0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:14 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)="4b872d"})
clone(0x0, &(0x7f0000000100), 0x0, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0)

[  188.839092][T11614] binder: 11612:11614 ioctl 40046205 0 returned -22
13:49:14 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)="4b872d"})
clone(0x0, &(0x7f0000000100), 0x0, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0)

[  188.912446][T11621] binder: 11620:11621 ioctl 40046205 0 returned -22
13:49:14 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
clone(0x0, &(0x7f0000000100), 0x0, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0)

[  188.983082][T11626] binder: 11625:11626 ioctl 40046205 0 returned -22
13:49:14 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
clone(0x0, &(0x7f0000000100), 0x0, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0)

[  189.054267][T11631] binder: 11630:11631 ioctl 40046205 0 returned -22
13:49:15 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
clone(0x0, &(0x7f0000000100), 0x0, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0)

13:49:15 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc018620c, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:15 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})
clone(0x0, &(0x7f0000000100), 0x0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002080)=[{0x0}], 0x1}}], 0x2, 0x0, 0x0)
pipe(&(0x7f0000000200))

13:49:15 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:15 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
clone(0x0, &(0x7f0000000100), 0x0, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0)

[  189.186462][T11639] binder: 11637:11639 ioctl 40046205 0 returned -22
[  189.186676][T11640] binder: 11636:11640 ioctl 40046205 0 returned -22
[  189.246654][T11647] binder: 11636:11647 ioctl c018620c 200000c0 returned -22
[  189.255040][T11651] binder: 11646:11651 ioctl 40046205 0 returned -22
13:49:15 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc018620c, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:15 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
clone(0x0, 0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0)

[  189.557798][T11657] binder: 11656:11657 ioctl 40046205 0 returned -22
[  189.565246][T11659] binder: 11658:11659 ioctl 40046205 0 returned -22
13:49:15 executing program 3:
prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  189.618666][T11662] binder: 11658:11662 ioctl c018620c 200000c0 returned -22
13:49:15 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})
clone(0x0, &(0x7f0000000100), 0x0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002080)=[{0x0}], 0x1}}], 0x2, 0x0, 0x0)

13:49:15 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0189436, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:15 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  190.004226][T11671] binder: 11668:11671 ioctl 40046205 0 returned -22
13:49:16 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
clone(0x0, 0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0)

13:49:16 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0189436, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  190.374822][T11683] binder: 11682:11683 ioctl 40046205 0 returned -22
[  190.376459][T11685] binder: 11684:11685 ioctl 40046205 0 returned -22
13:49:16 executing program 3:
prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:16 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc020660b, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:16 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})
clone(0x0, &(0x7f0000000100), 0x0, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)

13:49:16 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  190.819291][T11697] binder: 11696:11697 ioctl 40046205 0 returned -22
13:49:16 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})
clone(0x0, &(0x7f0000000100), 0x0, 0x0, 0x0)

13:49:16 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:17 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc020660b, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:17 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
clone(0x0, 0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0)

[  191.195751][T11721] binder: 11719:11721 ioctl 40046205 0 returned -22
[  191.196435][T11722] binder: 11720:11722 ioctl 40046205 0 returned -22
13:49:17 executing program 3:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:17 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306202, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  191.629650][T11732] binder: 11731:11732 ioctl 40046205 0 returned -22
13:49:17 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  191.682690][T11733] binder: 11731:11733 ioctl c0306202 200000c0 returned -22
13:49:17 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:17 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x2, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:17 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})
clone(0x0, &(0x7f0000000100), 0x0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002080)=[{0x0}], 0x1}}], 0x2, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x808, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100), 0x8}, 0x1400, 0x3, 0x0, 0x9, 0x1, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)

[  192.016929][T11746] binder: 11744:11746 ioctl 40046205 0 returned -22
13:49:18 executing program 3:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  192.069638][T11750] binder: 11744:11750 unknown command 131072
[  192.075880][T11750] binder: 11744:11750 ioctl c0306201 200000c0 returned -22
13:49:18 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x2, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  192.439994][T11759] binder: 11758:11759 ioctl 40046205 0 returned -22
13:49:18 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  192.492675][T11760] binder: 11758:11760 unknown command 131072
[  192.498748][T11760] binder: 11758:11760 ioctl c0306201 200000c0 returned -22
13:49:18 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:18 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x3, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:18 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})
clone(0x0, &(0x7f0000000100), 0x0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002080)=[{0x0}], 0x1}}], 0x2, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x808, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100), 0x8}, 0x1400, 0x3, 0x0, 0x9, 0x1, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)

