, 0x4, 0x3, 0x0, 0x6})

09:39:20 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x880)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000000)={0x4, 0x4, 0x3, 0x0, 0x6})

09:39:20 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

09:39:20 executing program 4:
r0 = openat$null(0xffffffffffffff9c, 0x0, 0x100, 0x0)
waitid$P_PIDFD(0x3, r0, &(0x7f0000000040), 0x8, &(0x7f00000000c0))

09:39:20 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, &(0x7f00000002c0)})

[  745.305421][T20314] binder: 20308:20314 ioctl c0306201 0 returned -14
09:39:20 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (fail_nth: 1)

09:39:20 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x880)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000000)={0x4, 0x4, 0x3, 0x0, 0x6})

09:39:20 executing program 2:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000000)={0x4, 0x4, 0x3, 0x0, 0x6})

09:39:20 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:20 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f00000002c0)})

09:39:20 executing program 4:
r0 = openat$null(0xffffffffffffff9c, 0x0, 0x100, 0x0)
waitid$P_PIDFD(0x3, r0, &(0x7f0000000040), 0x8, &(0x7f00000000c0))

[  745.441549][T20325] binder: 20319:20325 ioctl c0306201 0 returned -14
[  745.459177][T20328] ERROR: Out of memory at tomoyo_realpath_from_path.
09:39:20 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (fail_nth: 2)

09:39:20 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000000)={0x4, 0x4, 0x3, 0x0, 0x6})

09:39:20 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

09:39:20 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:20 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:20 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
waitid$P_PIDFD(0x3, r0, &(0x7f0000000040), 0x8, &(0x7f00000000c0))

09:39:20 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (fail_nth: 3)

[  745.611886][T20340] ERROR: Out of memory at tomoyo_realpath_from_path.
09:39:20 executing program 5:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000000)={0x4, 0x4, 0x3, 0x0, 0x6})

09:39:20 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (fail_nth: 1)

09:39:20 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (fail_nth: 1)

09:39:20 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:20 executing program 4:
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000040), 0x8, &(0x7f00000000c0))

09:39:20 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (fail_nth: 4)

[  745.752290][T20351] binder: 20348:20351 ioctl c0306201 20000340 returned -12
09:39:20 executing program 5:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000000)={0x4, 0x4, 0x3, 0x0, 0x6})

09:39:20 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (fail_nth: 2)

[  745.856674][T20362] ERROR: Out of memory at tomoyo_realpath_from_path.
[  745.872607][T20361] ERROR: Out of memory at tomoyo_realpath_from_path.
09:39:20 executing program 4:
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000040), 0x8, &(0x7f00000000c0))

09:39:20 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (fail_nth: 2)

09:39:20 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

[  745.907102][T20364] FAULT_INJECTION: forcing a failure.
[  745.907102][T20364] name fail_usercopy, interval 1, probability 0, space 0, times 0
09:39:20 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (fail_nth: 5)

09:39:20 executing program 5:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000000)={0x4, 0x4, 0x3, 0x0, 0x6})

[  745.907133][T20364] CPU: 1 PID: 20364 Comm: syz-executor.3 Not tainted 5.18.0-rc6-next-20220516-syzkaller #0
09:39:20 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (fail_nth: 3)

09:39:21 executing program 4:
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000040), 0x8, &(0x7f00000000c0))

09:39:21 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

09:39:21 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (fail_nth: 3)

09:39:21 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:21 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (fail_nth: 6)

[  745.907157][T20364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  745.907170][T20364] Call Trace:
[  745.907175][T20364]  <TASK>
[  745.907183][T20364]  dump_stack_lvl+0xcd/0x134
[  745.907227][T20364]  should_fail.cold+0x5/0xa
09:39:21 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

09:39:21 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (fail_nth: 4)

09:39:21 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
waitid$P_PIDFD(0x3, r0, 0x0, 0x8, &(0x7f00000000c0))

09:39:21 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

[  745.907253][T20364]  _copy_from_user+0x2a/0x170
[  745.907309][T20364]  binder_ioctl+0x560/0x6d80
09:39:21 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:21 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (fail_nth: 7)

[  745.907462][T20364]  ? __sanitizer_cov_trace_const_cmp1+0x22/0x80
[  745.907498][T20364]  ? tomoyo_path_number_perm+0x24e/0x590
[  745.907565][T20364]  ? tomoyo_execute_permission+0x4a0/0x4a0
09:39:21 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0)

09:39:21 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (fail_nth: 5)

[  745.907607][T20364]  ? lockdep_hardirqs_on_prepare+0x400/0x400
09:39:21 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
waitid$P_PIDFD(0x3, r0, 0x0, 0x0, &(0x7f00000000c0))

09:39:21 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (fail_nth: 1)

09:39:21 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:21 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  745.907655][T20364]  ? binder_thread_write+0x3220/0x3220
[  745.907691][T20364]  ? __sanitizer_cov_trace_const_cmp2+0x22/0x80
09:39:21 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x10, 0x0)

[  745.907722][T20364]  ? do_vfs_ioctl+0x132/0x15c0
09:39:21 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (fail_nth: 6)

[  745.907757][T20364]  ? vfs_fileattr_set+0xbe0/0xbe0
[  745.907807][T20364]  ? __context_tracking_exit+0xb8/0xe0
09:39:21 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
waitid$P_PIDFD(0x3, r0, 0x0, 0x0, &(0x7f00000000c0))

09:39:21 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (fail_nth: 2)

09:39:21 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/106, 0x6a, 0x1, 0xf}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

[  745.907841][T20364]  ? __fget_files+0x286/0x470
[  745.907881][T20364]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
09:39:21 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x2, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:21 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
waitid$P_PIDFD(0x3, r0, 0x0, 0x0, &(0x7f00000000c0))

[  745.907914][T20364]  ? binder_thread_write+0x3220/0x3220
[  745.907955][T20364]  __x64_sys_ioctl+0x193/0x200
[  745.907992][T20364]  do_syscall_64+0x35/0xb0
09:39:21 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x541b, 0x0)

09:39:21 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (fail_nth: 3)

09:39:21 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (fail_nth: 7)

09:39:21 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}, 0x40}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

[  745.908024][T20364]  entry_SYSCALL_64_after_hwframe+0x46/0xb0
[  745.908052][T20364] RIP: 0033:0x7fedcda890e9
09:39:21 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x10, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  745.908072][T20364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
09:39:21 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
waitid$P_PIDFD(0x3, r0, 0x0, 0x8, 0x0)

09:39:21 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x5420, 0x0)

09:39:21 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

09:39:21 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:21 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

[  745.908095][T20364] RSP: 002b:00007fedcec56168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
09:39:21 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x541b, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  745.908118][T20364] RAX: ffffffffffffffda RBX: 00007fedcdb9bf60 RCX: 00007fedcda890e9
09:39:21 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x10, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:21 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x5421, 0x0)

09:39:21 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0)

09:39:21 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x68, 0x0, &(0x7f00000002c0)="0c94779b3d72ad71be0574ab27a9843b4a79ff72fef9c7be500cc53917621709e48ab1c95349302be92b45a877e59474e481e768017005045b47c75d7c1d04d87f9cf3e7c5d04b3ca80db13cd71c810b58c709fdb61272f4d36334ce6959c3101db6d10cd530386b"})

09:39:21 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x2, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  745.908134][T20364] RDX: 0000000020000340 RSI: 00000000c0306201 RDI: 0000000000000003
[  745.908149][T20364] RBP: 00007fedcec561d0 R08: 0000000000000000 R09: 0000000000000000
09:39:21 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  745.908164][T20364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  745.908178][T20364] R13: 00007ffd2714f20f R14: 00007fedcec56300 R15: 0000000000022000
09:39:22 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x10, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:22 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x10, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:22 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x10, 0x0)

09:39:22 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:22 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x5422, 0x0)

[  745.908210][T20364]  </TASK>
[  745.945667][T20364] binder: 20360:20364 ioctl c0306201 20000340 returned -14
09:39:22 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5450, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.013712][T20372] ERROR: Out of memory at tomoyo_realpath_from_path.
09:39:22 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x10, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:22 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x5423, 0x0)

09:39:22 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x541b, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.028480][T20370] ERROR: Out of memory at tomoyo_realpath_from_path.
[  746.056586][T20377] FAULT_INJECTION: forcing a failure.
[  746.056586][T20377] name fail_usercopy, interval 1, probability 0, space 0, times 0
09:39:22 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x541b, 0x0)

09:39:22 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.056618][T20377] CPU: 0 PID: 20377 Comm: syz-executor.3 Not tainted 5.18.0-rc6-next-20220516-syzkaller #0
09:39:22 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5451, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:22 executing program 4:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:22 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:22 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x5450, 0x0)

[  746.056644][T20377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
09:39:22 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:22 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x5420, 0x0)

[  746.056658][T20377] Call Trace:
[  746.056664][T20377]  <TASK>
[  746.056672][T20377]  dump_stack_lvl+0xcd/0x134
[  746.056710][T20377]  should_fail.cold+0x5/0xa
09:39:22 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5452, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:22 executing program 4:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.056740][T20377]  _copy_from_user+0x2a/0x170
09:39:22 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5450, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.056785][T20377]  binder_thread_write+0x858/0x3220
09:39:22 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x5451, 0x0)

09:39:22 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x5421, 0x0)

09:39:22 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.056854][T20377]  ? binder_transaction+0x9ae0/0x9ae0
[  746.056895][T20377]  ? find_held_lock+0x2d/0x110
09:39:22 executing program 4:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:22 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5460, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.056937][T20377]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  746.056970][T20377]  ? binder_debug+0xb2/0x160
09:39:22 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5451, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:22 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x5452, 0x0)

09:39:22 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x5422, 0x0)

[  746.056999][T20377]  ? __traceiter_binder_return+0xa0/0xa0
[  746.057027][T20377]  ? lock_downgrade+0x6e0/0x6e0
[  746.057086][T20377]  binder_ioctl+0x34a0/0x6d80
[  746.057130][T20377]  ? __sanitizer_cov_trace_const_cmp1+0x22/0x80
09:39:22 executing program 1:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)

09:39:22 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x10, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:22 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x8933, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:22 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5452, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:22 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x5460, 0x0)

09:39:22 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x5423, 0x0)

[  746.057163][T20377]  ? tomoyo_path_number_perm+0x24e/0x590
[  746.057203][T20377]  ? tomoyo_execute_permission+0x4a0/0x4a0
09:39:22 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x10, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:22 executing program 1:
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)

09:39:22 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400448c9, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.057240][T20377]  ? lockdep_hardirqs_on_prepare+0x400/0x400
[  746.057286][T20377]  ? binder_thread_write+0x3220/0x3220
09:39:22 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5460, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:22 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x54a0, 0x0)

[  746.057320][T20377]  ? __sanitizer_cov_trace_const_cmp2+0x22/0x80
[  746.057351][T20377]  ? do_vfs_ioctl+0x132/0x15c0
[  746.057385][T20377]  ? vfs_fileattr_set+0xbe0/0xbe0
09:39:22 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x5450, 0x0)

09:39:23 executing program 1:
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)

[  746.057446][T20377]  ? __fget_files+0x286/0x470
[  746.057487][T20377]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  746.057519][T20377]  ? binder_thread_write+0x3220/0x3220
09:39:23 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x10, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:23 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400448dd, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:23 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x8933, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.057561][T20377]  __x64_sys_ioctl+0x193/0x200
09:39:23 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x54a1, 0x0)

[  746.057599][T20377]  do_syscall_64+0x35/0xb0
09:39:23 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x5451, 0x0)

[  746.057632][T20377]  entry_SYSCALL_64_after_hwframe+0x46/0xb0
[  746.057661][T20377] RIP: 0033:0x7fedcda890e9
09:39:23 executing program 1:
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)

09:39:23 executing program 4:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:23 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400448c9, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:23 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400454ca, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.057681][T20377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
09:39:23 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x54a2, 0x0)

09:39:23 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x5452, 0x0)

09:39:23 executing program 4:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:23 executing program 1:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x54a1, 0x0)

[  746.057705][T20377] RSP: 002b:00007fedcec56168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
09:39:23 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400448dd, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:23 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.057730][T20377] RAX: ffffffffffffffda RBX: 00007fedcdb9bf60 RCX: 00007fedcda890e9
09:39:23 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x54a3, 0x0)

09:39:23 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x5460, 0x0)

[  746.057747][T20377] RDX: 0000000020000340 RSI: 00000000c0306201 RDI: 0000000000000003
09:39:23 executing program 4:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.057762][T20377] RBP: 00007fedcec561d0 R08: 0000000000000000 R09: 0000000000000000
09:39:23 executing program 1:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x54a1, 0x0)

09:39:23 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:23 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400454ca, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.057777][T20377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  746.057791][T20377] R13: 00007ffd2714f20f R14: 00007fedcec56300 R15: 0000000000022000
09:39:23 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x8933, 0x0)

09:39:23 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x54a0, 0x0)

[  746.057831][T20377]  </TASK>
[  746.057843][T20377] binder: 20376:20377 ioctl c0306201 20000340 returned -14
09:39:23 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:23 executing program 1:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x54a1, 0x0)

09:39:23 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x10, 0x0)

09:39:23 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.168530][T20383] FAULT_INJECTION: forcing a failure.
[  746.168530][T20383] name fail_usercopy, interval 1, probability 0, space 0, times 0
09:39:23 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x400448c9, 0x0)

09:39:23 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x54a1, 0x0)

09:39:23 executing program 1:
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x54a1, 0x0)

09:39:23 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.168563][T20383] CPU: 1 PID: 20383 Comm: syz-executor.2 Not tainted 5.18.0-rc6-next-20220516-syzkaller #0
[  746.168590][T20383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
09:39:23 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:23 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:23 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x400448dd, 0x0)

09:39:23 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x54a2, 0x0)

[  746.168604][T20383] Call Trace:
[  746.168610][T20383]  <TASK>
[  746.168619][T20383]  dump_stack_lvl+0xcd/0x134
[  746.168656][T20383]  should_fail.cold+0x5/0xa
09:39:23 executing program 1:
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x54a1, 0x0)

[  746.168688][T20383]  _copy_to_user+0x2a/0x140
[  746.168732][T20383]  simple_read_from_buffer+0xcc/0x160
[  746.168778][T20383]  proc_fail_nth_read+0x187/0x220
09:39:23 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:23 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40049409, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:23 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:23 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40045402, 0x0)

[  746.168820][T20383]  ? proc_exe_link+0x1d0/0x1d0
[  746.168860][T20383]  ? security_file_permission+0xab/0xd0
[  746.168904][T20383]  ? proc_exe_link+0x1d0/0x1d0
09:39:24 executing program 1:
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x54a1, 0x0)

[  746.168945][T20383]  vfs_read+0x1ef/0x5d0
09:39:24 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x54a3, 0x0)

09:39:24 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.168987][T20383]  ksys_read+0x127/0x250
09:39:24 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.169025][T20383]  ? vfs_write+0xac0/0xac0
[  746.169065][T20383]  ? syscall_enter_from_user_mode+0x21/0x70
09:39:24 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x400454a4, 0x0)

09:39:24 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40086602, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:24 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x8933, 0x0)

09:39:24 executing program 1:
r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x54a1, 0x0)

[  746.169116][T20383]  do_syscall_64+0x35/0xb0
[  746.169148][T20383]  entry_SYSCALL_64_after_hwframe+0x46/0xb0
09:39:24 executing program 4:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046207, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.169177][T20383] RIP: 0033:0x7fedcb63bc9c
[  746.169196][T20383] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
09:39:24 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:24 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x400454ca, 0x0)

09:39:24 executing program 1:
r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x54a1, 0x0)

09:39:24 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x400448c9, 0x0)

09:39:24 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40049409, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.169220][T20383] RSP: 002b:00007fedcc73a160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
09:39:24 executing program 4:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046207, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.169245][T20383] RAX: ffffffffffffffda RBX: 00007fedcb79bf60 RCX: 00007fedcb63bc9c
09:39:24 executing program 1:
r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x54a1, 0x0)

09:39:24 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.169262][T20383] RDX: 000000000000000f RSI: 00007fedcc73a1e0 RDI: 0000000000000004
[  746.169277][T20383] RBP: 00007fedcc73a1d0 R08: 0000000000000000 R09: 0000000000000000
09:39:24 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x400448dd, 0x0)

09:39:24 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40086602, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:24 executing program 4:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046207, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:24 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40049409, 0x0)

[  746.169292][T20383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
09:39:24 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.169313][T20383] R13: 00007ffc208ff4af R14: 00007fedcc73a300 R15: 0000000000022000
09:39:24 executing program 1:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x54a1, 0x0)

09:39:24 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:24 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40086602, 0x0)

[  746.169349][T20383]  </TASK>
[  746.188459][T20385] binder: 20379:20385 ioctl c0306201 20000340 returned -12
09:39:24 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:24 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40045402, 0x0)

[  746.235007][T20390] FAULT_INJECTION: forcing a failure.
[  746.235007][T20390] name fail_usercopy, interval 1, probability 0, space 0, times 0
09:39:24 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x4020940d, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:24 executing program 1:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x54a1, 0x0)

[  746.235040][T20390] CPU: 0 PID: 20390 Comm: syz-executor.3 Not tainted 5.18.0-rc6-next-20220516-syzkaller #0
09:39:24 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:24 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x401c5820, 0x0)

09:39:24 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:24 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x400454a4, 0x0)

[  746.235067][T20390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
09:39:24 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x80086301, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:24 executing program 1:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x54a1, 0x0)

[  746.235082][T20390] Call Trace:
[  746.235088][T20390]  <TASK>
[  746.235096][T20390]  dump_stack_lvl+0xcd/0x134
09:39:24 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:24 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x4020940d, 0x0)

09:39:24 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:24 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x400454ca, 0x0)

[  746.235134][T20390]  should_fail.cold+0x5/0xa
[  746.235163][T20390]  _copy_to_user+0x2a/0x140
[  746.235206][T20390]  binder_ioctl+0x701/0x6d80
[  746.235254][T20390]  ? __sanitizer_cov_trace_const_cmp1+0x22/0x80
09:39:24 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x80086601, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:24 executing program 1:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x401c5820, 0x0)

09:39:24 executing program 4:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046207, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.235288][T20390]  ? tomoyo_path_number_perm+0x24e/0x590
[  746.235329][T20390]  ? tomoyo_execute_permission+0x4a0/0x4a0
09:39:25 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40345410, 0x0)

09:39:25 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x4020940d, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:25 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40049409, 0x0)

[  746.235367][T20390]  ? lockdep_hardirqs_on_prepare+0x400/0x400
[  746.235418][T20390]  ? binder_thread_write+0x3220/0x3220
[  746.235456][T20390]  ? __sanitizer_cov_trace_const_cmp2+0x22/0x80
09:39:25 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x801c581f, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:25 executing program 1:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x401c5820, 0x0)

09:39:25 executing program 4:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046207, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.235509][T20390]  ? do_vfs_ioctl+0x132/0x15c0
09:39:25 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40485404, 0x0)

[  746.235547][T20390]  ? vfs_fileattr_set+0xbe0/0xbe0
09:39:25 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x80086301, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.235611][T20390]  ? __fget_files+0x286/0x470
09:39:25 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40086602, 0x0)

09:39:25 executing program 1:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x401c5820, 0x0)

09:39:25 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:25 executing program 4:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046207, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.235652][T20390]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  746.235684][T20390]  ? binder_thread_write+0x3220/0x3220
09:39:25 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x80045400, 0x0)

[  746.235725][T20390]  __x64_sys_ioctl+0x193/0x200
[  746.235762][T20390]  do_syscall_64+0x35/0xb0
09:39:25 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x80086601, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:25 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x401c5820, 0x0)

[  746.235795][T20390]  entry_SYSCALL_64_after_hwframe+0x46/0xb0
[  746.235829][T20390] RIP: 0033:0x7fedcda890e9
09:39:25 executing program 1:
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x401c5820, 0x0)

09:39:25 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0)

09:39:25 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x80086301, 0x0)

09:39:25 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.235849][T20390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
09:39:25 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x801c581f, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:25 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x4020940d, 0x0)

[  746.235873][T20390] RSP: 002b:00007fedcec56168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
09:39:25 executing program 1:
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x401c5820, 0x0)

09:39:25 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:25 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:25 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x80086601, 0x0)

[  746.235896][T20390] RAX: ffffffffffffffda RBX: 00007fedcdb9bf60 RCX: 00007fedcda890e9
09:39:25 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.235912][T20390] RDX: 0000000020000340 RSI: 00000000c0306201 RDI: 0000000000000003
[  746.235927][T20390] RBP: 00007fedcec561d0 R08: 0000000000000000 R09: 0000000000000000
09:39:25 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40345410, 0x0)

09:39:25 executing program 1:
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x401c5820, 0x0)

[  746.235941][T20390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
09:39:25 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:25 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x801c581f, 0x0)

09:39:25 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.235955][T20390] R13: 00007ffd2714f20f R14: 00007fedcec56300 R15: 0000000000022000
09:39:25 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.235989][T20390]  </TASK>
[  746.235997][T20390] binder: 20389:20390 ioctl c0306201 20000340 returned -14
09:39:25 executing program 1:
r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x401c5820, 0x0)

09:39:25 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40485404, 0x0)

09:39:25 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x80585414, 0x0)

[  746.343969][T20397] FAULT_INJECTION: forcing a failure.
[  746.343969][T20397] name fail_usercopy, interval 1, probability 0, space 0, times 0
09:39:25 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:25 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc00c6211, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:25 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.344003][T20397] CPU: 1 PID: 20397 Comm: syz-executor.0 Not tainted 5.18.0-rc6-next-20220516-syzkaller #0
09:39:25 executing program 1:
r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x401c5820, 0x0)

09:39:25 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x80045400, 0x0)

[  746.344029][T20397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
09:39:25 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x80605414, 0x0)

09:39:25 executing program 4:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0045878, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:25 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:26 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:26 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x80086301, 0x0)

09:39:26 executing program 1:
r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x401c5820, 0x0)

[  746.344041][T20397] Call Trace:
[  746.344047][T20397]  <TASK>
[  746.344055][T20397]  dump_stack_lvl+0xcd/0x134
09:39:26 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x80e85411, 0x0)

09:39:26 executing program 4:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0045878, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.344091][T20397]  should_fail.cold+0x5/0xa
[  746.344123][T20397]  _copy_from_user+0x2a/0x170
[  746.344167][T20397]  binder_ioctl+0x560/0x6d80
09:39:26 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc00c6211, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:26 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:26 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x80086601, 0x0)

09:39:26 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0xc0045878, 0x0)

09:39:26 executing program 1:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x401c5820, 0x0)

09:39:26 executing program 4:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0045878, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:26 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x801c581f, 0x0)

[  746.344213][T20397]  ? __sanitizer_cov_trace_const_cmp1+0x22/0x80
[  746.344247][T20397]  ? tomoyo_path_number_perm+0x24e/0x590
09:39:26 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:26 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0189436, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:26 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:26 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0xc0045878, 0x0)

09:39:26 executing program 1:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x401c5820, 0x0)

[  746.344285][T20397]  ? tomoyo_execute_permission+0x4a0/0x4a0
[  746.344331][T20397]  ? lockdep_hardirqs_on_prepare+0x400/0x400
09:39:26 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:26 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x80585414, 0x0)

09:39:26 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc020660b, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:26 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0xc0145401, 0x0)

09:39:26 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.344377][T20397]  ? binder_thread_write+0x3220/0x3220
[  746.344414][T20397]  ? __sanitizer_cov_trace_const_cmp2+0x22/0x80
09:39:26 executing program 1:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x401c5820, 0x0)

09:39:26 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306202, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.344447][T20397]  ? do_vfs_ioctl+0x132/0x15c0
09:39:26 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0189436, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:26 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x80605414, 0x0)

09:39:26 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0xc0189436, 0x0)

09:39:26 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:26 executing program 1:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0xc0145401, 0x0)

[  746.344482][T20397]  ? vfs_fileattr_set+0xbe0/0xbe0
[  746.344530][T20397]  ? __context_tracking_exit+0xb8/0xe0
[  746.344564][T20397]  ? __fget_files+0x286/0x470
09:39:26 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x80e85411, 0x0)

09:39:26 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc020660b, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:26 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306203, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:26 executing program 1:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0xc0145401, 0x0)

09:39:26 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0xc020660b, 0x0)

[  746.344602][T20397]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  746.344635][T20397]  ? binder_thread_write+0x3220/0x3220
09:39:26 executing program 4:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0045878, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:26 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0xc0045878, 0x0)

09:39:26 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306202, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:26 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306205, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.344674][T20397]  __x64_sys_ioctl+0x193/0x200
[  746.344709][T20397]  do_syscall_64+0x35/0xb0
09:39:26 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0xc0505405, 0x0)

09:39:26 executing program 1:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0xc0145401, 0x0)

09:39:26 executing program 4:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0045878, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.344741][T20397]  entry_SYSCALL_64_after_hwframe+0x46/0xb0
[  746.344768][T20397] RIP: 0033:0x7f73fec890e9
09:39:26 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306203, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:26 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0xc0045878, 0x0)

09:39:26 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0xc0f85403, 0x0)

09:39:26 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306207, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:26 executing program 1:
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0xc0145401, 0x0)

[  746.344787][T20397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
09:39:26 executing program 4:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0045878, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:26 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306205, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:26 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0xc0145401, 0x0)

09:39:26 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x680)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$802154_dgram(r1, &(0x7f00000001c0)={&(0x7f0000000140), 0x14, &(0x7f0000000180)={&(0x7f0000000280)="c599faa5f781b7846cdf21dfaa38d58fddaa4601bad22ae59b713b247fcd755271568214521c7ff02475afd14777df1778f07385bbe021c4b569a0b1bbb5b0b6d08c56f492f00e312448bb607adac4cf65286573cab3523aea95737cdd6f6ddbbfc8a3586ad6b23c48ff537abbf2d355aa4a8ed525dc7d182c4b8c7b7f62939b33f21d0f948053d8267cb88edcb3a87f527c052aac560a1da5", 0x99}, 0x1, 0x0, 0x0, 0x40}, 0x40891)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000040)=""/197)

09:39:26 executing program 1:
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0xc0145401, 0x0)

09:39:26 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306215, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:26 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0045878, 0x0)

[  746.344813][T20397] RSP: 002b:00007f73ffd08168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
09:39:26 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306207, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:26 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0xc0189436, 0x0)

09:39:26 executing program 1:
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0xc0145401, 0x0)

09:39:26 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x2, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:26 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x680)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$802154_dgram(r1, &(0x7f00000001c0)={&(0x7f0000000140), 0x14, &(0x7f0000000180)={&(0x7f0000000280)="c599faa5f781b7846cdf21dfaa38d58fddaa4601bad22ae59b713b247fcd755271568214521c7ff02475afd14777df1778f07385bbe021c4b569a0b1bbb5b0b6d08c56f492f00e312448bb607adac4cf65286573cab3523aea95737cdd6f6ddbbfc8a3586ad6b23c48ff537abbf2d355aa4a8ed525dc7d182c4b8c7b7f62939b33f21d0f948053d8267cb88edcb3a87f527c052aac560a1da5", 0x99}, 0x1, 0x0, 0x0, 0x40}, 0x40891) (async, rerun: 32)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async, rerun: 32)
ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000040)=""/197)

09:39:26 executing program 4:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0xc0f85403, 0x0)

[  746.344837][T20397] RAX: ffffffffffffffda RBX: 00007f73fed9bf60 RCX: 00007f73fec890e9
[  746.344854][T20397] RDX: 0000000020000340 RSI: 00000000c0306201 RDI: 0000000000000003
09:39:26 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306215, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:26 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0xc020660b, 0x0)

09:39:26 executing program 4:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0xc0f85403, 0x0)

09:39:26 executing program 1:
r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0xc0145401, 0x0)

[  746.344869][T20397] RBP: 00007f73ffd081d0 R08: 0000000000000000 R09: 0000000000000000
09:39:26 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x3, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:26 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x680)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$802154_dgram(r1, &(0x7f00000001c0)={&(0x7f0000000140), 0x14, &(0x7f0000000180)={&(0x7f0000000280)="c599faa5f781b7846cdf21dfaa38d58fddaa4601bad22ae59b713b247fcd755271568214521c7ff02475afd14777df1778f07385bbe021c4b569a0b1bbb5b0b6d08c56f492f00e312448bb607adac4cf65286573cab3523aea95737cdd6f6ddbbfc8a3586ad6b23c48ff537abbf2d355aa4a8ed525dc7d182c4b8c7b7f62939b33f21d0f948053d8267cb88edcb3a87f527c052aac560a1da5", 0x99}, 0x1, 0x0, 0x0, 0x40}, 0x40891)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000040)=""/197)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x680) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async)
sendmsg$802154_dgram(r1, &(0x7f00000001c0)={&(0x7f0000000140), 0x14, &(0x7f0000000180)={&(0x7f0000000280)="c599faa5f781b7846cdf21dfaa38d58fddaa4601bad22ae59b713b247fcd755271568214521c7ff02475afd14777df1778f07385bbe021c4b569a0b1bbb5b0b6d08c56f492f00e312448bb607adac4cf65286573cab3523aea95737cdd6f6ddbbfc8a3586ad6b23c48ff537abbf2d355aa4a8ed525dc7d182c4b8c7b7f62939b33f21d0f948053d8267cb88edcb3a87f527c052aac560a1da5", 0x99}, 0x1, 0x0, 0x0, 0x40}, 0x40891) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000040)=""/197) (async)

09:39:26 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x2, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.344884][T20397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
09:39:26 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0xc0505405, 0x0)

09:39:26 executing program 1:
r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0xc0145401, 0x0)

09:39:26 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x4, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:26 executing program 4:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0xc0f85403, 0x0)

[  746.344898][T20397] R13: 00007ffd69b839ef R14: 00007f73ffd08300 R15: 0000000000022000
09:39:26 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x5, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:26 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x410a00, 0x0)

09:39:26 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x3, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:27 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0xc0f85403, 0x0)

[  746.344931][T20397]  </TASK>
[  746.345083][T20397] binder: 20395:20397 ioctl c0306201 20000340 returned -14
[  746.422749][T20404] FAULT_INJECTION: forcing a failure.
[  746.422749][T20404] name fail_usercopy, interval 1, probability 0, space 0, times 0
09:39:27 executing program 1:
r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0xc0145401, 0x0)

09:39:27 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x410a00, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x410a00, 0x0) (async)

09:39:27 executing program 4:
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0xc0f85403, 0x0)

09:39:27 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x6, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:27 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x4, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.422782][T20404] CPU: 1 PID: 20404 Comm: syz-executor.3 Not tainted 5.18.0-rc6-next-20220516-syzkaller #0
09:39:27 executing program 4:
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0xc0f85403, 0x0)

09:39:27 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000000)={0x1, 0x2, 0x4, 0x0, 0x11})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000100)={0x0, 0x7, 0x5, 0x0, 0x944c206878ffbd83})
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x4400)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0)

09:39:27 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x410a00, 0x0)

09:39:27 executing program 1:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0xc0145401, 0x0)

09:39:27 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x5, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:27 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x7, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.422809][T20404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  746.422823][T20404] Call Trace:
09:39:27 executing program 2:
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$FUSE_BMAP(r0, &(0x7f0000000080)={0x18, 0xffffffffffffffda}, 0x18)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
write$FUSE_STATFS(r1, &(0x7f0000000100)={0x60, 0xfffffffffffffffe, 0x0, {{0x80000000, 0xac, 0x100000000, 0xb5, 0x7fffffffffffffff, 0x0, 0x4, 0xc9bc}}}, 0x60)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0)

09:39:27 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000000)={0x1, 0x2, 0x4, 0x0, 0x11})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000100)={0x0, 0x7, 0x5, 0x0, 0x944c206878ffbd83})
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x4400)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, 0x0) (async)
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000000)={0x1, 0x2, 0x4, 0x0, 0x11}) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000100)={0x0, 0x7, 0x5, 0x0, 0x944c206878ffbd83}) (async)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x4400) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0) (async)

09:39:27 executing program 1:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0xc0145401, 0x0)

09:39:27 executing program 4:
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0xc0f85403, 0x0)

[  746.422829][T20404]  <TASK>
[  746.422838][T20404]  dump_stack_lvl+0xcd/0x134
[  746.422875][T20404]  should_fail.cold+0x5/0xa
09:39:27 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x300, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:27 executing program 2:
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$FUSE_BMAP(r0, &(0x7f0000000080)={0x18, 0xffffffffffffffda}, 0x18)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
write$FUSE_STATFS(r1, &(0x7f0000000100)={0x60, 0xfffffffffffffffe, 0x0, {{0x80000000, 0xac, 0x100000000, 0xb5, 0x7fffffffffffffff, 0x0, 0x4, 0xc9bc}}}, 0x60)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
write$FUSE_BMAP(r0, &(0x7f0000000080)={0x18, 0xffffffffffffffda}, 0x18) (async)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async)
read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
write$FUSE_STATFS(r1, &(0x7f0000000100)={0x60, 0xfffffffffffffffe, 0x0, {{0x80000000, 0xac, 0x100000000, 0xb5, 0x7fffffffffffffff, 0x0, 0x4, 0xc9bc}}}, 0x60) (async)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0) (async)

[  746.422904][T20404]  _copy_to_user+0x2a/0x140
[  746.422945][T20404]  simple_read_from_buffer+0xcc/0x160
09:39:27 executing program 4:
r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0xc0f85403, 0x0)

09:39:27 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000000)={0x1, 0x2, 0x4, 0x0, 0x11}) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000100)={0x0, 0x7, 0x5, 0x0, 0x944c206878ffbd83}) (async)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x4400)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0)

[  746.422988][T20404]  proc_fail_nth_read+0x187/0x220
09:39:27 executing program 1:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0xc0145401, 0x0)

09:39:27 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x6, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:27 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x500, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.423027][T20404]  ? proc_exe_link+0x1d0/0x1d0
09:39:27 executing program 4:
r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0xc0f85403, 0x0)

09:39:27 executing program 2:
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$FUSE_BMAP(r0, &(0x7f0000000080)={0x18, 0xffffffffffffffda}, 0x18) (async, rerun: 64)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) (async, rerun: 64)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async, rerun: 64)
write$FUSE_STATFS(r1, &(0x7f0000000100)={0x60, 0xfffffffffffffffe, 0x0, {{0x80000000, 0xac, 0x100000000, 0xb5, 0x7fffffffffffffff, 0x0, 0x4, 0xc9bc}}}, 0x60)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0)

09:39:27 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x7, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:27 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x300, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.423063][T20404]  ? security_file_permission+0xab/0xd0
[  746.423105][T20404]  ? proc_exe_link+0x1d0/0x1d0
09:39:27 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x600, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:27 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0xa101)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

[  746.423141][T20404]  vfs_read+0x1ef/0x5d0
[  746.423181][T20404]  ksys_read+0x127/0x250
09:39:27 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x300, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:27 executing program 4:
r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0xc0f85403, 0x0)

09:39:27 executing program 2:
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7b3d}}}, 0x90)

09:39:27 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x700, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:27 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0xa101)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0xa101) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)

[  746.423215][T20404]  ? vfs_write+0xac0/0xac0
[  746.423252][T20404]  ? syscall_enter_from_user_mode+0x21/0x70
09:39:27 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x300, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:27 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x500, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.423310][T20404]  do_syscall_64+0x35/0xb0
[  746.423343][T20404]  entry_SYSCALL_64_after_hwframe+0x46/0xb0
09:39:27 executing program 4:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0xc0f85403, 0x0)

09:39:27 executing program 2:
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7b3d}}}, 0x90)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) (async)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7b3d}}}, 0x90) (async)

09:39:27 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0xa101)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

[  746.423372][T20404] RIP: 0033:0x7fedcda3bc9c
09:39:27 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0xff00, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:27 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x300, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.423391][T20404] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
09:39:27 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x600, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:27 executing program 4:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0xc0f85403, 0x0)

09:39:27 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000180)=""/174)
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x6, 'syz1\x00', 0xfff})
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x300, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000100)={0x9, 0x0, {0x0, 0x0, 0xaead, 0x3, 0x4}, 0x1})

09:39:27 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x1000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:27 executing program 2:
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) (async)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7b3d}}}, 0x90)

09:39:27 executing program 1:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x4c, 0x300, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.423418][T20404] RSP: 002b:00007fedcec56160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
09:39:27 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x700, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:27 executing program 4:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0xc0f85403, 0x0)

09:39:27 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000180)=""/174)
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x6, 'syz1\x00', 0xfff})
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x300, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000100)={0x9, 0x0, {0x0, 0x0, 0xaead, 0x3, 0x4}, 0x1})
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000180)=""/174) (async)
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x6, 'syz1\x00', 0xfff}) (async)
openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x300, 0x0) (async)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000100)={0x9, 0x0, {0x0, 0x0, 0xaead, 0x3, 0x4}, 0x1}) (async)

09:39:27 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x2000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:27 executing program 2:
ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000000)=0x2)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)

09:39:27 executing program 1:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x4c, 0x300, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.423441][T20404] RAX: ffffffffffffffda RBX: 00007fedcdb9bf60 RCX: 00007fedcda3bc9c
09:39:27 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0xff00, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:27 executing program 4:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0xc0f85403, 0x0)

09:39:27 executing program 2:
ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000000)=0x2) (async)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)

09:39:27 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x3000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:27 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000180)=""/174)
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x6, 'syz1\x00', 0xfff})
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x300, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000100)={0x9, 0x0, {0x0, 0x0, 0xaead, 0x3, 0x4}, 0x1})
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000180)=""/174) (async)
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x6, 'syz1\x00', 0xfff}) (async)
openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x300, 0x0) (async)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000100)={0x9, 0x0, {0x0, 0x0, 0xaead, 0x3, 0x4}, 0x1}) (async)

09:39:27 executing program 1:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x4c, 0x300, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.423456][T20404] RDX: 000000000000000f RSI: 00007fedcec561e0 RDI: 0000000000000004
[  746.423471][T20404] RBP: 00007fedcec561d0 R08: 0000000000000000 R09: 0000000000000000
09:39:27 executing program 4:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0xc0f85403, 0x0)

09:39:27 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x1000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:27 executing program 2:
ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000000)=0x2) (async, rerun: 32)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (rerun: 32)

[  746.423485][T20404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  746.423502][T20404] R13: 00007ffd2714f20f R14: 00007fedcec56300 R15: 0000000000022000
09:39:27 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x300, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:27 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x4000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:27 executing program 5:
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000080)=0xfff, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6)

[  746.423535][T20404]  </TASK>
09:39:28 executing program 4:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0xc0f85403, 0x0)

09:39:28 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x2000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:28 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x300, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:28 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x5000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.526516][T20407] FAULT_INJECTION: forcing a failure.
[  746.526516][T20407] name fail_usercopy, interval 1, probability 0, space 0, times 0
09:39:28 executing program 5:
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) (async)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000080)=0xfff, 0x4) (async)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6)

09:39:28 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3)

09:39:28 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x3000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:28 executing program 4:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)

09:39:28 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3)

09:39:28 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x300, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.526549][T20407] CPU: 0 PID: 20407 Comm: syz-executor.0 Not tainted 5.18.0-rc6-next-20220516-syzkaller #0
09:39:28 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x6000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:28 executing program 1:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x4c, 0x300, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:28 executing program 5:
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000080)=0xfff, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) (async)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000080)=0xfff, 0x4) (async)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) (async)

[  746.526576][T20407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  746.526591][T20407] Call Trace:
[  746.526597][T20407]  <TASK>
09:39:28 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x4000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.526605][T20407]  dump_stack_lvl+0xcd/0x134
09:39:28 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000080)
setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000000)=0x6f3, 0x4)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000100)={0x7, 0x100, 0x80000001})
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r3, 0xc0a85322, &(0x7f0000000240))
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
r5 = getpgid(0x0)
ptrace$peek(0xffffffffffffffff, r5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f0000000300)={{0x3, 0x2, 0x5, 0x6, 'syz1\x00', 0x69a}, 0x3, 0x10, 0xdf, r5, 0x1, 0x4, 'syz1\x00', &(0x7f00000001c0)=['\x00'], 0x1, '\x00', [0x418, 0x7fff, 0x76da, 0x8000]})
r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r6)