[  192.817790][T11769] binder: 11744:11769 unknown command 131072
[  192.824131][T11769] binder: 11744:11769 ioctl c0306201 200000c0 returned -22
[  192.846188][T11771] binder: 11770:11771 ioctl 40046205 0 returned -22
13:49:18 executing program 3:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  192.901755][T11776] binder: 11770:11776 unknown command 512
[  192.907803][T11776] binder: 11770:11776 ioctl c0306201 200000c0 returned -22
13:49:19 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x3, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  193.240500][T11785] binder: 11758:11785 unknown command 131072
[  193.246738][T11785] binder: 11758:11785 ioctl c0306201 200000c0 returned -22
[  193.264109][T11787] binder: 11786:11787 ioctl 40046205 0 returned -22
13:49:19 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:19 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  193.317732][T11788] binder: 11786:11788 unknown command 512
[  193.340617][T11788] binder: 11786:11788 ioctl c0306201 200000c0 returned -22
13:49:19 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x300, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:19 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})
clone(0x0, &(0x7f0000000100), 0x0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002080)=[{0x0}], 0x1}}], 0x2, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x808, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100), 0x8}, 0x1400, 0x3, 0x0, 0x9, 0x1, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)

13:49:19 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  193.672357][T11799] binder: 11798:11799 ioctl 40046205 0 returned -22
13:49:20 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x300, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  194.065323][T11813] binder: 11786:11813 unknown command 512
[  194.071141][T11813] binder: 11786:11813 ioctl c0306201 200000c0 returned -22
[  194.100278][T11815] binder: 11814:11815 ioctl 40046205 0 returned -22
13:49:20 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:20 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:20 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x4000, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:20 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})
clone(0x0, &(0x7f0000000100), 0x0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002080)=[{0x0}], 0x1}}], 0x2, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x808, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100), 0x8}, 0x1400, 0x3, 0x0, 0x9, 0x1, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

[  194.493710][T11826] binder: 11825:11826 ioctl 40046205 0 returned -22
13:49:20 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:20 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x4000, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  194.906807][T11841] binder: 11840:11841 ioctl 40046205 0 returned -22
13:49:20 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:20 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:21 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0xfeffff, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:21 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})
clone(0x0, &(0x7f0000000100), 0x0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002080)=[{0x0}], 0x1}}], 0x2, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

[  195.289195][T11852] binder: 11851:11852 ioctl 40046205 0 returned -22
13:49:21 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:21 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0xfeffff, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  195.716501][T11867] binder: 11866:11867 ioctl 40046205 0 returned -22
13:49:21 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:21 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:22 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x2000000, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:22 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})
clone(0x0, &(0x7f0000000100), 0x0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002080)=[{0x0}], 0x1}}], 0x2, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)

[  196.102336][T11878] binder: 11877:11878 ioctl 40046205 0 returned -22
13:49:22 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:22 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x1000000, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  196.525461][T11892] binder: 11891:11892 ioctl 40046205 0 returned -22
13:49:22 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:22 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:22 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:22 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:22 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:22 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x3000000, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:22 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})
clone(0x0, &(0x7f0000000100), 0x0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002080)=[{0x0}], 0x1}}], 0x2, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)

[  196.912769][T11913] binder: 11912:11913 ioctl 40046205 0 returned -22
13:49:22 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:23 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x2000000, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  197.335459][T11926] binder: 11925:11926 ioctl 40046205 0 returned -22
13:49:23 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:23 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:23 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x40000000, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:23 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})
clone(0x0, &(0x7f0000000100), 0x0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002080)=[{0x0}], 0x1}}], 0x2, 0x0, 0x0)
pipe(&(0x7f0000000200))

[  197.724832][T11938] binder: 11937:11938 ioctl 40046205 0 returned -22
13:49:23 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:24 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x3000000, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  198.144088][T11952] binder: 11951:11952 ioctl 40046205 0 returned -22
13:49:24 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:24 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:24 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0xfdfdffff, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:24 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})
clone(0x0, &(0x7f0000000100), 0x0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002080)=[{0x0}], 0x1}}], 0x2, 0x0, 0x0)

[  198.535350][T11964] binder: 11963:11964 ioctl 40046205 0 returned -22
13:49:24 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:24 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x40000000, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  198.954937][T11977] binder: 11976:11977 ioctl 40046205 0 returned -22
13:49:24 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:25 executing program 4:
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:25 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0xfffffdfd, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:25 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})
clone(0x0, &(0x7f0000000100), 0x0, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)

[  199.346895][T11989] binder: 11988:11989 ioctl 40046205 0 returned -22
13:49:25 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:25 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})
clone(0x0, &(0x7f0000000100), 0x0, 0x0, 0x0)

13:49:25 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:25 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0xfdfdffff, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  199.764504][T12012] binder: 12011:12012 ioctl 40046205 0 returned -22
13:49:25 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:25 executing program 4:
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:26 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0xfffffe00, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  200.158404][T12025] binder: 12024:12025 ioctl 40046205 0 returned -22
13:49:26 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:26 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:26 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0xfffffdfd, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  200.574597][T12036] binder: 12035:12036 ioctl 40046205 0 returned -22
13:49:26 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:26 executing program 4:
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:26 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0xfeffff00000000, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  200.969730][T12048] binder: 12047:12048 ioctl 40046205 0 returned -22
13:49:26 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:27 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:27 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0xfffffe00, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  201.384275][T12060] binder: 12059:12060 ioctl 40046205 0 returned -22
13:49:27 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:27 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:27 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:27 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:27 executing program 4:
prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:27 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x200000000000000, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  201.782101][T12080] binder: 12079:12080 ioctl 40046205 0 returned -22
13:49:27 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:27 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:28 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0xfeffff00000000, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  202.193539][T12092] binder: 12091:12092 ioctl 40046205 0 returned -22
13:49:28 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:28 executing program 4:
prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:28 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x300000000000000, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  202.592897][T12104] binder: 12103:12104 ioctl 40046205 0 returned -22
13:49:28 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:28 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:28 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x100000000000000, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  203.002570][T12116] binder: 12115:12116 ioctl 40046205 0 returned -22
13:49:29 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:29 executing program 4:
prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:29 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x4000000000000000, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  203.404358][T12128] binder: 12127:12128 ioctl 40046205 0 returned -22
13:49:29 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:29 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:29 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x200000000000000, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  203.812513][T12140] binder: 12139:12140 ioctl 40046205 0 returned -22
13:49:29 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:29 executing program 4:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  203.988789][T12144] binder: 12143:12144 ioctl 40046205 0 returned -22
13:49:30 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0xfdfdffff00000000, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  204.215631][T12153] binder: 12152:12153 ioctl 40046205 0 returned -22
13:49:30 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:30 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:30 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x300000000000000, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  204.621535][T12165] binder: 12164:12165 ioctl 40046205 0 returned -22
13:49:30 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:30 executing program 4:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  204.803018][T12169] binder: 12168:12169 ioctl 40046205 0 returned -22
13:49:30 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper={0x6307}], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  205.027251][T12176] binder: 12175:12176 ioctl 40046205 0 returned -22
[  205.079660][T12177] binder: 12175:12177 unknown command 25351
[  205.085651][T12177] binder: 12175:12177 ioctl c0306201 200000c0 returned -22
13:49:31 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:31 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:31 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:31 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:31 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:31 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x4000000000000000, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  205.431442][T12197] binder: 12196:12197 ioctl 40046205 0 returned -22
13:49:31 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:31 executing program 4:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  205.614278][T12201] binder: 12200:12201 ioctl 40046205 0 returned -22
13:49:31 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper={0x630c}], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  205.827072][T12207] binder: 12175:12207 unknown command 25351
[  205.833161][T12207] binder: 12175:12207 ioctl c0306201 200000c0 returned -22
[  205.851492][T12209] binder: 12208:12209 ioctl 40046205 0 returned -22
13:49:31 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:31 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:31 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:31 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:31 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:32 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0xfdfdffff00000000, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  206.242405][T12229] binder: 12228:12229 ioctl 40046205 0 returned -22
13:49:32 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:32 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  206.425929][T12233] binder: 12232:12233 ioctl 40046205 0 returned -22
13:49:32 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper={0x630d}], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  206.662939][T12240] binder: 12239:12240 ioctl 40046205 0 returned -22