09:39:28 executing program 4:
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)

09:39:28 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3)

09:39:28 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x7000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:28 executing program 1:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x4c, 0x300, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.526641][T20407]  should_fail.cold+0x5/0xa
[  746.526670][T20407]  _copy_from_user+0x2a/0x170
09:39:28 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000080)
setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000000)=0x6f3, 0x4)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000100)={0x7, 0x100, 0x80000001})
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r3, 0xc0a85322, &(0x7f0000000240))
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
r5 = getpgid(0x0)
ptrace$peek(0xffffffffffffffff, r5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f0000000300)={{0x3, 0x2, 0x5, 0x6, 'syz1\x00', 0x69a}, 0x3, 0x10, 0xdf, r5, 0x1, 0x4, 'syz1\x00', &(0x7f00000001c0)=['\x00'], 0x1, '\x00', [0x418, 0x7fff, 0x76da, 0x8000]})
r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r6)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000080) (async)
setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000000)=0x6f3, 0x4) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8) (async)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) (async)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000100)={0x7, 0x100, 0x80000001}) (async)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0) (async)
openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r3, 0xc0a85322, &(0x7f0000000240)) (async)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
getpgid(0x0) (async)
ptrace$peek(0xffffffffffffffff, r5, 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f0000000300)={{0x3, 0x2, 0x5, 0x6, 'syz1\x00', 0x69a}, 0x3, 0x10, 0xdf, r5, 0x1, 0x4, 'syz1\x00', &(0x7f00000001c0)=['\x00'], 0x1, '\x00', [0x418, 0x7fff, 0x76da, 0x8000]}) (async)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r6) (async)

09:39:28 executing program 1:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x4c, 0x300, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:28 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x5000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:28 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x10001)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000000)={0xf5, 0x6, 0x4, 0x2000, 0x9, {0x77359400}, {0x1, 0x0, 0x9, 0x8, 0x81, 0xff, "97314da5"}, 0x5, 0x4, {}, 0xff})
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x200c0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3)

[  746.526713][T20407]  binder_thread_write+0x858/0x3220
[  746.526769][T20407]  ? binder_transaction+0x9ae0/0x9ae0
09:39:28 executing program 4:
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)

09:39:28 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0xfdfdffff, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:28 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x10001)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)
ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000000)={0xf5, 0x6, 0x4, 0x2000, 0x9, {0x77359400}, {0x1, 0x0, 0x9, 0x8, 0x81, 0xff, "97314da5"}, 0x5, 0x4, {}, 0xff})
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x200c0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3)

[  746.526822][T20407]  ? find_held_lock+0x2d/0x110
[  746.526861][T20407]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
09:39:28 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

09:39:28 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x6000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:28 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0xff000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.526892][T20407]  ? binder_debug+0xb2/0x160
[  746.526921][T20407]  ? __traceiter_binder_return+0xa0/0xa0
09:39:28 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000080) (async)
setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000000)=0x6f3, 0x4) (async)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) (async)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000100)={0x7, 0x100, 0x80000001}) (async)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0) (async)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r3, 0xc0a85322, &(0x7f0000000240))
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
r5 = getpgid(0x0)
ptrace$peek(0xffffffffffffffff, r5, 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f0000000300)={{0x3, 0x2, 0x5, 0x6, 'syz1\x00', 0x69a}, 0x3, 0x10, 0xdf, r5, 0x1, 0x4, 'syz1\x00', &(0x7f00000001c0)=['\x00'], 0x1, '\x00', [0x418, 0x7fff, 0x76da, 0x8000]}) (async)
r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r6)

09:39:28 executing program 4:
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)

09:39:28 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x7000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:28 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

09:39:28 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x10001)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)
ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000000)={0xf5, 0x6, 0x4, 0x2000, 0x9, {0x77359400}, {0x1, 0x0, 0x9, 0x8, 0x81, 0xff, "97314da5"}, 0x5, 0x4, {}, 0xff})
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x200c0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3)

09:39:28 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0xfffffdfd, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.526950][T20407]  ? lock_downgrade+0x6e0/0x6e0
[  746.527008][T20407]  binder_ioctl+0x34a0/0x6d80
09:39:28 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0xfdfdffff, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:28 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000080)
setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000000)=0x6f3, 0x4)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000100)={0x7, 0x100, 0x80000001})
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r3, 0xc0a85322, &(0x7f0000000240))
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
r5 = getpgid(0x0)
ptrace$peek(0xffffffffffffffff, r5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f0000000300)={{0x3, 0x2, 0x5, 0x6, 'syz1\x00', 0x69a}, 0x3, 0x10, 0xdf, r5, 0x1, 0x4, 'syz1\x00', &(0x7f00000001c0)=['\x00'], 0x1, '\x00', [0x418, 0x7fff, 0x76da, 0x8000]})
r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r6)

[  746.527051][T20407]  ? __sanitizer_cov_trace_const_cmp1+0x22/0x80
[  746.527083][T20407]  ? tomoyo_path_number_perm+0x24e/0x590
09:39:28 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

09:39:28 executing program 5:
getgroups(0x5, &(0x7f0000000340)=[0xee01, 0x0, 0xffffffffffffffff, 0xee00, <r0=>0x0])
getgroups(0xa, &(0x7f0000000140)=[r0, 0xee01, 0xee00, 0xee01, 0xffffffffffffffff, <r1=>0x0, 0x0, 0xee01, 0xee00, 0xee01])
write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x1, 0x0, 0x0, 0x20, 0x0, 0x5, {0x0, 0xfff, 0xe6, 0x3, 0x0, 0x100000001, 0x49b48753, 0x57, 0x9, 0x4000, 0x4, 0xffffffffffffffff, r1, 0x7fff, 0x9}}, {0x0, 0xa}}}, 0xa0)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x165980)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000000)={0x401, 0xdc, 0x0, 'queue1\x00', 0xa93})
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x200000)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
r4 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0)
ioctl$VIDIOC_QUERYBUF_DMABUF(r3, 0xc0585609, &(0x7f00000002c0)={0xffd, 0x5, 0x4, 0x1000, 0x4, {}, {0x5, 0x1, 0x20, 0x9, 0x0, 0x11, "2514f219"}, 0x4, 0x4, {}, 0x5, 0x0, r4})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x422100)

09:39:28 executing program 2:
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000000)=0x1)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

[  746.527123][T20407]  ? tomoyo_execute_permission+0x4a0/0x4a0
[  746.527159][T20407]  ? lockdep_hardirqs_on_prepare+0x400/0x400
09:39:28 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0xff000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:28 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x100000000000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.527204][T20407]  ? binder_thread_write+0x3220/0x3220
09:39:28 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x300, 0x0, 0x0, 0x0, 0x0})

09:39:28 executing program 2:
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000000)=0x1) (async)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

09:39:28 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000080)
setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000000)=0x6f3, 0x4)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000100)={0x7, 0x100, 0x80000001})
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r3, 0xc0a85322, &(0x7f0000000240))
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
r5 = getpgid(0x0)
ptrace$peek(0xffffffffffffffff, r5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f0000000300)={{0x3, 0x2, 0x5, 0x6, 'syz1\x00', 0x69a}, 0x3, 0x10, 0xdf, r5, 0x1, 0x4, 'syz1\x00', &(0x7f00000001c0)=['\x00'], 0x1, '\x00', [0x418, 0x7fff, 0x76da, 0x8000]})
r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r6)

09:39:28 executing program 5:
getgroups(0x5, &(0x7f0000000340)=[0xee01, 0x0, 0xffffffffffffffff, 0xee00, <r0=>0x0])
getgroups(0xa, &(0x7f0000000140)=[r0, 0xee01, 0xee00, 0xee01, 0xffffffffffffffff, <r1=>0x0, 0x0, 0xee01, 0xee00, 0xee01])
write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x1, 0x0, 0x0, 0x20, 0x0, 0x5, {0x0, 0xfff, 0xe6, 0x3, 0x0, 0x100000001, 0x49b48753, 0x57, 0x9, 0x4000, 0x4, 0xffffffffffffffff, r1, 0x7fff, 0x9}}, {0x0, 0xa}}}, 0xa0)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x165980)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000000)={0x401, 0xdc, 0x0, 'queue1\x00', 0xa93})
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x200000)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
r4 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0)
ioctl$VIDIOC_QUERYBUF_DMABUF(r3, 0xc0585609, &(0x7f00000002c0)={0xffd, 0x5, 0x4, 0x1000, 0x4, {}, {0x5, 0x1, 0x20, 0x9, 0x0, 0x11, "2514f219"}, 0x4, 0x4, {}, 0x5, 0x0, r4})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x422100)
getgroups(0x5, &(0x7f0000000340)=[0xee01, 0x0, 0xffffffffffffffff, 0xee00, 0x0]) (async)
getgroups(0xa, &(0x7f0000000140)=[r0, 0xee01, 0xee00, 0xee01, 0xffffffffffffffff, 0x0, 0x0, 0xee01, 0xee00, 0xee01]) (async)
write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x1, 0x0, 0x0, 0x20, 0x0, 0x5, {0x0, 0xfff, 0xe6, 0x3, 0x0, 0x100000001, 0x49b48753, 0x57, 0x9, 0x4000, 0x4, 0xffffffffffffffff, r1, 0x7fff, 0x9}}, {0x0, 0xa}}}, 0xa0) (async)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x165980) (async)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000000)={0x401, 0xdc, 0x0, 'queue1\x00', 0xa93}) (async)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x200000) (async)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) (async)
ioctl$VIDIOC_QUERYBUF_DMABUF(r3, 0xc0585609, &(0x7f00000002c0)={0xffd, 0x5, 0x4, 0x1000, 0x4, {}, {0x5, 0x1, 0x20, 0x9, 0x0, 0x11, "2514f219"}, 0x4, 0x4, {}, 0x5, 0x0, r4}) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0) (async)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x422100) (async)

09:39:28 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x200000000000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:28 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x300, 0x0, 0x0, 0x0, 0x0})

09:39:28 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0xfffffdfd, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.527240][T20407]  ? __sanitizer_cov_trace_const_cmp2+0x22/0x80
[  746.527270][T20407]  ? do_vfs_ioctl+0x132/0x15c0
[  746.527307][T20407]  ? vfs_fileattr_set+0xbe0/0xbe0
09:39:28 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000080)
setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000000)=0x6f3, 0x4)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000100)={0x7, 0x100, 0x80000001})
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r3, 0xc0a85322, &(0x7f0000000240))
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
r5 = getpgid(0x0)
ptrace$peek(0xffffffffffffffff, r5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f0000000300)={{0x3, 0x2, 0x5, 0x6, 'syz1\x00', 0x69a}, 0x3, 0x10, 0xdf, r5, 0x1, 0x4, 'syz1\x00', &(0x7f00000001c0)=['\x00'], 0x1, '\x00', [0x418, 0x7fff, 0x76da, 0x8000]})
r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r6)

09:39:28 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x300000000000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:28 executing program 2:
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000000)=0x1) (async)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

[  746.527368][T20407]  ? __fget_files+0x286/0x470
[  746.527409][T20407]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
09:39:28 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x100000000000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:28 executing program 5:
getgroups(0x5, &(0x7f0000000340)=[0xee01, 0x0, 0xffffffffffffffff, 0xee00, <r0=>0x0])
getgroups(0xa, &(0x7f0000000140)=[r0, 0xee01, 0xee00, 0xee01, 0xffffffffffffffff, <r1=>0x0, 0x0, 0xee01, 0xee00, 0xee01])
write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x1, 0x0, 0x0, 0x20, 0x0, 0x5, {0x0, 0xfff, 0xe6, 0x3, 0x0, 0x100000001, 0x49b48753, 0x57, 0x9, 0x4000, 0x4, 0xffffffffffffffff, r1, 0x7fff, 0x9}}, {0x0, 0xa}}}, 0xa0)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x165980)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000000)={0x401, 0xdc, 0x0, 'queue1\x00', 0xa93})
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x200000)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
r4 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0)
ioctl$VIDIOC_QUERYBUF_DMABUF(r3, 0xc0585609, &(0x7f00000002c0)={0xffd, 0x5, 0x4, 0x1000, 0x4, {}, {0x5, 0x1, 0x20, 0x9, 0x0, 0x11, "2514f219"}, 0x4, 0x4, {}, 0x5, 0x0, r4})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x422100)
getgroups(0x5, &(0x7f0000000340)=[0xee01, 0x0, 0xffffffffffffffff, 0xee00, 0x0]) (async)
getgroups(0xa, &(0x7f0000000140)=[r0, 0xee01, 0xee00, 0xee01, 0xffffffffffffffff, 0x0, 0x0, 0xee01, 0xee00, 0xee01]) (async)
write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x1, 0x0, 0x0, 0x20, 0x0, 0x5, {0x0, 0xfff, 0xe6, 0x3, 0x0, 0x100000001, 0x49b48753, 0x57, 0x9, 0x4000, 0x4, 0xffffffffffffffff, r1, 0x7fff, 0x9}}, {0x0, 0xa}}}, 0xa0) (async)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x165980) (async)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000000)={0x401, 0xdc, 0x0, 'queue1\x00', 0xa93}) (async)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x200000) (async)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) (async)
ioctl$VIDIOC_QUERYBUF_DMABUF(r3, 0xc0585609, &(0x7f00000002c0)={0xffd, 0x5, 0x4, 0x1000, 0x4, {}, {0x5, 0x1, 0x20, 0x9, 0x0, 0x11, "2514f219"}, 0x4, 0x4, {}, 0x5, 0x0, r4}) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0) (async)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x422100) (async)

09:39:28 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x300, 0x0, 0x0, 0x0, 0x0})

09:39:28 executing program 2:
socket$inet_udp(0x2, 0x2, 0x0)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x18de81)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x102, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000180)={&(0x7f0000000100)="7a375c44932b46456a99ae860f48fb80d81ca414324e8c21ba36dd54f74d174acbc285d835a8802ead3b32d8cee119a5c076e274277a31d3cb54715114f480da7ec839f1c88c28a57db975dc9c8ade63d3f6f73e8847169a6aed5718fa202c1a66012f", 0x63, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000240)={r2, 0x70, &(0x7f00000001c0)=""/112})

[  746.527442][T20407]  ? binder_thread_write+0x3220/0x3220
[  746.527483][T20407]  __x64_sys_ioctl+0x193/0x200
[  746.527518][T20407]  do_syscall_64+0x35/0xb0
09:39:28 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000080)
setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000000)=0x6f3, 0x4)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000100)={0x7, 0x100, 0x80000001})
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r3, 0xc0a85322, &(0x7f0000000240))
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
r5 = getpgid(0x0)
ptrace$peek(0xffffffffffffffff, r5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f0000000300)={{0x3, 0x2, 0x5, 0x6, 'syz1\x00', 0x69a}, 0x3, 0x10, 0xdf, r5, 0x1, 0x4, 'syz1\x00', &(0x7f00000001c0)=['\x00'], 0x1, '\x00', [0x418, 0x7fff, 0x76da, 0x8000]})
r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)

09:39:28 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x400000000000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:28 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x200000000000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:28 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x300, &(0x7f0000000200), 0x0, 0x0, 0x0})

[  746.527552][T20407]  entry_SYSCALL_64_after_hwframe+0x46/0xb0
[  746.527582][T20407] RIP: 0033:0x7f73fec890e9
09:39:28 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x90, 0x0, &(0x7f0000000140)=[@acquire_done={0x40106309, 0x2}, @exit_looper, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000040)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x2, 0x2, 0xb}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}, @clear_death, @register_looper, @increfs_done={0x40106308, 0x1}, @dead_binder_done], 0xc, 0x0, &(0x7f0000000200)="a0519bf2a136009e3e7f5747"})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

09:39:28 executing program 2:
socket$inet_udp(0x2, 0x2, 0x0)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x18de81)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x102, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000180)={&(0x7f0000000100)="7a375c44932b46456a99ae860f48fb80d81ca414324e8c21ba36dd54f74d174acbc285d835a8802ead3b32d8cee119a5c076e274277a31d3cb54715114f480da7ec839f1c88c28a57db975dc9c8ade63d3f6f73e8847169a6aed5718fa202c1a66012f", 0x63, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000240)={r2, 0x70, &(0x7f00000001c0)=""/112})
socket$inet_udp(0x2, 0x2, 0x0) (async)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x18de81) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x0, 0x4}) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x102, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000180)={&(0x7f0000000100)="7a375c44932b46456a99ae860f48fb80d81ca414324e8c21ba36dd54f74d174acbc285d835a8802ead3b32d8cee119a5c076e274277a31d3cb54715114f480da7ec839f1c88c28a57db975dc9c8ade63d3f6f73e8847169a6aed5718fa202c1a66012f", 0x63}) (async)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000240)={r2, 0x70, &(0x7f00000001c0)=""/112}) (async)

09:39:28 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000080)
setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000000)=0x6f3, 0x4)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000100)={0x7, 0x100, 0x80000001})
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r3, 0xc0a85322, &(0x7f0000000240))
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
r5 = getpgid(0x0)
ptrace$peek(0xffffffffffffffff, r5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f0000000300)={{0x3, 0x2, 0x5, 0x6, 'syz1\x00', 0x69a}, 0x3, 0x10, 0xdf, r5, 0x1, 0x4, 'syz1\x00', &(0x7f00000001c0)=['\x00'], 0x1, '\x00', [0x418, 0x7fff, 0x76da, 0x8000]})
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)

09:39:28 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x300000000000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.527602][T20407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
09:39:28 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x500000000000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:28 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x300, &(0x7f0000000200), 0x0, 0x0, 0x0})

09:39:28 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x90, 0x0, &(0x7f0000000140)=[@acquire_done={0x40106309, 0x2}, @exit_looper, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000040)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x2, 0x2, 0xb}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}, @clear_death, @register_looper, @increfs_done={0x40106308, 0x1}, @dead_binder_done], 0xc, 0x0, &(0x7f0000000200)="a0519bf2a136009e3e7f5747"}) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

09:39:28 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x600000000000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:29 executing program 2:
socket$inet_udp(0x2, 0x2, 0x0)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x18de81)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x102, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000180)={&(0x7f0000000100)="7a375c44932b46456a99ae860f48fb80d81ca414324e8c21ba36dd54f74d174acbc285d835a8802ead3b32d8cee119a5c076e274277a31d3cb54715114f480da7ec839f1c88c28a57db975dc9c8ade63d3f6f73e8847169a6aed5718fa202c1a66012f", 0x63, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000240)={r2, 0x70, &(0x7f00000001c0)=""/112})
socket$inet_udp(0x2, 0x2, 0x0) (async)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x18de81) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x0, 0x4}) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x102, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000180)={&(0x7f0000000100)="7a375c44932b46456a99ae860f48fb80d81ca414324e8c21ba36dd54f74d174acbc285d835a8802ead3b32d8cee119a5c076e274277a31d3cb54715114f480da7ec839f1c88c28a57db975dc9c8ade63d3f6f73e8847169a6aed5718fa202c1a66012f", 0x63}) (async)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000240)={r2, 0x70, &(0x7f00000001c0)=""/112}) (async)

09:39:29 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x300, &(0x7f0000000200), 0x0, 0x0, 0x0})

09:39:29 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x400000000000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:29 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000080)
setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000000)=0x6f3, 0x4)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000100)={0x7, 0x100, 0x80000001})
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r3, 0xc0a85322, &(0x7f0000000240))
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
r5 = getpgid(0x0)
ptrace$peek(0xffffffffffffffff, r5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f0000000300)={{0x3, 0x2, 0x5, 0x6, 'syz1\x00', 0x69a}, 0x3, 0x10, 0xdf, r5, 0x1, 0x4, 'syz1\x00', &(0x7f00000001c0)=['\x00'], 0x1, '\x00', [0x418, 0x7fff, 0x76da, 0x8000]})

[  746.527624][T20407] RSP: 002b:00007f73ffd08168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
09:39:29 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x700000000000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:29 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x90, 0x0, &(0x7f0000000140)=[@acquire_done={0x40106309, 0x2}, @exit_looper, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000040)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x2, 0x2, 0xb}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}, @clear_death, @register_looper, @increfs_done={0x40106308, 0x1}, @dead_binder_done], 0xc, 0x0, &(0x7f0000000200)="a0519bf2a136009e3e7f5747"})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

09:39:29 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x500000000000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:29 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x262000)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000000)={0x0, 0x0, 0x523c2184, {0x4}, 0x2000000, 0x4})

09:39:29 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000080)
setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000000)=0x6f3, 0x4)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000100)={0x7, 0x100, 0x80000001})
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r3, 0xc0a85322, &(0x7f0000000240))
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
r5 = getpgid(0x0)
ptrace$peek(0xffffffffffffffff, r5, 0x0)

09:39:29 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x400000000000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.527647][T20407] RAX: ffffffffffffffda RBX: 00007f73fed9bf60 RCX: 00007f73fec890e9
[  746.527664][T20407] RDX: 0000000020000340 RSI: 00000000c0306201 RDI: 0000000000000003
09:39:29 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0xfdfdffff00000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:29 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x262000)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async, rerun: 32)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000000)={0x0, 0x0, 0x523c2184, {0x4}, 0x2000000, 0x4}) (rerun: 32)

09:39:29 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x600000000000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.527676][T20407] RBP: 00007f73ffd081d0 R08: 0000000000000000 R09: 0000000000000000
09:39:29 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000040))

09:39:29 executing program 1:
getgroups(0x5, &(0x7f0000000340)=[0xee01, 0x0, 0xffffffffffffffff, 0xee00, <r0=>0x0])
getgroups(0xa, &(0x7f0000000140)=[r0, 0xee01, 0xee00, 0xee01, 0xffffffffffffffff, <r1=>0x0, 0x0, 0xee01, 0xee00, 0xee01])
write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x1, 0x0, 0x0, 0x20, 0x0, 0x5, {0x0, 0xfff, 0xe6, 0x3, 0x0, 0x100000001, 0x49b48753, 0x57, 0x9, 0x4000, 0x4, 0xffffffffffffffff, r1, 0x7fff, 0x9}}, {0x0, 0xa}}}, 0xa0)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x165980)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000000)={0x401, 0xdc, 0x0, 'queue1\x00', 0xa93})
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x200000)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
r4 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0)
ioctl$VIDIOC_QUERYBUF_DMABUF(r3, 0xc0585609, &(0x7f00000002c0)={0xffd, 0x5, 0x4, 0x1000, 0x4, {}, {0x5, 0x1, 0x20, 0x9, 0x0, 0x11, "2514f219"}, 0x4, 0x4, {}, 0x5, 0x0, r4})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x422100)

09:39:29 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000080)
setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000000)=0x6f3, 0x4)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000100)={0x7, 0x100, 0x80000001})
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r3, 0xc0a85322, &(0x7f0000000240))
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ptrace$peek(0xffffffffffffffff, 0x0, 0x0)

09:39:29 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x700000000000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:29 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000040))

09:39:29 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0xff00000000000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.527689][T20407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  746.527702][T20407] R13: 00007ffd69b839ef R14: 00007f73ffd08300 R15: 0000000000022000
09:39:29 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x262000)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000000)={0x0, 0x0, 0x523c2184, {0x4}, 0x2000000, 0x4})

09:39:29 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

09:39:29 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000080)
setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000000)=0x6f3, 0x4)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000100)={0x7, 0x100, 0x80000001})
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r3, 0xc0a85322, &(0x7f0000000240))
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ptrace$peek(0xffffffffffffffff, 0x0, 0x0)

09:39:29 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0xfdfdffff00000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:29 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000040))

[  746.527733][T20407]  </TASK>
[  746.527745][T20407] binder: 20405:20407 ioctl c0306201 20000340 returned -14
[  746.544006][T20408] ERROR: Out of memory at tomoyo_realpath_from_path.
09:39:29 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x202000)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f00000013c0)={0x1, 0x1000, &(0x7f00000003c0)=""/4096})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8)
r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r2}, 0x8)
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000340)={r3}, 0x8)
r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x100a581}, [@cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0x7}]}, &(0x7f0000000300)='syzkaller\x00', 0x5, 0x6a, &(0x7f0000000100)=""/106, 0x40f00, 0x0, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f00000001c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0x10, 0xd4, 0x7fffffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, r3, r0, r6]}, 0x80)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, &(0x7f0000000040))

09:39:29 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:29 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

09:39:29 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0xff00000000000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:29 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000080)
setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000000)=0x6f3, 0x4)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000100)={0x7, 0x100, 0x80000001})
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r3, 0xc0a85322, &(0x7f0000000240))
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ptrace$peek(0xffffffffffffffff, 0x0, 0x0)

09:39:29 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x202000)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f00000013c0)={0x1, 0x1000, &(0x7f00000003c0)=""/4096})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8)
r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r2}, 0x8)
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000340)={r3}, 0x8)
r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x100a581}, [@cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0x7}]}, &(0x7f0000000300)='syzkaller\x00', 0x5, 0x6a, &(0x7f0000000100)=""/106, 0x40f00, 0x0, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f00000001c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0x10, 0xd4, 0x7fffffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, r3, r0, r6]}, 0x80)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, &(0x7f0000000040))
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x202000) (async)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f00000013c0)={0x1, 0x1000, &(0x7f00000003c0)=""/4096}) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) (async)
bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r2}, 0x8) (async)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000340)={r3}, 0x8) (async)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x100a581}, [@cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0x7}]}, &(0x7f0000000300)='syzkaller\x00', 0x5, 0x6a, &(0x7f0000000100)=""/106, 0x40f00, 0x0, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f00000001c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0x10, 0xd4, 0x7fffffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, r3, r0, r6]}, 0x80) (async)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, &(0x7f0000000040)) (async)

09:39:29 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x630c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.654621][T20422] ERROR: Out of memory at tomoyo_realpath_from_path.
[  746.656807][T20421] FAULT_INJECTION: forcing a failure.
[  746.656807][T20421] name fail_usercopy, interval 1, probability 0, space 0, times 0
09:39:29 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2)

09:39:29 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

09:39:29 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:29 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x630d, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:29 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000080)
setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000000)=0x6f3, 0x4)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000100)={0x7, 0x100, 0x80000001})
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r3, 0xc0a85322, &(0x7f0000000240))
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r4 = getpgid(0x0)
ptrace$peek(0xffffffffffffffff, r4, 0x0)

[  746.656841][T20421] CPU: 1 PID: 20421 Comm: syz-executor.0 Not tainted 5.18.0-rc6-next-20220516-syzkaller #0
09:39:29 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async, rerun: 64)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (rerun: 64)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2)

09:39:29 executing program 1:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

09:39:29 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x202000)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f00000013c0)={0x1, 0x1000, &(0x7f00000003c0)=""/4096}) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8)
r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r2}, 0x8)
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000340)={r3}, 0x8)
r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x100a581}, [@cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0x7}]}, &(0x7f0000000300)='syzkaller\x00', 0x5, 0x6a, &(0x7f0000000100)=""/106, 0x40f00, 0x0, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f00000001c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0x10, 0xd4, 0x7fffffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, r3, r0, r6]}, 0x80)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, &(0x7f0000000040))

09:39:29 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40046302, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.656866][T20421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
09:39:29 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000080)
setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000000)=0x6f3, 0x4)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000100)={0x7, 0x100, 0x80000001})
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r3, 0xc0a85322, &(0x7f0000000240))
r4 = getpgid(0x0)
ptrace$peek(0xffffffffffffffff, r4, 0x0)

09:39:29 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x630c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:29 executing program 1:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[  746.656880][T20421] Call Trace:
[  746.656886][T20421]  <TASK>
[  746.656895][T20421]  dump_stack_lvl+0xcd/0x134
[  746.656932][T20421]  should_fail.cold+0x5/0xa
09:39:29 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000000)={{0xff, 0xe0}, {0x9, 0xab}, 0x0, 0x0, 0x7})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

09:39:29 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40046304, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.656965][T20421]  _copy_to_user+0x2a/0x140
09:39:29 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000080)
setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000000)=0x6f3, 0x4)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000100)={0x7, 0x100, 0x80000001})
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r3 = getpgid(0x0)
ptrace$peek(0xffffffffffffffff, r3, 0x0)

09:39:29 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x630d, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:29 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) (async)

[  746.657011][T20421]  binder_ioctl+0x701/0x6d80
09:39:29 executing program 1:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

09:39:29 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async, rerun: 64)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000000)={{0xff, 0xe0}, {0x9, 0xab}, 0x0, 0x0, 0x7}) (async, rerun: 64)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

09:39:29 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40046307, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:29 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40046302, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.657058][T20421]  ? __sanitizer_cov_trace_const_cmp1+0x22/0x80
[  746.657092][T20421]  ? tomoyo_path_number_perm+0x24e/0x590
09:39:29 executing program 5:
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, r0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x4}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x11}, 0x4002)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0)
r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000040)=[@window={0x3, 0x101, 0xfff9}, @timestamp, @timestamp], 0x3)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000240)={0x3, 0x2, 0x3, 0x0, 0xf})
openat$cgroup_subtree(r2, &(0x7f0000000000), 0x2, 0x0)

09:39:29 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

09:39:29 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000080)
setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000000)=0x6f3, 0x4)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000100)={0x7, 0x100, 0x80000001})
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0)
r3 = getpgid(0x0)
ptrace$peek(0xffffffffffffffff, r3, 0x0)

09:39:29 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40046304, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:29 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:29 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000000)={{0xff, 0xe0}, {0x9, 0xab}, 0x0, 0x0, 0x7})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

[  746.657131][T20421]  ? tomoyo_execute_permission+0x4a0/0x4a0
[  746.657167][T20421]  ? lockdep_hardirqs_on_prepare+0x400/0x400
[  746.657214][T20421]  ? binder_thread_write+0x3220/0x3220
09:39:29 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000080)
setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000000)=0x6f3, 0x4)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000100)={0x7, 0x100, 0x80000001})
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r2 = getpgid(0x0)
ptrace$peek(0xffffffffffffffff, r2, 0x0)

09:39:29 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000080)={{0x2, 0x77}, 'port1\x00', 0x28, 0x1a0404, 0x9, 0x9, 0x2, 0x8, 0x6b8, 0x0, 0x1, 0xfb})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000200), 0x7, 0x141001)
ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000240)=[0x20, 0x4])
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000140)={0xd021, 0x20, 0x1, 'queue1\x00', 0x8f})

09:39:29 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

09:39:29 executing program 5:
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, r0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x4}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x11}, 0x4002) (async)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0) (async)
r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000040)=[@window={0x3, 0x101, 0xfff9}, @timestamp, @timestamp], 0x3) (async)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000240)={0x3, 0x2, 0x3, 0x0, 0xf}) (async, rerun: 64)
openat$cgroup_subtree(r2, &(0x7f0000000000), 0x2, 0x0) (rerun: 64)

09:39:29 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40046307, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:29 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x4008630a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.657261][T20421]  ? __sanitizer_cov_trace_const_cmp2+0x22/0x80
[  746.657295][T20421]  ? do_vfs_ioctl+0x132/0x15c0
09:39:29 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

09:39:29 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000080)
setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000000)=0x6f3, 0x4)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000100)={0x7, 0x100, 0x80000001})
r2 = getpgid(0x0)
ptrace$peek(0xffffffffffffffff, r2, 0x0)

09:39:29 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:29 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) (async)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000080)={{0x2, 0x77}, 'port1\x00', 0x28, 0x1a0404, 0x9, 0x9, 0x2, 0x8, 0x6b8, 0x0, 0x1, 0xfb})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async)
r2 = syz_open_dev$evdev(&(0x7f0000000200), 0x7, 0x141001)
ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000240)=[0x20, 0x4]) (async)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000140)={0xd021, 0x20, 0x1, 'queue1\x00', 0x8f})

[  746.657332][T20421]  ? vfs_fileattr_set+0xbe0/0xbe0
[  746.657397][T20421]  ? __fget_files+0x286/0x470
[  746.657437][T20421]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
09:39:29 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40086310, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:29 executing program 5:
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, r0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x4}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x11}, 0x4002)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0)
r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000040)=[@window={0x3, 0x101, 0xfff9}, @timestamp, @timestamp], 0x3) (async)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000240)={0x3, 0x2, 0x3, 0x0, 0xf}) (async)
openat$cgroup_subtree(r2, &(0x7f0000000000), 0x2, 0x0)

[  746.657470][T20421]  ? binder_thread_write+0x3220/0x3220
[  746.657512][T20421]  __x64_sys_ioctl+0x193/0x200
09:39:30 executing program 1:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[  746.657550][T20421]  do_syscall_64+0x35/0xb0
09:39:30 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0)

09:39:30 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x4008630a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:30 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000080)
setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000000)=0x6f3, 0x4)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
r2 = getpgid(0x0)
ptrace$peek(0xffffffffffffffff, r2, 0x0)

09:39:30 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000080)={{0x2, 0x77}, 'port1\x00', 0x28, 0x1a0404, 0x9, 0x9, 0x2, 0x8, 0x6b8, 0x0, 0x1, 0xfb}) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000200), 0x7, 0x141001)
ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000240)=[0x20, 0x4]) (async)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000140)={0xd021, 0x20, 0x1, 'queue1\x00', 0x8f})

09:39:30 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x400c630e, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.657583][T20421]  entry_SYSCALL_64_after_hwframe+0x46/0xb0
[  746.657612][T20421] RIP: 0033:0x7f73fec890e9
09:39:30 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) (async)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0)

09:39:30 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40086310, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:30 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000080)
setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000000)=0x6f3, 0x4)
bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8)
r1 = getpgid(0x0)
ptrace$peek(0xffffffffffffffff, r1, 0x0)

09:39:30 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xc0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)

[  746.657632][T20421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
09:39:30 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x400c630f, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:30 executing program 1:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

09:39:30 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x400c630e, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:30 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000080)
setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000000)=0x6f3, 0x4)
r1 = getpgid(0x0)
ptrace$peek(0xffffffffffffffff, r1, 0x0)

09:39:30 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) (async)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0)

09:39:30 executing program 1:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

09:39:30 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:30 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xc0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xc0) (async)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) (async)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) (async)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)

[  746.657658][T20421] RSP: 002b:00007f73ffd08168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
09:39:30 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x400c630f, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:30 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000080)
r1 = getpgid(0x0)
ptrace$peek(0xffffffffffffffff, r1, 0x0)

09:39:30 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000100)={0x2, 0x5, 0x3c3})
r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000000)={0x5, 0x9, 0x1, 0x0, 0x7})

09:39:30 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xc0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xc0) (async)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) (async)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) (async)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)

09:39:30 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40106309, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.657683][T20421] RAX: ffffffffffffffda RBX: 00007f73fed9bf60 RCX: 00007f73fec890e9
[  746.657700][T20421] RDX: 0000000020000340 RSI: 00000000c0306201 RDI: 0000000000000003
09:39:30 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:30 executing program 4:
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
r0 = getpgid(0x0)
ptrace$peek(0xffffffffffffffff, r0, 0x0)

[  746.657715][T20421] RBP: 00007f73ffd081d0 R08: 0000000000000000 R09: 0000000000000000
[  746.657731][T20421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
09:39:30 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:30 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_ENTRY(r1, &(0x7f0000002340)={0x90, 0x0, r2, {0x0, 0x3, 0x100000000, 0x20, 0x76, 0x2, {0x4, 0xffff, 0x7, 0x9, 0xfffffffffffffffd, 0x8000000000000001, 0x6, 0x7, 0x1, 0x4000, 0x91, 0x0, 0xffffffffffffffff, 0x3, 0x80}}}, 0x90)
bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20000090)
r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000280)={0x5, 0xffff, 0x2, 0x0, 0x4})
r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$RNDZAPENTCNT(r3, 0x5204, &(0x7f0000000080)=0x7)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r6, 0x408c5333, &(0x7f0000000100)={0x5, 0x80, 0x0, 'queue0\x00', 0x65c9})

09:39:30 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:30 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:30 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000100)={0x2, 0x5, 0x3c3}) (async)
r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000000)={0x5, 0x9, 0x1, 0x0, 0x7})

09:39:30 executing program 4:
r0 = getpgid(0x0)
ptrace$peek(0xffffffffffffffff, r0, 0x0)

09:39:30 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.657744][T20421] R13: 00007ffd69b839ef R14: 00007f73ffd08300 R15: 0000000000022000
[  746.657779][T20421]  </TASK>
09:39:30 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_ENTRY(r1, &(0x7f0000002340)={0x90, 0x0, r2, {0x0, 0x3, 0x100000000, 0x20, 0x76, 0x2, {0x4, 0xffff, 0x7, 0x9, 0xfffffffffffffffd, 0x8000000000000001, 0x6, 0x7, 0x1, 0x4000, 0x91, 0x0, 0xffffffffffffffff, 0x3, 0x80}}}, 0x90)
bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20000090)
r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000280)={0x5, 0xffff, 0x2, 0x0, 0x4})
r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$RNDZAPENTCNT(r3, 0x5204, &(0x7f0000000080)=0x7)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r6, 0x408c5333, &(0x7f0000000100)={0x5, 0x80, 0x0, 'queue0\x00', 0x65c9})
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async)
pidfd_getfd(0xffffffffffffffff, r0, 0x0) (async)
read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020}, 0x2020) (async)
write$FUSE_ENTRY(r1, &(0x7f0000002340)={0x90, 0x0, r2, {0x0, 0x3, 0x100000000, 0x20, 0x76, 0x2, {0x4, 0xffff, 0x7, 0x9, 0xfffffffffffffffd, 0x8000000000000001, 0x6, 0x7, 0x1, 0x4000, 0x91, 0x0, 0xffffffffffffffff, 0x3, 0x80}}}, 0x90) (async)
bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) (async)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20000090) (async)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000280)={0x5, 0xffff, 0x2, 0x0, 0x4}) (async)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
ioctl$RNDZAPENTCNT(r3, 0x5204, &(0x7f0000000080)=0x7) (async)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r6, 0x408c5333, &(0x7f0000000100)={0x5, 0x80, 0x0, 'queue0\x00', 0x65c9}) (async)

09:39:30 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000100)={0x2, 0x5, 0x3c3}) (async)
r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000000)={0x5, 0x9, 0x1, 0x0, 0x7})

09:39:30 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.667971][T20421] binder: 20420:20421 ioctl c0306201 20000340 returned -14
[  746.810462][T20434] FAULT_INJECTION: forcing a failure.
[  746.810462][T20434] name fail_usercopy, interval 1, probability 0, space 0, times 0
09:39:30 executing program 4:
r0 = getpgid(0x0)
ptrace$peek(0xffffffffffffffff, r0, 0x0)

09:39:30 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40106309, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:30 executing program 1:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:30 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:30 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

09:39:30 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.810493][T20434] CPU: 0 PID: 20434 Comm: syz-executor.5 Not tainted 5.18.0-rc6-next-20220516-syzkaller #0
09:39:30 executing program 1:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:30 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_ENTRY(r1, &(0x7f0000002340)={0x90, 0x0, r2, {0x0, 0x3, 0x100000000, 0x20, 0x76, 0x2, {0x4, 0xffff, 0x7, 0x9, 0xfffffffffffffffd, 0x8000000000000001, 0x6, 0x7, 0x1, 0x4000, 0x91, 0x0, 0xffffffffffffffff, 0x3, 0x80}}}, 0x90)
bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20000090) (async)
r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000280)={0x5, 0xffff, 0x2, 0x0, 0x4})
r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
ioctl$RNDZAPENTCNT(r3, 0x5204, &(0x7f0000000080)=0x7) (async)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r6, 0x408c5333, &(0x7f0000000100)={0x5, 0x80, 0x0, 'queue0\x00', 0x65c9})

09:39:30 executing program 4:
getpgid(0x0)
ptrace$peek(0xffffffffffffffff, 0x0, 0x0)

09:39:30 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:30 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486315, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:30 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)

[  746.810519][T20434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  746.810532][T20434] Call Trace:
09:39:30 executing program 1:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:30 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044010}, 0x90)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

09:39:30 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:30 executing program 4:
getpgid(0x0)
ptrace$peek(0xffffffffffffffff, 0x0, 0x0)

[  746.810537][T20434]  <TASK>
[  746.810548][T20433] FAULT_INJECTION: forcing a failure.
[  746.810548][T20433] name fail_usercopy, interval 1, probability 0, space 0, times 0
09:39:30 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:30 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

09:39:30 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.810546][T20434]  dump_stack_lvl+0xcd/0x134
09:39:30 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486315, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:30 executing program 4:
getpgid(0x0)
ptrace$peek(0xffffffffffffffff, 0x0, 0x0)

09:39:30 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000000)=[0x7, 0xb4])

09:39:30 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044010}, 0x90) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

09:39:30 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.810588][T20434]  should_fail.cold+0x5/0xa
[  746.810614][T20434]  _copy_to_user+0x2a/0x140
09:39:30 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:30 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:30 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:30 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000000)=[0x7, 0xb4])

09:39:30 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.810652][T20434]  simple_read_from_buffer+0xcc/0x160
[  746.810694][T20434]  proc_fail_nth_read+0x187/0x220
[  746.810744][T20434]  ? proc_exe_link+0x1d0/0x1d0
09:39:30 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044010}, 0x90) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

09:39:30 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:30 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:30 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000000)=[0x7, 0xb4])

09:39:30 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.810783][T20434]  ? security_file_permission+0xab/0xd0
[  746.810827][T20434]  ? proc_exe_link+0x1d0/0x1d0
09:39:30 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:30 executing program 1:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.810865][T20434]  vfs_read+0x1ef/0x5d0
09:39:31 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
read$FUSE(r1, &(0x7f0000000100)={0x2020}, 0x2020)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000040))

09:39:31 executing program 5:
sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x8000}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000c0}, 0x20040080)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4850050}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r1, 0xe00, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0xe28d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048000}, 0x4080)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/custom0\x00', 0x1, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000240)={0x6, 0x7fffffff, 0x2, 0x0, 0x3})
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x2228c1, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs2/binder0\x00', 0x800, 0x0)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r2)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_FD={0x8}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x20004000)
sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80040004}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, r4, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x9}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000180)={0x9, 0x2, 0x1, 'queue0\x00', 0x80})

09:39:31 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:31 executing program 1:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:31 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:31 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
read$FUSE(r1, &(0x7f0000000100)={0x2020}, 0x2020)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000040))
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
read$FUSE(r1, &(0x7f0000000100)={0x2020}, 0x2020) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async)
ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000040)) (async)

09:39:31 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.810928][T20434]  ksys_read+0x127/0x250
[  746.810967][T20434]  ? vfs_write+0xac0/0xac0
[  746.811005][T20434]  ? syscall_enter_from_user_mode+0x21/0x70
[  746.811051][T20434]  do_syscall_64+0x35/0xb0
09:39:31 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:31 executing program 5:
sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x8000}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000c0}, 0x20040080)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4850050}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r1, 0xe00, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0xe28d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048000}, 0x4080)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/custom0\x00', 0x1, 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000240)={0x6, 0x7fffffff, 0x2, 0x0, 0x3})
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x2228c1, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs2/binder0\x00', 0x800, 0x0) (async)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r2) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_FD={0x8}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x20004000) (async)
sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80040004}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, r4, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x9}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000180)={0x9, 0x2, 0x1, 'queue0\x00', 0x80})

09:39:31 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.811081][T20434]  entry_SYSCALL_64_after_hwframe+0x46/0xb0
[  746.811110][T20434] RIP: 0033:0x7f1f8143bc9c
09:39:31 executing program 1:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:31 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
read$FUSE(r1, &(0x7f0000000100)={0x2020}, 0x2020) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000040))

09:39:31 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.811130][T20434] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
09:39:31 executing program 5:
sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x8000}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000c0}, 0x20040080) (async, rerun: 64)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (rerun: 64)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async, rerun: 32)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), 0xffffffffffffffff) (rerun: 32)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4850050}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r1, 0xe00, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0xe28d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048000}, 0x4080)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/custom0\x00', 0x1, 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000240)={0x6, 0x7fffffff, 0x2, 0x0, 0x3})
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x2228c1, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs2/binder0\x00', 0x800, 0x0) (async)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r2)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_FD={0x8}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x20004000)
sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80040004}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, r4, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x9}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000180)={0x9, 0x2, 0x1, 'queue0\x00', 0x80})

09:39:31 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:31 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

09:39:31 executing program 4:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:31 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:31 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000000)={0x1, 0xfffffff9, 0x4, 0x0, 0x8})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

09:39:31 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.811153][T20434] RSP: 002b:00007f1f8258f160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
09:39:31 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

09:39:31 executing program 4:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:31 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.811178][T20434] RAX: ffffffffffffffda RBX: 00007f1f8159bf60 RCX: 00007f1f8143bc9c
09:39:31 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000000)={0x1, 0xfffffff9, 0x4, 0x0, 0x8}) (async, rerun: 32)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (rerun: 32)

09:39:31 executing program 4:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.811194][T20434] RDX: 000000000000000f RSI: 00007f1f8258f1e0 RDI: 0000000000000004
09:39:31 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000100))
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, r3, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xffff}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xfffd}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x19}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x41)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000040)={0x2, 0x10000, 0xfffffffa, 0x0, 0x3})
r4 = syz_open_dev$evdev(&(0x7f00000001c0), 0x6, 0x40000)
ioctl$EVIOCGKEY(r4, 0x80404518, &(0x7f0000000280)=""/132)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3)

09:39:31 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:31 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:31 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[  746.811210][T20434] RBP: 00007f1f8258f1d0 R08: 0000000000000000 R09: 0000000000000000
09:39:31 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000000)={0x1, 0xfffffff9, 0x4, 0x0, 0x8})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000000)={0x1, 0xfffffff9, 0x4, 0x0, 0x8}) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)

09:39:31 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:31 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:31 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000100))
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, r3, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xffff}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xfffd}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x19}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x41)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000040)={0x2, 0x10000, 0xfffffffa, 0x0, 0x3}) (async)
r4 = syz_open_dev$evdev(&(0x7f00000001c0), 0x6, 0x40000)
ioctl$EVIOCGKEY(r4, 0x80404518, &(0x7f0000000280)=""/132) (async)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3)

[  746.811224][T20434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
09:39:31 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:31 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:39:31 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/7, 0x7, 0x1, &(0x7f00000003c0)=""/4096, 0x1000}, &(0x7f0000001400)=0x40)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000001440), 0x8001)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r4, 0xc0a85322, &(0x7f0000000280))
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000140)={0xfffff7d3, 0x1, 0x3})
getsockopt$inet_tcp_int(r1, 0x6, 0x9, &(0x7f0000000040), &(0x7f0000000080)=0x4)
r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000340)={0x4, 0x8000, 0xfe9, 0x0, 0x5})
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000100)=0x7)

[  746.811238][T20434] R13: 00007ffe4800754f R14: 00007f1f8258f300 R15: 0000000000022000
09:39:31 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:31 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.811274][T20434]  </TASK>
[  746.825689][T20433] CPU: 1 PID: 20433 Comm: syz-executor.0 Not tainted 5.18.0-rc6-next-20220516-syzkaller #0
09:39:31 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000100)) (async)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, r3, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xffff}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xfffd}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x19}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x41) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000040)={0x2, 0x10000, 0xfffffffa, 0x0, 0x3}) (async)
r4 = syz_open_dev$evdev(&(0x7f00000001c0), 0x6, 0x40000)
ioctl$EVIOCGKEY(r4, 0x80404518, &(0x7f0000000280)=""/132) (async)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3)

09:39:31 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:39:31 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:31 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:31 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.825721][T20433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
09:39:31 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/7, 0x7, 0x1, &(0x7f00000003c0)=""/4096, 0x1000}, &(0x7f0000001400)=0x40)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000001440), 0x8001) (async)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r4, 0xc0a85322, &(0x7f0000000280)) (async)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000140)={0xfffff7d3, 0x1, 0x3})
getsockopt$inet_tcp_int(r1, 0x6, 0x9, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async)
r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000340)={0x4, 0x8000, 0xfe9, 0x0, 0x5})
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000100)=0x7)

09:39:31 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0xff00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:31 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:39:31 executing program 5:
read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020}, 0x2020)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x201, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000040)=r2)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

09:39:31 executing program 4:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.825736][T20433] Call Trace:
[  746.825741][T20433]  <TASK>
[  746.825750][T20433]  dump_stack_lvl+0xcd/0x134
09:39:31 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:31 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0})

09:39:31 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:31 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/7, 0x7, 0x1, &(0x7f00000003c0)=""/4096, 0x1000}, &(0x7f0000001400)=0x40)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000001440), 0x8001)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r4, 0xc0a85322, &(0x7f0000000280))
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000140)={0xfffff7d3, 0x1, 0x3})
getsockopt$inet_tcp_int(r1, 0x6, 0x9, &(0x7f0000000040), &(0x7f0000000080)=0x4)
r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000340)={0x4, 0x8000, 0xfe9, 0x0, 0x5})
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000100)=0x7)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/7, 0x7, 0x1, &(0x7f00000003c0)=""/4096, 0x1000}, &(0x7f0000001400)=0x40) (async)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) (async)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000001440), 0x8001) (async)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r4, 0xc0a85322, &(0x7f0000000280)) (async)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000140)={0xfffff7d3, 0x1, 0x3}) (async)
getsockopt$inet_tcp_int(r1, 0x6, 0x9, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000340)={0x4, 0x8000, 0xfe9, 0x0, 0x5}) (async)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000100)=0x7) (async)

[  746.825791][T20433]  should_fail.cold+0x5/0xa
[  746.825822][T20433]  _copy_to_user+0x2a/0x140
[  746.825866][T20433]  simple_read_from_buffer+0xcc/0x160
09:39:31 executing program 4:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:31 executing program 5:
read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020}, 0x2020)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x201, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000040)=r2)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

[  746.825913][T20433]  proc_fail_nth_read+0x187/0x220
09:39:31 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0xff00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:31 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:31 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0})

[  746.825955][T20433]  ? proc_exe_link+0x1d0/0x1d0
09:39:31 executing program 4:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:31 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:31 executing program 5:
read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020}, 0x2020)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x201, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000040)=r2)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

09:39:31 executing program 2:
ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)

[  746.825993][T20433]  ? security_file_permission+0xab/0xd0
[  746.826037][T20433]  ? proc_exe_link+0x1d0/0x1d0
09:39:31 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:31 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0})

09:39:31 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

09:39:31 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x4200)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

09:39:31 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.826074][T20433]  vfs_read+0x1ef/0x5d0
[  746.826117][T20433]  ksys_read+0x127/0x250
[  746.826153][T20433]  ? vfs_write+0xac0/0xac0
09:39:31 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:31 executing program 2:
ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)
ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) (async)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) (async)

09:39:31 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

09:39:31 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.826192][T20433]  ? syscall_enter_from_user_mode+0x21/0x70
[  746.826251][T20433]  do_syscall_64+0x35/0xb0
[  746.826285][T20433]  entry_SYSCALL_64_after_hwframe+0x46/0xb0
09:39:31 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x4200)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

09:39:32 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:32 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:32 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.826315][T20433] RIP: 0033:0x7f73fec3bc9c
[  746.826335][T20433] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
09:39:32 executing program 2:
ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)
ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) (async)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) (async)

09:39:32 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:32 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

09:39:32 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:32 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x4200)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x4200) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)

09:39:32 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:39:32 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:32 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[  746.826360][T20433] RSP: 002b:00007f73ffd08160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  746.826384][T20433] RAX: ffffffffffffffda RBX: 00007f73fed9bf60 RCX: 00007f73fec3bc9c
09:39:32 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/81, 0x51, 0x0, &(0x7f0000000100)=""/4096, 0x1000}, &(0x7f0000001100)=0x40)

09:39:32 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000000)={0x3, 0xffff, 0x80000001, 0x0, 0x5})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

[  746.826401][T20433] RDX: 000000000000000f RSI: 00007f73ffd081e0 RDI: 0000000000000004
09:39:32 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.826416][T20433] RBP: 00007f73ffd081d0 R08: 0000000000000000 R09: 0000000000000000
[  746.826431][T20433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
09:39:32 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/81, 0x51, 0x0, &(0x7f0000000100)=""/4096, 0x1000}, &(0x7f0000001100)=0x40)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/81, 0x51, 0x0, &(0x7f0000000100)=""/4096, 0x1000}, &(0x7f0000001100)=0x40) (async)

09:39:32 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:32 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:39:32 executing program 1:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/81, 0x51, 0x0, &(0x7f0000000100)=""/4096, 0x1000}, &(0x7f0000001100)=0x40)

09:39:32 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:32 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000000)={0x3, 0xffff, 0x80000001, 0x0, 0x5}) (async, rerun: 64)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (rerun: 64)

09:39:32 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:39:32 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/81, 0x51, 0x0, &(0x7f0000000100)=""/4096, 0x1000}, &(0x7f0000001100)=0x40)

[  746.826445][T20433] R13: 00007ffd69b839ef R14: 00007f73ffd08300 R15: 0000000000022000
09:39:32 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:32 executing program 1:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/81, 0x51, 0x0, &(0x7f0000000100)=""/4096, 0x1000}, &(0x7f0000001100)=0x40)

09:39:32 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:32 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0xff000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.826484][T20433]  </TASK>
[  746.893720][T20438] binder: 20437:20438 ioctl 10 20000340 returned -22
09:39:32 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000000)={0x3, 0xffff, 0x80000001, 0x0, 0x5})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

09:39:32 executing program 1:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/81, 0x51, 0x0, &(0x7f0000000100)=""/4096, 0x1000}, &(0x7f0000001100)=0x40)

09:39:32 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0})

09:39:32 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x208080)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

09:39:32 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x440e03)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

09:39:32 executing program 1:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/81, 0x51, 0x0, &(0x7f0000000100)=""/4096, 0x1000}, &(0x7f0000001100)=0x40)

09:39:32 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0xff000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  746.951850][ T1222] ieee802154 phy0 wpan0: encryption failed: -22
[  746.951900][ T1222] ieee802154 phy1 wpan1: encryption failed: -22
[  747.024342][T20450] binder: 20449:20450 ioctl 541b 20000340 returned -22
09:39:32 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:32 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x208080)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x208080) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)

09:39:32 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0})

09:39:32 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x440e03)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x440e03) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)

09:39:32 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:32 executing program 1:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/81, 0x51, 0x0, &(0x7f0000000100)=""/4096, 0x1000}, &(0x7f0000001100)=0x40)

[  747.102680][T20456] binder: 20452:20456 ioctl 10 20000340 returned -22
[  747.219130][T20464] binder: 20463:20464 ioctl 10 20000340 returned -22
09:39:32 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x208080)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x208080) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)

09:39:32 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0})

09:39:32 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:32 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x440e03)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

09:39:32 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x88100)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000100)={0x9, 0xe0, 0x1, 'queue0\x00', 0x7c2})
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$IOCTL_GET_NUM_DEVICES(r2, 0x40046104, &(0x7f0000000080))
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x400)

[  747.279470][T20471] binder: 20468:20471 ioctl 10 20000340 returned -22
[  747.404943][T20479] binder: 20477:20479 ioctl 541b 20000340 returned -22
09:39:32 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:32 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:32 executing program 1:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/81, 0x51, 0x0, &(0x7f0000000100)=""/4096, 0x1000}, &(0x7f0000001100)=0x40)

09:39:32 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:32 executing program 5:
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000000)={0x7, 0x2, 0x1, 'queue0\x00', 0x4})
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

[  747.407760][T20476] binder: 20475:20476 ioctl 10 20000340 returned -22
09:39:32 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x88100)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000100)={0x9, 0xe0, 0x1, 'queue0\x00', 0x7c2})
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$IOCTL_GET_NUM_DEVICES(r2, 0x40046104, &(0x7f0000000080))
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x400)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x88100) (async)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000100)={0x9, 0xe0, 0x1, 'queue0\x00', 0x7c2}) (async)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
ioctl$IOCTL_GET_NUM_DEVICES(r2, 0x40046104, &(0x7f0000000080)) (async)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x400) (async)

09:39:32 executing program 1:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/81, 0x51, 0x0, &(0x7f0000000100)=""/4096, 0x1000}, &(0x7f0000001100)=0x40)

09:39:32 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  747.936813][T20526] binder: 20521:20526 ioctl 8933 20000340 returned -22
[  748.084737][T20537] binder: 20535:20537 ioctl 400448c9 20000340 returned -22
09:39:32 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:32 executing program 4:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x88100)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000100)={0x9, 0xe0, 0x1, 'queue0\x00', 0x7c2})
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$IOCTL_GET_NUM_DEVICES(r2, 0x40046104, &(0x7f0000000080))
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x400)

09:39:32 executing program 5:
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000000)={0x7, 0x2, 0x1, 'queue0\x00', 0x4})
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

09:39:32 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  748.215483][T20551] binder: 20544:20551 ioctl 400448dd 20000340 returned -22
[  748.217061][T20549] binder: 20545:20549 ioctl 8933 20000340 returned -22
09:39:32 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x88100)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000100)={0x9, 0xe0, 0x1, 'queue0\x00', 0x7c2})
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$IOCTL_GET_NUM_DEVICES(r2, 0x40046104, &(0x7f0000000080))
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x400)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x88100) (async)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000100)={0x9, 0xe0, 0x1, 'queue0\x00', 0x7c2}) (async)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
ioctl$IOCTL_GET_NUM_DEVICES(r2, 0x40046104, &(0x7f0000000080)) (async)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x400) (async)

09:39:32 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:32 executing program 1:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/81, 0x51, 0x0, &(0x7f0000000100)=""/4096, 0x1000}, &(0x7f0000001100)=0x40)

09:39:32 executing program 4:
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000000)={0x7, 0x2, 0x1, 'queue0\x00', 0x4})
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

09:39:32 executing program 5:
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000000)={0x7, 0x2, 0x1, 'queue0\x00', 0x4}) (async, rerun: 32)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (rerun: 32)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

[  748.355263][T20561] binder: 20557:20561 ioctl 400448c9 20000340 returned -22
[  748.357064][T20562] binder: 20559:20562 ioctl 400454ca 20000340 returned -22
09:39:32 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:32 executing program 1:
socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/81, 0x51, 0x0, &(0x7f0000000100)=""/4096, 0x1000}, &(0x7f0000001100)=0x40)

09:39:32 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:32 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:32 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

09:39:32 executing program 5:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x4a0403, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x20203, 0x0)

[  748.515019][T20573] binder: 20566:20573 ioctl 400448dd 20000340 returned -22
[  748.656637][T20586] binder: 20579:20586 ioctl 400454ca 20000340 returned -22
09:39:32 executing program 1:
socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/81, 0x51, 0x0, &(0x7f0000000100)=""/4096, 0x1000}, &(0x7f0000001100)=0x40)

09:39:32 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:32 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:32 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)

09:39:32 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:32 executing program 5:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x4a0403, 0x0) (async)
openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x20203, 0x0)

09:39:32 executing program 1:
socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/81, 0x51, 0x0, &(0x7f0000000100)=""/4096, 0x1000}, &(0x7f0000001100)=0x40)

[  748.783314][T20595] binder: 20593:20595 ioctl 10 0 returned -22
[  749.275814][T20635] binder: 20632:20635 ioctl 40086602 20000340 returned -22
09:39:32 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:32 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:33 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

09:39:33 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:33 executing program 5:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x4a0403, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x20203, 0x0)

[  749.441317][T20647] binder: 20646:20647 ioctl 400c620e 20000340 returned -22
[  749.628331][T20661] binder: 20659:20661 ioctl 40086602 20000340 returned -22
09:39:33 executing program 1:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000001100))

09:39:33 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:33 executing program 4:
read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020}, 0x2020)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x201, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000040)=r2)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

09:39:33 executing program 2:
syz_clone3(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read$FUSE(r0, &(0x7f0000001300)={0x2020, 0x0, <r1=>0x0}, 0x2020)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
write$FUSE_STATFS(r3, &(0x7f0000000200)={0x60, 0x2e, r1, {{0x1, 0x5, 0x3, 0x96, 0x0, 0x7ff, 0x4, 0xfffff792}}}, 0x60)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0)
ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000100)=""/242)
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r4, 0x40046210, &(0x7f0000000080)=0x1)

09:39:33 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:33 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)

09:39:33 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  749.726732][T20669] binder: 20667:20669 ioctl 401c5820 20000340 returned -22
[  749.788011][T20677] binder: 20674:20677 ioctl 400c620e 20000340 returned -22
09:39:33 executing program 1:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000001100))

09:39:33 executing program 4:
read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020}, 0x2020)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x201, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000040)=r2)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

09:39:33 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:33 executing program 2:
syz_clone3(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read$FUSE(r0, &(0x7f0000001300)={0x2020, 0x0, <r1=>0x0}, 0x2020)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
write$FUSE_STATFS(r3, &(0x7f0000000200)={0x60, 0x2e, r1, {{0x1, 0x5, 0x3, 0x96, 0x0, 0x7ff, 0x4, 0xfffff792}}}, 0x60)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0)
ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000100)=""/242)
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r4, 0x40046210, &(0x7f0000000080)=0x1)
syz_clone3(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
read$FUSE(r0, &(0x7f0000001300)={0x2020}, 0x2020) (async)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async)
openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) (async)
write$FUSE_STATFS(r3, &(0x7f0000000200)={0x60, 0x2e, r1, {{0x1, 0x5, 0x3, 0x96, 0x0, 0x7ff, 0x4, 0xfffff792}}}, 0x60) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0) (async)
ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000100)=""/242) (async)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r4, 0x40046210, &(0x7f0000000080)=0x1) (async)

09:39:33 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)

[  749.980850][T20692] binder: 20691:20692 ioctl 80086301 20000340 returned -22
[  750.078815][T20702] binder: 20698:20702 ioctl 401c5820 20000340 returned -22
09:39:33 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:33 executing program 1:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000001100))

09:39:33 executing program 4:
read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020}, 0x2020)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x201, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000040)=r2)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

09:39:33 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:33 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)

[  750.158142][T20705] binder: 20704:20705 ioctl 80086601 20000340 returned -22
[  750.312268][T20721] binder: 20715:20721 ioctl 801c581f 20000340 returned -22
09:39:33 executing program 1:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/4096, 0x1000}, &(0x7f0000001100)=0x40)

09:39:33 executing program 4:
read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020}, 0x2020)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x201, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000040)=r1)

09:39:33 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  750.371792][T20727] binder: 20722:20727 ioctl 80086301 20000340 returned -22
[  750.512697][T20737] binder: 20733:20737 ioctl 80086601 20000340 returned -22
09:39:33 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x34000)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

09:39:33 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  750.646700][T20749] binder: 20747:20749 ioctl 801c581f 20000340 returned -22
09:39:33 executing program 2:
syz_clone3(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async)
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read$FUSE(r0, &(0x7f0000001300)={0x2020, 0x0, <r1=>0x0}, 0x2020) (async)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
write$FUSE_STATFS(r3, &(0x7f0000000200)={0x60, 0x2e, r1, {{0x1, 0x5, 0x3, 0x96, 0x0, 0x7ff, 0x4, 0xfffff792}}}, 0x60) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0)
ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000100)=""/242)
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r4, 0x40046210, &(0x7f0000000080)=0x1)

09:39:33 executing program 1:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001100)=0x40)

09:39:33 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:33 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x34000)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

09:39:33 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:33 executing program 4:
read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020}, 0x2020)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x201, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000040)=r1)

09:39:33 executing program 1:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)

[  750.903890][T20771] binder: 20766:20771 ioctl c00c620f 20000340 returned -22
[  751.031672][T20779] BUG: sleeping function called from invalid context at lib/usercopy.c:28
[  751.031691][T20779] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 20779, name: syz-executor.3
09:39:33 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x34000)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

09:39:33 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:33 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:33 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0)

09:39:33 executing program 4:
read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020}, 0x2020)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000040))

09:39:33 executing program 1:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)

[  751.031711][T20779] preempt_count: 1, expected: 0
[  751.031722][T20779] RCU nest depth: 0, expected: 0
[  751.031732][T20779] 1 lock held by syz-executor.3/20779:
09:39:33 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x20600)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000100)={0xfffffffc, 0x9, 0x1, 'queue0\x00', 0x8})
r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000280)={0x1, 0x80, 0x0, 'queue1\x00', 0x7fff})
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000040)={0x2, 0x1, 0xfe})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

09:39:33 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:33 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:33 executing program 1:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)

09:39:33 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x20600)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000100)={0xfffffffc, 0x9, 0x1, 'queue0\x00', 0x8})
r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000280)={0x1, 0x80, 0x0, 'queue1\x00', 0x7fff})
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000040)={0x2, 0x1, 0xfe})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x20600) (async)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000100)={0xfffffffc, 0x9, 0x1, 'queue0\x00', 0x8}) (async)
pidfd_getfd(0xffffffffffffffff, r0, 0x0) (async)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000280)={0x1, 0x80, 0x0, 'queue1\x00', 0x7fff}) (async)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000040)={0x2, 0x1, 0xfe}) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)

09:39:33 executing program 4:
read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020}, 0x2020)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000040))

[  751.031745][T20779]  #0: ffff8880486d1af8 (&proc->inner_lock){+.+.}-{2:2}, at: binder_ioctl+0x798/0x6d80
[  751.031826][T20779] Preemption disabled at:
09:39:33 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async)
pidfd_getfd(0xffffffffffffffff, r0, 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0) (async)

09:39:33 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:33 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:33 executing program 1:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x20600)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000100)={0xfffffffc, 0x9, 0x1, 'queue0\x00', 0x8})
r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000280)={0x1, 0x80, 0x0, 'queue1\x00', 0x7fff})
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000040)={0x2, 0x1, 0xfe})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

[  751.031832][T20779] [<0000000000000000>] 0x0
[  751.031853][T20779] CPU: 0 PID: 20779 Comm: syz-executor.3 Not tainted 5.18.0-rc6-next-20220516-syzkaller #0
09:39:33 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x20600)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000100)={0xfffffffc, 0x9, 0x1, 'queue0\x00', 0x8}) (async)
r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000280)={0x1, 0x80, 0x0, 'queue1\x00', 0x7fff}) (async)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000040)={0x2, 0x1, 0xfe}) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

09:39:33 executing program 4:
read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020}, 0x2020)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000040))

09:39:33 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  751.031880][T20779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  751.031894][T20779] Call Trace:
09:39:33 executing program 4:
read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020}, 0x2020)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x201, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000040)=r0)

09:39:33 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0)

09:39:33 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:33 executing program 1:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x20600)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000100)={0xfffffffc, 0x9, 0x1, 'queue0\x00', 0x8})
r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000280)={0x1, 0x80, 0x0, 'queue1\x00', 0x7fff})
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000040)={0x2, 0x1, 0xfe})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

09:39:33 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  751.031899][T20779]  <TASK>
[  751.031908][T20779]  dump_stack_lvl+0xcd/0x134
[  751.031946][T20779]  __might_resched.cold+0x222/0x26b
09:39:33 executing program 4:
read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020}, 0x2020)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x201, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000040)=r0)

09:39:33 executing program 2:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f00000001c0), &(0x7f0000000280)=0x4)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
r1 = pidfd_getfd(r0, r0, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r1)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0)
sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="e4651a1dd8074fb1f6e40c423a1a112468b3403ada10906408e2da69af65d02f664d5c589a1fc3214e305f814a31fde94f7b67208bb6be99d190743b3cb43f115fd18c4c16f89f047af98b058fa9209e0d75ffeb0aee91a1654f8bfb3a4185e56cf084cce4fc4ceb081dac969e8c0f77c6bf2e92ecb33d00abab56f094224639048ac2480a94b500", @ANYRES16=r2, @ANYBLOB="080025bd7000ffdbdf2505000000080009000100000008001800e000000106001b004e230000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0)

09:39:33 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:33 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x121a02)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000000))
setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4)
ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096101, &(0x7f0000000540)={{&(0x7f00000004c0)={'Accelerator0\x00', {&(0x7f0000000200)=@adf_dec={@format={'Dc', '0', 'NumConcurrentAsymRequests\x00'}, {0x4}, {&(0x7f0000000140)=@adf_dec={@format={'Dc', '4', 'BankNumber\x00'}, {0xb6c}}}}}, {&(0x7f0000000440)={'GENERAL\x00', {&(0x7f0000000380)=@adf_str={@normal='NumberDcInstances\x00', {"129a3a86038dac93d51c88b653542df7f21964aaac9bf29b90306ec01989108d2c97b24872e0c5b4a5ca7fe07b247f5598ce745d1fac9230f134b921cc3b1890"}, {&(0x7f00000002c0)=@adf_hex={@normal='NumberDcInstances\x00', {0x5}}}}}}}}}, 0x1})
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000640)={0x28, 0x9, 0x1, 'queue0\x00', 0xc846})
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000580), 0x8)
setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000005c0)=@ccm_128={{0x303}, "90127d98ffe84208", "b73c0cb112e4c68a3b49eca0b5812a2a", "9ad89f3a", "8baee0211306e1cd"}, 0x28)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000600), 0x400, 0x0)
getsockopt$inet_tcp_int(r1, 0x6, 0xc, &(0x7f0000000080), &(0x7f0000000100)=0x4)

[  751.032033][T20779]  __might_fault+0x6c/0x170
[  751.032065][T20779]  _copy_to_user+0x25/0x140
[  751.032108][T20779]  binder_ioctl+0x7aa/0x6d80
09:39:33 executing program 1:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x20600)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000100)={0xfffffffc, 0x9, 0x1, 'queue0\x00', 0x8})
r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000280)={0x1, 0x80, 0x0, 'queue1\x00', 0x7fff})
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000040)={0x2, 0x1, 0xfe})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

09:39:33 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:33 executing program 4:
read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020}, 0x2020)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x201, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000040)=r0)

09:39:33 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  751.032154][T20779]  ? __sanitizer_cov_trace_const_cmp1+0x22/0x80
[  751.032189][T20779]  ? tomoyo_path_number_perm+0x24e/0x590
09:39:33 executing program 2:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f00000001c0), &(0x7f0000000280)=0x4) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)
r1 = pidfd_getfd(r0, r0, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r1) (async)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0)
sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="e4651a1dd8074fb1f6e40c423a1a112468b3403ada10906408e2da69af65d02f664d5c589a1fc3214e305f814a31fde94f7b67208bb6be99d190743b3cb43f115fd18c4c16f89f047af98b058fa9209e0d75ffeb0aee91a1654f8bfb3a4185e56cf084cce4fc4ceb081dac969e8c0f77c6bf2e92ecb33d00abab56f094224639048ac2480a94b500", @ANYRES16=r2, @ANYBLOB="080025bd7000ffdbdf2505000000080009000100000008001800e000000106001b004e230000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0)

09:39:33 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:33 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x121a02) (async, rerun: 32)
r1 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 32)
ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000000)) (async)
setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) (async)
ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096101, &(0x7f0000000540)={{&(0x7f00000004c0)={'Accelerator0\x00', {&(0x7f0000000200)=@adf_dec={@format={'Dc', '0', 'NumConcurrentAsymRequests\x00'}, {0x4}, {&(0x7f0000000140)=@adf_dec={@format={'Dc', '4', 'BankNumber\x00'}, {0xb6c}}}}}, {&(0x7f0000000440)={'GENERAL\x00', {&(0x7f0000000380)=@adf_str={@normal='NumberDcInstances\x00', {"129a3a86038dac93d51c88b653542df7f21964aaac9bf29b90306ec01989108d2c97b24872e0c5b4a5ca7fe07b247f5598ce745d1fac9230f134b921cc3b1890"}, {&(0x7f00000002c0)=@adf_hex={@normal='NumberDcInstances\x00', {0x5}}}}}}}}}, 0x1}) (async)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000640)={0x28, 0x9, 0x1, 'queue0\x00', 0xc846})
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000580), 0x8)
setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000005c0)=@ccm_128={{0x303}, "90127d98ffe84208", "b73c0cb112e4c68a3b49eca0b5812a2a", "9ad89f3a", "8baee0211306e1cd"}, 0x28) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000600), 0x400, 0x0) (async)
getsockopt$inet_tcp_int(r1, 0x6, 0xc, &(0x7f0000000080), &(0x7f0000000100)=0x4)

09:39:33 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:33 executing program 4:
read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020}, 0x2020)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x201, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000040)=r1)

09:39:33 executing program 1:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x20600)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000100)={0xfffffffc, 0x9, 0x1, 'queue0\x00', 0x8})
r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000280)={0x1, 0x80, 0x0, 'queue1\x00', 0x7fff})
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000040)={0x2, 0x1, 0xfe})

09:39:33 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  751.032226][T20779]  ? tomoyo_execute_permission+0x4a0/0x4a0
[  751.032263][T20779]  ? lockdep_hardirqs_on_prepare+0x400/0x400
[  751.032309][T20779]  ? binder_thread_write+0x3220/0x3220
09:39:33 executing program 2:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f00000001c0), &(0x7f0000000280)=0x4) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)
r1 = pidfd_getfd(r0, r0, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r1)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0)
sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="e4651a1dd8074fb1f6e40c423a1a112468b3403ada10906408e2da69af65d02f664d5c589a1fc3214e305f814a31fde94f7b67208bb6be99d190743b3cb43f115fd18c4c16f89f047af98b058fa9209e0d75ffeb0aee91a1654f8bfb3a4185e56cf084cce4fc4ceb081dac969e8c0f77c6bf2e92ecb33d00abab56f094224639048ac2480a94b500", @ANYRES16=r2, @ANYBLOB="080025bd7000ffdbdf2505000000080009000100000008001800e000000106001b004e230000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0)

09:39:33 executing program 1:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x20600)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000100)={0xfffffffc, 0x9, 0x1, 'queue0\x00', 0x8})
r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000280)={0x1, 0x80, 0x0, 'queue1\x00', 0x7fff})
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000040)={0x2, 0x1, 0xfe})

09:39:33 executing program 4:
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x201, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000040)=r1)

[  751.032344][T20779]  ? __sanitizer_cov_trace_const_cmp2+0x22/0x80
[  751.032376][T20779]  ? do_vfs_ioctl+0x132/0x15c0
09:39:33 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:33 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0xff000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:33 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x121a02)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000000))
setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4)
ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096101, &(0x7f0000000540)={{&(0x7f00000004c0)={'Accelerator0\x00', {&(0x7f0000000200)=@adf_dec={@format={'Dc', '0', 'NumConcurrentAsymRequests\x00'}, {0x4}, {&(0x7f0000000140)=@adf_dec={@format={'Dc', '4', 'BankNumber\x00'}, {0xb6c}}}}}, {&(0x7f0000000440)={'GENERAL\x00', {&(0x7f0000000380)=@adf_str={@normal='NumberDcInstances\x00', {"129a3a86038dac93d51c88b653542df7f21964aaac9bf29b90306ec01989108d2c97b24872e0c5b4a5ca7fe07b247f5598ce745d1fac9230f134b921cc3b1890"}, {&(0x7f00000002c0)=@adf_hex={@normal='NumberDcInstances\x00', {0x5}}}}}}}}}, 0x1})
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000640)={0x28, 0x9, 0x1, 'queue0\x00', 0xc846})
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000580), 0x8)
setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000005c0)=@ccm_128={{0x303}, "90127d98ffe84208", "b73c0cb112e4c68a3b49eca0b5812a2a", "9ad89f3a", "8baee0211306e1cd"}, 0x28)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000600), 0x400, 0x0)
getsockopt$inet_tcp_int(r1, 0x6, 0xc, &(0x7f0000000080), &(0x7f0000000100)=0x4)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x121a02) (async)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000000)) (async)
setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) (async)
ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096101, &(0x7f0000000540)={{&(0x7f00000004c0)={'Accelerator0\x00', {&(0x7f0000000200)=@adf_dec={@format={'Dc', '0', 'NumConcurrentAsymRequests\x00'}, {0x4}, {&(0x7f0000000140)=@adf_dec={@format={'Dc', '4', 'BankNumber\x00'}, {0xb6c}}}}}, {&(0x7f0000000440)={'GENERAL\x00', {&(0x7f0000000380)=@adf_str={@normal='NumberDcInstances\x00', {"129a3a86038dac93d51c88b653542df7f21964aaac9bf29b90306ec01989108d2c97b24872e0c5b4a5ca7fe07b247f5598ce745d1fac9230f134b921cc3b1890"}, {&(0x7f00000002c0)=@adf_hex={@normal='NumberDcInstances\x00', {0x5}}}}}}}}}, 0x1}) (async)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000640)={0x28, 0x9, 0x1, 'queue0\x00', 0xc846}) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000580), 0x8) (async)
setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000005c0)=@ccm_128={{0x303}, "90127d98ffe84208", "b73c0cb112e4c68a3b49eca0b5812a2a", "9ad89f3a", "8baee0211306e1cd"}, 0x28) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000600), 0x400, 0x0) (async)
getsockopt$inet_tcp_int(r1, 0x6, 0xc, &(0x7f0000000080), &(0x7f0000000100)=0x4) (async)

[  751.032418][T20779]  ? vfs_fileattr_set+0xbe0/0xbe0
[  751.032469][T20779]  ? __context_tracking_exit+0xb8/0xe0
09:39:34 executing program 4:
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x201, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000040)=r1)

09:39:34 executing program 1:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x20600)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000100)={0xfffffffc, 0x9, 0x1, 'queue0\x00', 0x8})
r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000280)={0x1, 0x80, 0x0, 'queue1\x00', 0x7fff})
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000040)={0x2, 0x1, 0xfe})

[  751.032503][T20779]  ? __fget_files+0x286/0x470
09:39:34 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:34 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:34 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x161180)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

09:39:34 executing program 4:
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x201, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000040)=r1)

[  751.032545][T20779]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  751.032579][T20779]  ? binder_thread_write+0x3220/0x3220
09:39:34 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
r2 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3)
ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000000))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r1)
r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, r4, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xd148}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xbc0c}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xfff7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x400c000)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

09:39:34 executing program 1:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x20600)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000100)={0xfffffffc, 0x9, 0x1, 'queue0\x00', 0x8})
pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000040)={0x2, 0x1, 0xfe})

09:39:34 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0xff000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:34 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x161180)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

09:39:34 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  751.032621][T20779]  __x64_sys_ioctl+0x193/0x200
[  751.032659][T20779]  do_syscall_64+0x35/0xb0
[  751.032691][T20779]  entry_SYSCALL_64_after_hwframe+0x46/0xb0
09:39:34 executing program 1:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x20600)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000100)={0xfffffffc, 0x9, 0x1, 'queue0\x00', 0x8})
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000040)={0x2, 0x1, 0xfe})

09:39:34 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async, rerun: 32)
r2 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0) (rerun: 32)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3)
ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000000)) (async, rerun: 32)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r1)
r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, r4, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xd148}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xbc0c}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xfff7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x400c000) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

09:39:34 executing program 4:
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x201, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000040)=r1)

09:39:34 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  751.032720][T20779] RIP: 0033:0x7fedcda890e9
09:39:34 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x161180)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x161180) (async)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)

09:39:34 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:34 executing program 1:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x20600)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000040)={0x2, 0x1, 0xfe})

09:39:34 executing program 4:
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x201, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000040)=r1)

[  751.032740][T20779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
09:39:34 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
r2 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3)
ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000000)) (async, rerun: 32)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r1) (async)
r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, r4, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xd148}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xbc0c}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xfff7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x400c000)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

09:39:34 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:34 executing program 1:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000040)={0x2, 0x1, 0xfe})

09:39:34 executing program 4:
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x201, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000040)=r1)

[  751.032764][T20779] RSP: 002b:00007fedcec56168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
09:39:34 executing program 2:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x10000)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0)

09:39:34 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:34 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  751.032787][T20779] RAX: ffffffffffffffda RBX: 00007fedcdb9bf60 RCX: 00007fedcda890e9
[  751.032803][T20779] RDX: 0000000020000340 RSI: 00000000c00c6211 RDI: 0000000000000003
09:39:34 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000000), 0x0, &(0x7f0000000100))
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x22}, "35993d1e45eac12af74e6b9f2435fcd5d096961586c8e70ea7f0f25611514a46cb44"}, 0x26)

09:39:34 executing program 2:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x10000)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x10000) (async)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0) (async)

09:39:34 executing program 1:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000040)={0x2, 0x1, 0xfe})

09:39:34 executing program 4:
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x201, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000040)=r1)

09:39:34 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:34 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  751.032819][T20779] RBP: 00007fedcdae308d R08: 0000000000000000 R09: 0000000000000000
09:39:34 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000000), 0x0, &(0x7f0000000100))
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)
syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x22}, "35993d1e45eac12af74e6b9f2435fcd5d096961586c8e70ea7f0f25611514a46cb44"}, 0x26)

09:39:34 executing program 4:
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000040)=r1)

09:39:34 executing program 1:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000040)={0x2, 0x1, 0xfe})

09:39:34 executing program 2:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x10000) (async)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0)

[  751.032833][T20779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  751.032847][T20779] R13: 00007ffd2714f20f R14: 00007fedcec56300 R15: 0000000000022000
[  751.032883][T20779]  </TASK>
09:39:34 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:34 executing program 1:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x20600)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000040)={0x2, 0x1, 0xfe})

[  751.032946][T20779] 
09:39:34 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:34 executing program 4:
openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000040)=r0)

09:39:34 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x92003)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

09:39:34 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000000), 0x0, &(0x7f0000000100))
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x22}, "35993d1e45eac12af74e6b9f2435fcd5d096961586c8e70ea7f0f25611514a46cb44"}, 0x26)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000000), 0x0, &(0x7f0000000100)) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)
syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x22}, "35993d1e45eac12af74e6b9f2435fcd5d096961586c8e70ea7f0f25611514a46cb44"}, 0x26) (async)

09:39:34 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  751.032951][T20779] =============================
[  751.032957][T20779] [ BUG: Invalid wait context ]
[  751.032963][T20779] 5.18.0-rc6-next-20220516-syzkaller #0 Tainted: G        W        
09:39:34 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:34 executing program 1:
r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x20600)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000040)={0x2, 0x1, 0xfe})

[  751.032977][T20779] -----------------------------
09:39:34 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0)

09:39:34 executing program 4:
openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000040)=r0)

09:39:34 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:34 executing program 1:
r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x20600)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000040)={0x2, 0x1, 0xfe})

09:39:34 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x92003)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

09:39:34 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:34 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0)

[  751.032983][T20779] syz-executor.3/20779 is trying to lock:
[  751.032995][T20779] ffff8880778b8158 (&mm->mmap_lock#2){++++}-{3:3}, at: __might_fault+0xa1/0x170
09:39:34 executing program 4:
openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000040)=r0)

09:39:34 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:34 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async)
pidfd_getfd(0xffffffffffffffff, r0, 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0) (async)

09:39:34 executing program 1:
r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x20600)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000040)={0x2, 0x1, 0xfe})

09:39:34 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x92003)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

09:39:34 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  751.033057][T20779] other info that might help us debug this:
[  751.033064][T20779] context-{4:4}
[  751.033072][T20779] 1 lock held by syz-executor.3/20779:
09:39:34 executing program 4:
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, 0x0)

09:39:34 executing program 1:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000040)={0x2, 0x1, 0xfe})

09:39:34 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000000)=""/24)

09:39:34 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:34 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10}, 0x18)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

[  751.033084][T20779]  #0: ffff8880486d1af8 (&proc->inner_lock){+.+.}-{2:2}, at: binder_ioctl+0x798/0x6d80
[  751.033151][T20779] stack backtrace:
09:39:34 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:34 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000000)=""/24)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000000)=""/24) (async)

09:39:34 executing program 4:
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, 0x0)

09:39:34 executing program 1:
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000040)={0x2, 0x1, 0xfe})

09:39:34 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async, rerun: 64)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10}, 0x18) (async, rerun: 64)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

09:39:34 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:34 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  751.033157][T20779] CPU: 0 PID: 20779 Comm: syz-executor.3 Tainted: G        W         5.18.0-rc6-next-20220516-syzkaller #0
[  751.033184][T20779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
09:39:34 executing program 4:
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, 0x0)

09:39:34 executing program 4:
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000040))

09:39:34 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000000)=""/24)

09:39:34 executing program 1:
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000040)={0x2, 0x1, 0xfe})

[  751.033198][T20779] Call Trace:
[  751.033203][T20779]  <TASK>
[  751.033211][T20779]  dump_stack_lvl+0xcd/0x134
09:39:34 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:34 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:34 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10}, 0x18) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

09:39:34 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xc500, 0x0)
ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000100)=""/186)

09:39:34 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  751.033242][T20779]  __lock_acquire.cold+0xdb/0x3b4
[  751.033285][T20779]  ? lock_chain_count+0x20/0x20
[  751.033324][T20779]  ? lockdep_hardirqs_on_prepare+0x400/0x400
09:39:34 executing program 4:
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000040))

09:39:34 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:34 executing program 1:
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000040)={0x2, 0x1, 0xfe})

09:39:35 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xc500, 0x0)
ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000100)=""/186)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xc500, 0x0) (async)
ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000100)=""/186) (async)

09:39:35 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x52000)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

[  751.033371][T20779]  lock_acquire+0x1ab/0x570
[  751.033416][T20779]  ? __might_fault+0xa1/0x170
[  751.033448][T20779]  ? lock_release+0x780/0x780
09:39:35 executing program 1:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, 0x0)

09:39:35 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:35 executing program 4:
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000040))

09:39:35 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  751.033484][T20779]  ? dump_stack_lvl+0x120/0x134
[  751.033514][T20779]  ? dump_stack_lvl+0x12a/0x134
[  751.033543][T20779]  ? dump_stack_lvl+0x12c/0x134
09:39:35 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:35 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x52000)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x52000) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)

09:39:35 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xc500, 0x0)
ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000100)=""/186)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xc500, 0x0) (async)
ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000100)=""/186) (async)

09:39:35 executing program 1:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, 0x0)

09:39:35 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  751.033574][T20779]  __might_fault+0x104/0x170
[  751.033600][T20779]  ? __might_fault+0xa1/0x170
09:39:35 executing program 4:
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, 0x0)

09:39:35 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  751.033627][T20779]  _copy_to_user+0x25/0x140
[  751.033667][T20779]  binder_ioctl+0x7aa/0x6d80
[  751.033704][T20779]  ? __sanitizer_cov_trace_const_cmp1+0x22/0x80
09:39:35 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x52000)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x52000) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)

09:39:35 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000000)={0xe, 0x8, 0x5})

09:39:35 executing program 1:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, 0x0)

09:39:35 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:35 executing program 4:
openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000040)=r0)

09:39:35 executing program 5:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000000))
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0)

[  751.033736][T20779]  ? tomoyo_path_number_perm+0x24e/0x590
[  751.033771][T20779]  ? tomoyo_execute_permission+0x4a0/0x4a0
09:39:35 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:35 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:35 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:35 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000000)={0xe, 0x8, 0x5})
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000000)={0xe, 0x8, 0x5}) (async)

09:39:35 executing program 1:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000040)={0x0, 0x1, 0xfe})

09:39:35 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:35 executing program 5:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000000)) (async)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0)

[  751.033806][T20779]  ? lockdep_hardirqs_on_prepare+0x400/0x400
[  751.033845][T20779]  ? binder_thread_write+0x3220/0x3220
[  751.033879][T20779]  ? __sanitizer_cov_trace_const_cmp2+0x22/0x80
09:39:35 executing program 1:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000040)={0x0, 0x1, 0xfe})

09:39:35 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:35 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:35 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000000)={0xe, 0x8, 0x5})

09:39:35 executing program 5:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000000)) (async)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0)

[  751.033909][T20779]  ? do_vfs_ioctl+0x132/0x15c0
[  751.033941][T20779]  ? vfs_fileattr_set+0xbe0/0xbe0
09:39:35 executing program 4:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000000), 0x0, &(0x7f0000000100))
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x22}, "35993d1e45eac12af74e6b9f2435fcd5d096961586c8e70ea7f0f25611514a46cb44"}, 0x26)

09:39:35 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:35 executing program 1:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000040)={0x0, 0x1, 0xfe})

09:39:35 executing program 5:
ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f0000000000)={0x2, 0x10001, 0x7fffffff, 0x7f, 0x6, 0xef, 0xd5, 0x3f, 0xc6, 0x4, 0x6, "9be56d01eee9f8229cd8208981f31285019d38bdc68056ffb73431c0d960e8ef"})
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
mmap$binder(&(0x7f0000ff8000/0x6000)=nil, 0x6000, 0x1, 0x11, 0xffffffffffffffff, 0x5)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000140)=0x8000)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080))

[  751.033980][T20779]  ? __context_tracking_exit+0xb8/0xe0
[  751.034006][T20779]  ? __fget_files+0x286/0x470
09:39:35 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x400900)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x802, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001200)={0xcc, 0x0, &(0x7f00000023c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000040)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000001240)=""/148, 0x94, 0x1}, @fda={0x66646185, 0x3, 0x1, 0x11}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x400}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x70, 0x18, &(0x7f0000002300)={@ptr={0x70742a85, 0x1, &(0x7f0000001300)=""/4096, 0x1000, 0x1, 0x200000000026}, @ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/173, 0xad, 0x2, 0x33}, @fda={0x66646185, 0x0, 0x2, 0x1b}}, &(0x7f0000002380)={0x0, 0x28, 0x50}}}, @acquire_done={0x40106309, 0x1}, @exit_looper, @enter_looper, @exit_looper, @increfs_done={0x40106308, 0x3}], 0x1000, 0x0, &(0x7f0000000200)="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"})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

09:39:35 executing program 4:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000000), 0x0, &(0x7f0000000100))
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x22}, "35993d1e45eac12af74e6b9f2435fcd5d096961586c8e70ea7f0f25611514a46cb44"}, 0x26)

09:39:35 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  751.034039][T20779]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
09:39:35 executing program 1:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000040)={0x2, 0x0, 0xfe})

09:39:35 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:35 executing program 5:
ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f0000000000)={0x2, 0x10001, 0x7fffffff, 0x7f, 0x6, 0xef, 0xd5, 0x3f, 0xc6, 0x4, 0x6, "9be56d01eee9f8229cd8208981f31285019d38bdc68056ffb73431c0d960e8ef"})
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
mmap$binder(&(0x7f0000ff8000/0x6000)=nil, 0x6000, 0x1, 0x11, 0xffffffffffffffff, 0x5)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000140)=0x8000)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080))
ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f0000000000)={0x2, 0x10001, 0x7fffffff, 0x7f, 0x6, 0xef, 0xd5, 0x3f, 0xc6, 0x4, 0x6, "9be56d01eee9f8229cd8208981f31285019d38bdc68056ffb73431c0d960e8ef"}) (async)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async)
mmap$binder(&(0x7f0000ff8000/0x6000)=nil, 0x6000, 0x1, 0x11, 0xffffffffffffffff, 0x5) (async)
openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000140)=0x8000) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async)
ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) (async)

09:39:35 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x400900)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x802, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001200)={0xcc, 0x0, &(0x7f00000023c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000040)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000001240)=""/148, 0x94, 0x1}, @fda={0x66646185, 0x3, 0x1, 0x11}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x400}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x70, 0x18, &(0x7f0000002300)={@ptr={0x70742a85, 0x1, &(0x7f0000001300)=""/4096, 0x1000, 0x1, 0x200000000026}, @ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/173, 0xad, 0x2, 0x33}, @fda={0x66646185, 0x0, 0x2, 0x1b}}, &(0x7f0000002380)={0x0, 0x28, 0x50}}}, @acquire_done={0x40106309, 0x1}, @exit_looper, @enter_looper, @exit_looper, @increfs_done={0x40106308, 0x3}], 0x1000, 0x0, &(0x7f0000000200)="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"})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

09:39:35 executing program 4:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000000), 0x0, &(0x7f0000000100))
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x22}, "35993d1e45eac12af74e6b9f2435fcd5d096961586c8e70ea7f0f25611514a46cb44"}, 0x26)

09:39:35 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  751.034070][T20779]  ? binder_thread_write+0x3220/0x3220
[  751.034106][T20779]  __x64_sys_ioctl+0x193/0x200
[  751.034137][T20779]  do_syscall_64+0x35/0xb0
09:39:35 executing program 1:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000040)={0x2})

09:39:35 executing program 5:
ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f0000000000)={0x2, 0x10001, 0x7fffffff, 0x7f, 0x6, 0xef, 0xd5, 0x3f, 0xc6, 0x4, 0x6, "9be56d01eee9f8229cd8208981f31285019d38bdc68056ffb73431c0d960e8ef"}) (async, rerun: 64)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async, rerun: 64)
mmap$binder(&(0x7f0000ff8000/0x6000)=nil, 0x6000, 0x1, 0x11, 0xffffffffffffffff, 0x5) (async)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000140)=0x8000)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async, rerun: 64)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (rerun: 64)
ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080))

09:39:35 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x400900) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x802, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001200)={0xcc, 0x0, &(0x7f00000023c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000040)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000001240)=""/148, 0x94, 0x1}, @fda={0x66646185, 0x3, 0x1, 0x11}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x400}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x70, 0x18, &(0x7f0000002300)={@ptr={0x70742a85, 0x1, &(0x7f0000001300)=""/4096, 0x1000, 0x1, 0x200000000026}, @ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/173, 0xad, 0x2, 0x33}, @fda={0x66646185, 0x0, 0x2, 0x1b}}, &(0x7f0000002380)={0x0, 0x28, 0x50}}}, @acquire_done={0x40106309, 0x1}, @exit_looper, @enter_looper, @exit_looper, @increfs_done={0x40106308, 0x3}], 0x1000, 0x0, &(0x7f0000000200)="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"}) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

09:39:35 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  751.034167][T20779]  entry_SYSCALL_64_after_hwframe+0x46/0xb0
[  751.034193][T20779] RIP: 0033:0x7fedcda890e9
09:39:35 executing program 4:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000000), 0x0, &(0x7f0000000100))
syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x22}, "35993d1e45eac12af74e6b9f2435fcd5d096961586c8e70ea7f0f25611514a46cb44"}, 0x26)

09:39:35 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0xff000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:35 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0xff000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:35 executing program 1:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000040)={0x2})

[  751.034210][T20779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
09:39:35 executing program 4:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x22}, "35993d1e45eac12af74e6b9f2435fcd5d096961586c8e70ea7f0f25611514a46cb44"}, 0x26)

09:39:35 executing program 2:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000100)=""/4096)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0)

09:39:35 executing program 5:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x2, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1, 0xc}}, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={<r2=>0xffffffffffffffff}, 0x111, 0x3}}, 0x20)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240), 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000200), r2}}, 0x18)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x100)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0)

09:39:35 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  751.034233][T20779] RSP: 002b:00007fedcec56168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
09:39:35 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:35 executing program 1:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x20600)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000100)={0xfffffffc, 0x9, 0x1, 'queue0\x00', 0x8})
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000040)={0x2, 0x1, 0xfe})

09:39:35 executing program 5:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x2, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1, 0xc}}, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={<r2=>0xffffffffffffffff}, 0x111, 0x3}}, 0x20)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240), 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000200), r2}}, 0x18) (async)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x100)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0)

09:39:35 executing program 4:
syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x22}, "35993d1e45eac12af74e6b9f2435fcd5d096961586c8e70ea7f0f25611514a46cb44"}, 0x26)

09:39:35 executing program 2:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000100)=""/4096) (async)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0)

09:39:35 executing program 1:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x20600)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000100)={0xfffffffc, 0x9, 0x1, 'queue0\x00', 0x8})
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000040)={0x2, 0x1, 0xfe})

[  751.034257][T20779] RAX: ffffffffffffffda RBX: 00007fedcdb9bf60 RCX: 00007fedcda890e9
[  751.034273][T20779] RDX: 0000000020000340 RSI: 00000000c00c6211 RDI: 0000000000000003
09:39:35 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:35 executing program 4:
syz_emit_vhci(0x0, 0x0)

09:39:35 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:35 executing program 5:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x2, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1, 0xc}}, 0x10) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={<r2=>0xffffffffffffffff}, 0x111, 0x3}}, 0x20) (async)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240), 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000200), r2}}, 0x18)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x100)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0)

[  751.034287][T20779] RBP: 00007fedcdae308d R08: 0000000000000000 R09: 0000000000000000
09:39:35 executing program 1:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x20600)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000100)={0xfffffffc, 0x9, 0x1, 'queue0\x00', 0x8})
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000040)={0x2, 0x1, 0xfe})

09:39:35 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:35 executing program 4:
syz_emit_vhci(0x0, 0x0)

09:39:35 executing program 2:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000100)=""/4096) (async)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0)

09:39:35 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  751.034301][T20779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  751.034314][T20779] R13: 00007ffd2714f20f R14: 00007fedcec56300 R15: 0000000000022000
09:39:35 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
process_mrelease(r0, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x70, 0x0, &(0x7f0000000280)=[@acquire_done={0x40106309, 0x3}, @acquire={0x40046305, 0x2}, @release={0x40046306, 0x3}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/141, 0x8d, 0x1, 0x1d}, @flat=@binder={0x73622a85, 0x101, 0x1}, @fda={0x66646185, 0x9, 0x1, 0x11}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}}, @register_looper, @enter_looper], 0x47, 0x0, &(0x7f0000000300)="7078d8d78eb73534e4a6e5ce65f61509b0f3e3f20b2f82f57230e58e60cd3195dfd65aa8b6f90bba45ff5818cf2bd52f75fe97058cee3281d77ad69296a887e827d45920399716"})
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3)

[  751.034336][T20779]  </TASK>
09:39:35 executing program 1:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x20600)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000100)={0xfffffffc, 0x9, 0x1, 'queue0\x00', 0x8})

09:39:35 executing program 4:
syz_emit_vhci(0x0, 0x0)

09:39:35 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:35 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3)

09:39:35 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  751.144679][T20796] binder: 20792:20796 ioctl c00c620f 20000340 returned -22
[  751.228831][T20811] binder: 20805:20811 ioctl c018620c 20000340 returned -22
09:39:35 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
process_mrelease(r0, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x70, 0x0, &(0x7f0000000280)=[@acquire_done={0x40106309, 0x3}, @acquire={0x40046305, 0x2}, @release={0x40046306, 0x3}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/141, 0x8d, 0x1, 0x1d}, @flat=@binder={0x73622a85, 0x101, 0x1}, @fda={0x66646185, 0x9, 0x1, 0x11}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}}, @register_looper, @enter_looper], 0x47, 0x0, &(0x7f0000000300)="7078d8d78eb73534e4a6e5ce65f61509b0f3e3f20b2f82f57230e58e60cd3195dfd65aa8b6f90bba45ff5818cf2bd52f75fe97058cee3281d77ad69296a887e827d45920399716"})
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
process_mrelease(r0, 0x0) (async)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0) (async)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x70, 0x0, &(0x7f0000000280)=[@acquire_done={0x40106309, 0x3}, @acquire={0x40046305, 0x2}, @release={0x40046306, 0x3}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/141, 0x8d, 0x1, 0x1d}, @flat=@binder={0x73622a85, 0x101, 0x1}, @fda={0x66646185, 0x9, 0x1, 0x11}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}}, @register_looper, @enter_looper], 0x47, 0x0, &(0x7f0000000300)="7078d8d78eb73534e4a6e5ce65f61509b0f3e3f20b2f82f57230e58e60cd3195dfd65aa8b6f90bba45ff5818cf2bd52f75fe97058cee3281d77ad69296a887e827d45920399716"}) (async)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) (async)

09:39:35 executing program 4:
syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0x0, 0x22}, "35993d1e45eac12af74e6b9f2435fcd5d096961586c8e70ea7f0f25611514a46cb44"}, 0x26)

09:39:35 executing program 1:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000100)={0xfffffffc, 0x9, 0x1, 'queue0\x00', 0x8})

09:39:35 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3)

09:39:35 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:36 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  751.392084][T20835] binder: 20830:20835 ioctl c018620c 20000340 returned -22
[  751.469884][T20846] binder: 20845:20846 ioctl c0306202 20000340 returned -22
09:39:36 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
process_mrelease(r0, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x70, 0x0, &(0x7f0000000280)=[@acquire_done={0x40106309, 0x3}, @acquire={0x40046305, 0x2}, @release={0x40046306, 0x3}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/141, 0x8d, 0x1, 0x1d}, @flat=@binder={0x73622a85, 0x101, 0x1}, @fda={0x66646185, 0x9, 0x1, 0x11}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}}, @register_looper, @enter_looper], 0x47, 0x0, &(0x7f0000000300)="7078d8d78eb73534e4a6e5ce65f61509b0f3e3f20b2f82f57230e58e60cd3195dfd65aa8b6f90bba45ff5818cf2bd52f75fe97058cee3281d77ad69296a887e827d45920399716"})
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
process_mrelease(r0, 0x0) (async)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0) (async)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x70, 0x0, &(0x7f0000000280)=[@acquire_done={0x40106309, 0x3}, @acquire={0x40046305, 0x2}, @release={0x40046306, 0x3}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/141, 0x8d, 0x1, 0x1d}, @flat=@binder={0x73622a85, 0x101, 0x1}, @fda={0x66646185, 0x9, 0x1, 0x11}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}}, @register_looper, @enter_looper], 0x47, 0x0, &(0x7f0000000300)="7078d8d78eb73534e4a6e5ce65f61509b0f3e3f20b2f82f57230e58e60cd3195dfd65aa8b6f90bba45ff5818cf2bd52f75fe97058cee3281d77ad69296a887e827d45920399716"}) (async)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) (async)

09:39:36 executing program 4:
syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT, 0x4)

09:39:36 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:36 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) (async)

09:39:36 executing program 1:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000100)={0xfffffffc, 0x9, 0x1, 'queue0\x00', 0x8})

09:39:36 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  751.556724][T20857] binder: 20856:20857 ioctl c0306203 20000340 returned -22
[  751.600699][T20863] binder: 20861:20863 ioctl c0306202 20000340 returned -22
09:39:36 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:36 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x488501)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000040)={0x2, 0x1, 0x4, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

09:39:36 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:36 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  751.665390][T20871] binder: 20868:20871 ioctl c0306205 20000340 returned -22
[  751.700177][T20878] binder: 20875:20878 ioctl c0306203 20000340 returned -22
09:39:36 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

09:39:36 executing program 1:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000100)={0xfffffffc, 0x9, 0x1, 'queue0\x00', 0x8})

09:39:36 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x2, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1, 0xc}}, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={<r2=>0xffffffffffffffff}, 0x111, 0x3}}, 0x20)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240), 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000200), r2}}, 0x18)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x100)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0)

[  751.719140][T20884] binder: 20880:20884 ioctl c0306207 20000340 returned -22
09:39:36 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:36 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async)
ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

09:39:36 executing program 1:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x20600)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000100)={0xfffffffc, 0x9, 0x1, 'queue0\x00', 0x8})

09:39:36 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x488501) (async)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000040)={0x2, 0x1, 0x4, 0x0, 0x4}) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

09:39:36 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:36 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:36 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x2, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1, 0xc}}, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={<r2=>0xffffffffffffffff}, 0x111, 0x3}}, 0x20)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240), 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000200), r2}}, 0x18)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x100)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0)

[  751.768499][T20890] binder: 20889:20890 ioctl c0306205 20000340 returned -22
[  751.810957][T20897] binder: 20893:20897 ioctl c0306215 20000340 returned -22
09:39:36 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:36 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

[  751.842763][T20902] binder: 20901:20902 ioctl c0306207 20000340 returned -22
[  751.878251][T20908] binder: 20904:20908 unknown command 16456
09:39:36 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x488501)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000040)={0x2, 0x1, 0x4, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x488501) (async)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000040)={0x2, 0x1, 0x4, 0x0, 0x4}) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)

09:39:36 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x2, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1, 0xc}}, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={<r2=>0xffffffffffffffff}, 0x111, 0x3}}, 0x20)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240), 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000200), r2}}, 0x18)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x100)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0)

09:39:36 executing program 1:
r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x20600)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000100)={0xfffffffc, 0x9, 0x1, 'queue0\x00', 0x8})

09:39:36 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0xff00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:36 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0xff00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:36 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40100)
syz_clone3(&(0x7f00000002c0)={0x400, &(0x7f0000000040)=<r1=>0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100), {0x11}, &(0x7f0000000140)=""/247, 0xf7, &(0x7f0000000240)=""/21, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x3}, 0x58)
pidfd_getfd(r1, r0, 0x0)

09:39:36 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x2, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1, 0xc}}, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={<r2=>0xffffffffffffffff}, 0x111, 0x3}}, 0x20)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240), 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000200), r2}}, 0x18)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x100)

[  751.878272][T20908] binder: 20904:20908 ioctl c0306201 20000340 returned -22
[  751.912897][T20916] binder: 20914:20916 ioctl c0306215 20000340 returned -22
09:39:36 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:36 executing program 1:
r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x20600)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000100)={0xfffffffc, 0x9, 0x1, 'queue0\x00', 0x8})

09:39:36 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)

09:39:36 executing program 1:
r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x20600)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000100)={0xfffffffc, 0x9, 0x1, 'queue0\x00', 0x8})

09:39:36 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  751.985759][T20923] binder: 20922:20923 unknown command 64
[  751.985781][T20923] binder: 20922:20923 ioctl c0306201 20000340 returned -22
[  752.046820][T20933] binder: 20929:20933 unknown command 16456
09:39:36 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:36 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x2, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1, 0xc}}, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={<r2=>0xffffffffffffffff}, 0x111, 0x3}}, 0x20)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240), 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000200), r2}}, 0x18)

09:39:36 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40100)
syz_clone3(&(0x7f00000002c0)={0x400, &(0x7f0000000040)=<r1=>0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100), {0x11}, &(0x7f0000000140)=""/247, 0xf7, &(0x7f0000000240)=""/21, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x3}, 0x58)
pidfd_getfd(r1, r0, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40100) (async)
syz_clone3(&(0x7f00000002c0)={0x400, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000100), {0x11}, &(0x7f0000000140)=""/247, 0xf7, &(0x7f0000000240)=""/21, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x3}, 0x58) (async)
pidfd_getfd(r1, r0, 0x0) (async)

09:39:36 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async, rerun: 32)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) (rerun: 32)

09:39:36 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  752.046840][T20933] binder: 20929:20933 ioctl c0306201 20000340 returned -22
09:39:36 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:36 executing program 1:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000100)={0xfffffffc, 0x9, 0x1, 'queue0\x00', 0x8})

09:39:36 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)

09:39:36 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x2, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1, 0xc}}, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={<r2=>0xffffffffffffffff}, 0x111, 0x3}}, 0x20)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000200), r2}}, 0x18)

[  752.046880][T20937] binder: 20930:20937 unknown command 0
[  752.046894][T20937] binder: 20930:20937 ioctl c0306201 20000340 returned -22
09:39:36 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40100) (async)
syz_clone3(&(0x7f00000002c0)={0x400, &(0x7f0000000040)=<r1=>0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100), {0x11}, &(0x7f0000000140)=""/247, 0xf7, &(0x7f0000000240)=""/21, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x3}, 0x58)
pidfd_getfd(r1, r0, 0x0)

09:39:36 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:36 executing program 1:
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000100)={0xfffffffc, 0x9, 0x1, 'queue0\x00', 0x8})

09:39:36 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  752.112350][T20942] binder: 20941:20942 unknown command 0
[  752.112399][T20942] binder: 20941:20942 ioctl c0306201 20000340 returned -22
09:39:36 executing program 5:
keyctl$join(0x1, 0x0)
keyctl$join(0x1, 0x0)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x200301, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x2})
r3 = getpgid(0x0)
ptrace$peek(0xffffffffffffffff, r3, 0x0)
read$FUSE(r2, &(0x7f0000000440)={0x2020, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x2020)
r5 = openat$null(0xffffffffffffff9c, &(0x7f00000024c0), 0x26002, 0x0)
syz_clone3(&(0x7f0000002500)={0x10000000, &(0x7f0000000100), &(0x7f0000000280), &(0x7f00000002c0), {0x2c}, &(0x7f0000000300)=""/230, 0xe6, &(0x7f0000000400)=""/30, &(0x7f0000002480)=[r3, r4], 0x2, {r5}}, 0x58)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0x8)
r7 = pidfd_getfd(r1, r6, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r7, 0x80dc5521, &(0x7f0000002580)=""/149)
ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000000))
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)

09:39:36 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:36 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:36 executing program 1:
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000100)={0xfffffffc, 0x9, 0x1, 'queue0\x00', 0x8})

09:39:36 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x2, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1, 0xc}}, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={<r2=>0xffffffffffffffff}, 0x111, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000200), r2}}, 0x18)

[  752.146013][T20947] binder: 20946:20947 unknown command 64
[  752.146033][T20947] binder: 20946:20947 ioctl c0306201 20000340 returned -22
09:39:36 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
pidfd_send_signal(r2, 0x35, &(0x7f0000000240)={0x23, 0x0, 0x3857}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000040)={0x6, 0x7fffffff, 0xfffff97c, {0x5, 0x20002}, 0x486})
r3 = syz_open_dev$evdev(&(0x7f0000000140), 0xe2, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f0000000180)=""/182)

09:39:36 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:36 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x2, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1, 0xc}}, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={<r2=>0xffffffffffffffff}, 0x111, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000200), r2}}, 0x18)

09:39:36 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:36 executing program 1:
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000100)={0xfffffffc, 0x9, 0x1, 'queue0\x00', 0x8})

[  752.211131][T20959] binder: 20958:20959 unknown command 0
[  752.211151][T20959] binder: 20958:20959 ioctl c0306201 20000340 returned -22
09:39:36 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:36 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async, rerun: 64)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) (rerun: 64)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) (async, rerun: 64)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (rerun: 64)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async, rerun: 64)
pidfd_send_signal(r2, 0x35, &(0x7f0000000240)={0x23, 0x0, 0x3857}, 0x0) (async, rerun: 64)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000040)={0x6, 0x7fffffff, 0xfffff97c, {0x5, 0x20002}, 0x486}) (async)
r3 = syz_open_dev$evdev(&(0x7f0000000140), 0xe2, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f0000000180)=""/182)

09:39:36 executing program 5:
keyctl$join(0x1, 0x0)
keyctl$join(0x1, 0x0)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x200301, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x2})
r3 = getpgid(0x0)
ptrace$peek(0xffffffffffffffff, r3, 0x0)
read$FUSE(r2, &(0x7f0000000440)={0x2020, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x2020)
r5 = openat$null(0xffffffffffffff9c, &(0x7f00000024c0), 0x26002, 0x0)
syz_clone3(&(0x7f0000002500)={0x10000000, &(0x7f0000000100), &(0x7f0000000280), &(0x7f00000002c0), {0x2c}, &(0x7f0000000300)=""/230, 0xe6, &(0x7f0000000400)=""/30, &(0x7f0000002480)=[r3, r4], 0x2, {r5}}, 0x58)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0x8)
r7 = pidfd_getfd(r1, r6, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r7, 0x80dc5521, &(0x7f0000002580)=""/149)
ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000000))
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)
keyctl$join(0x1, 0x0) (async)
keyctl$join(0x1, 0x0) (async)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async)
pidfd_getfd(0xffffffffffffffff, r0, 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)
openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x200301, 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x2}) (async)
getpgid(0x0) (async)
ptrace$peek(0xffffffffffffffff, r3, 0x0) (async)
read$FUSE(r2, &(0x7f0000000440)={0x2020}, 0x2020) (async)
openat$null(0xffffffffffffff9c, &(0x7f00000024c0), 0x26002, 0x0) (async)
syz_clone3(&(0x7f0000002500)={0x10000000, &(0x7f0000000100), &(0x7f0000000280), &(0x7f00000002c0), {0x2c}, &(0x7f0000000300)=""/230, 0xe6, &(0x7f0000000400)=""/30, &(0x7f0000002480)=[r3, r4], 0x2, {r5}}, 0x58) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0x8) (async)
pidfd_getfd(r1, r6, 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r7, 0x80dc5521, &(0x7f0000002580)=""/149) (async)
ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000000)) (async)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) (async)

09:39:36 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x2, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1, 0xc}}, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={<r2=>0xffffffffffffffff}, 0x111, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000200), r2}}, 0x18)

09:39:36 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:36 executing program 1:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, 0x0)

[  752.224064][T20960] binder: 20953:20960 unknown command 0
[  752.224083][T20960] binder: 20953:20960 ioctl c0306201 20000340 returned -22
09:39:36 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:36 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  752.308866][T20971] binder: 20970:20971 unknown command 0
[  752.308886][T20971] binder: 20970:20971 ioctl c0306201 20000340 returned -22
09:39:36 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x2, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1, 0xc}}, 0x10)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x18)

09:39:36 executing program 1:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, 0x0)

09:39:36 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:36 executing program 5:
keyctl$join(0x1, 0x0)
keyctl$join(0x1, 0x0)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x200301, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x2})
r3 = getpgid(0x0)
ptrace$peek(0xffffffffffffffff, r3, 0x0)
read$FUSE(r2, &(0x7f0000000440)={0x2020, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x2020)
r5 = openat$null(0xffffffffffffff9c, &(0x7f00000024c0), 0x26002, 0x0)
syz_clone3(&(0x7f0000002500)={0x10000000, &(0x7f0000000100), &(0x7f0000000280), &(0x7f00000002c0), {0x2c}, &(0x7f0000000300)=""/230, 0xe6, &(0x7f0000000400)=""/30, &(0x7f0000002480)=[r3, r4], 0x2, {r5}}, 0x58)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0x8)
r7 = pidfd_getfd(r1, r6, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r7, 0x80dc5521, &(0x7f0000002580)=""/149)
ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000000))
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)
keyctl$join(0x1, 0x0) (async)
keyctl$join(0x1, 0x0) (async)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async)
pidfd_getfd(0xffffffffffffffff, r0, 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)
openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x200301, 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x2}) (async)
getpgid(0x0) (async)
ptrace$peek(0xffffffffffffffff, r3, 0x0) (async)
read$FUSE(r2, &(0x7f0000000440)={0x2020}, 0x2020) (async)
openat$null(0xffffffffffffff9c, &(0x7f00000024c0), 0x26002, 0x0) (async)
syz_clone3(&(0x7f0000002500)={0x10000000, &(0x7f0000000100), &(0x7f0000000280), &(0x7f00000002c0), {0x2c}, &(0x7f0000000300)=""/230, 0xe6, &(0x7f0000000400)=""/30, &(0x7f0000002480)=[r3, r4], 0x2, {r5}}, 0x58) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0x8) (async)
pidfd_getfd(r1, r6, 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r7, 0x80dc5521, &(0x7f0000002580)=""/149) (async)
ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000000)) (async)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) (async)

09:39:36 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  752.358690][T20985] binder: 20976:20985 unknown command 0
[  752.358708][T20985] binder: 20976:20985 ioctl c0306201 20000340 returned -22
09:39:36 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async, rerun: 32)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) (async, rerun: 32)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (rerun: 32)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
pidfd_send_signal(r2, 0x35, &(0x7f0000000240)={0x23, 0x0, 0x3857}, 0x0) (async)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000040)={0x6, 0x7fffffff, 0xfffff97c, {0x5, 0x20002}, 0x486}) (async)
r3 = syz_open_dev$evdev(&(0x7f0000000140), 0xe2, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f0000000180)=""/182)

09:39:36 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x2, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1, 0xc}}, 0x10)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x18)

09:39:36 executing program 1:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, 0x0)

[  752.447254][T20999] binder: 20997:20999 unknown command 0
[  752.447274][T20999] binder: 20997:20999 ioctl c0306201 20000340 returned -22
09:39:36 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:37 executing program 1:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000100)={0x0, 0x9, 0x1, 'queue0\x00', 0x8})

09:39:37 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x2, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1, 0xc}}, 0x10)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x18)

09:39:37 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  752.564099][T21013] binder: 21011:21013 unknown command 0
[  752.564120][T21013] binder: 21011:21013 ioctl c0306201 20000340 returned -22
09:39:37 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000040)={0x4, 0x2, 0x0, 0x0, 0x3})

09:39:37 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:37 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:37 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x2, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={<r1=>0xffffffffffffffff}, 0x111, 0x3}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000200), r1}}, 0x18)

09:39:37 executing program 1:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000100)={0x0, 0x9, 0x1, 'queue0\x00', 0x8})

[  753.500289][T21180] binder: 21179:21180 ioctl c0306201 0 returned -14
[  753.633360][T21203] binder: 21189:21203 ioctl c0306201 0 returned -14
09:39:37 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x2d}}]}, 0x30}}, 0x40881)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

09:39:37 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000040)={0x4, 0x2, 0x0, 0x0, 0x3})

09:39:37 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:37 executing program 1:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000100)={0x0, 0x9, 0x1, 'queue0\x00', 0x8})

09:39:37 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={<r1=>0xffffffffffffffff}, 0x111, 0x3}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000200), r1}}, 0x18)

09:39:37 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  753.685643][T21210] binder: 21207:21210 ioctl c0306201 0 returned -14
[  754.396705][T21345] binder: 21343:21345 ioctl c0306201 0 returned -14
09:39:37 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000040)={0x4, 0x2, 0x0, 0x0, 0x3})

09:39:37 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x2d}}]}, 0x30}}, 0x40881)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) (async)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x2d}}]}, 0x30}}, 0x40881) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)

09:39:37 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  754.474178][T21354] binder: 21350:21354 unknown command 0
[  754.474197][T21354] binder: 21350:21354 ioctl c0306201 20000340 returned -22
09:39:37 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:37 executing program 4:
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={<r0=>0xffffffffffffffff}, 0x111, 0x3}}, 0x20)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000200), r0}}, 0x18)

09:39:37 executing program 1:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000100)={0xfffffffc, 0x0, 0x1, 'queue0\x00', 0x8})

09:39:37 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x2d}}]}, 0x30}}, 0x40881)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) (async)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x2d}}]}, 0x30}}, 0x40881) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)

[  754.489364][T21358] binder: 21351:21358 ioctl c0306201 0 returned -14
[  754.539898][T21362] binder: 21361:21362 unknown command 0
09:39:37 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:37 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:37 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000000)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x6}}, 0x10)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000040)={0x4}, 0x4)

09:39:37 executing program 4:
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={<r0=>0xffffffffffffffff}, 0x111, 0x3}}, 0x20)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000200), r0}}, 0x18)

09:39:37 executing program 1:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000100)={0xfffffffc, 0x0, 0x0, 'queue0\x00', 0x8})

09:39:37 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000000)=0x1f, 0x4)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40044}, 0x40000)

[  754.539925][T21362] binder: 21361:21362 ioctl c0306201 20000340 returned -22
[  754.586572][T21379] binder: 21365:21379 ioctl c0306201 0 returned -14
09:39:37 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:37 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000000)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x6}}, 0x10)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000040)={0x4}, 0x4)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async)
write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000000)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x6}}, 0x10) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)
setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000040)={0x4}, 0x4) (async)

09:39:37 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:37 executing program 1:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000100)={0xfffffffc, 0x0, 0x0, 'queue0\x00'})

09:39:37 executing program 4:
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={<r0=>0xffffffffffffffff}, 0x111, 0x3}}, 0x20)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000200), r0}}, 0x18)

09:39:37 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000000)=0x1f, 0x4) (async)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40044}, 0x40000)

[  754.618104][T21383] binder: 21378:21383 unknown command 0
[  754.618127][T21383] binder: 21378:21383 ioctl c0306201 20000340 returned -22
09:39:37 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:37 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:39:37 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={<r1=>0xffffffffffffffff}, 0x111, 0x3}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000200), r1}}, 0x18)

09:39:37 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000000)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x6}}, 0x10)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000040)={0x4}, 0x4)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async)
write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000000)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x6}}, 0x10) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async)
setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000040)={0x4}, 0x4) (async)

09:39:37 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000000)=0x1f, 0x4) (async, rerun: 32)
r2 = ope