13:49:32 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:32 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:32 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper={0x6307}], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  207.052097][T12251] binder: 12250:12251 ioctl 40046205 0 returned -22
[  207.104753][T12252] binder: 12250:12252 unknown command 25351
[  207.110845][T12252] binder: 12250:12252 ioctl c0306201 200000c0 returned -22
13:49:33 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:33 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  207.239396][T12255] binder: 12254:12255 ioctl 40046205 0 returned -22
[  207.246274][T12255] binder: 12254:12255 ioctl c0306201 0 returned -14
13:49:33 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper={0x6313}], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  207.474372][T12263] binder: 12262:12263 ioctl 40046205 0 returned -22
[  207.528677][T12264] binder: 12262:12264 unknown command 25363
[  207.534695][T12264] binder: 12262:12264 ioctl c0306201 200000c0 returned -22
13:49:33 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:33 executing program 5:
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:33 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper={0x630c}], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  207.861767][T12274] binder: 12273:12274 ioctl 40046205 0 returned -22
13:49:33 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:34 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  208.052598][T12278] binder: 12277:12278 ioctl 40046205 0 returned -22
[  208.059711][T12278] binder: 12277:12278 ioctl c0306201 0 returned -14
13:49:34 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper={0x40046302}], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  208.285823][T12285] binder: 12284:12285 ioctl 40046205 0 returned -22
[  208.338785][T12286] binder: BC_ACQUIRE_RESULT not supported
[  208.344637][T12286] binder: 12284:12286 ioctl c0306201 200000c0 returned -22
13:49:34 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:34 executing program 5:
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  208.448472][T12289] binder: 12288:12289 ioctl 40046205 0 returned -22
13:49:34 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper={0x630d}], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  208.671717][T12298] binder: 12297:12298 ioctl 40046205 0 returned -22
13:49:34 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:34 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  208.864938][T12302] binder: 12301:12302 ioctl 40046205 0 returned -22
[  208.871835][T12302] binder: 12301:12302 ioctl c0306201 0 returned -14
13:49:35 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper={0x40046304}], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  209.086073][T12308] binder: BC_ACQUIRE_RESULT not supported
[  209.092194][T12308] binder: 12284:12308 ioctl c0306201 200000c0 returned -22
[  209.111769][T12310] binder: 12309:12310 ioctl 40046205 0 returned -22
13:49:35 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:35 executing program 5:
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  209.261200][T12314] binder: 12313:12314 ioctl 40046205 0 returned -22
13:49:35 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper={0x6313}], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  209.481136][T12321] binder: 12320:12321 ioctl 40046205 0 returned -22
[  209.533717][T12322] binder: 12320:12322 unknown command 25363
[  209.539724][T12322] binder: 12320:12322 ioctl c0306201 200000c0 returned -22
13:49:35 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:35 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  209.677533][T12325] binder: 12324:12325 ioctl 40046205 0 returned -22
13:49:35 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper={0x40046305}], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  209.923389][T12333] binder: 12332:12333 ioctl 40046205 0 returned -22
13:49:35 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:36 executing program 5:
prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  210.075454][T12337] binder: 12336:12337 ioctl 40046205 0 returned -22
13:49:36 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper={0x40046302}], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  210.291397][T12344] binder: 12343:12344 ioctl 40046205 0 returned -22
[  210.344856][T12345] binder: BC_ACQUIRE_RESULT not supported
[  210.350682][T12345] binder: 12343:12345 ioctl c0306201 200000c0 returned -22
13:49:36 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:36 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  210.492563][T12348] binder: 12347:12348 ioctl 40046205 0 returned -22
13:49:36 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper={0x40046306}], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  210.733661][T12356] binder: 12355:12356 ioctl 40046205 0 returned -22
13:49:36 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:36 executing program 5:
prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  210.889594][T12360] binder: 12359:12360 ioctl 40046205 0 returned -22
13:49:37 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper={0x40046304}], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  211.101597][T12367] binder: 12366:12367 ioctl 40046205 0 returned -22
13:49:37 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:37 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  211.303296][T12371] binder: 12370:12371 ioctl 40046205 0 returned -22
13:49:37 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper={0x40046307}], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  211.543803][T12379] binder: 12378:12379 ioctl 40046205 0 returned -22
13:49:37 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:37 executing program 5:
prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  211.704469][T12383] binder: 12382:12383 ioctl 40046205 0 returned -22
[  211.711355][T12383] binder: 12382:12383 ioctl c0306201 0 returned -14
13:49:37 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper={0x40046305}], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  211.910921][T12391] binder: 12390:12391 ioctl 40046205 0 returned -22
13:49:38 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:38 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  212.116335][T12395] binder: 12394:12395 ioctl 40046205 0 returned -22
13:49:38 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper={0x40086303}], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  212.355426][T12402] binder: 12401:12402 ioctl 40046205 0 returned -22
13:49:38 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:38 executing program 5:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  212.518946][T12406] binder: 12405:12406 ioctl 40046205 0 returned -22
[  212.525895][T12406] binder: 12405:12406 ioctl c0306201 0 returned -14
13:49:38 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper={0x40046306}], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  212.711205][T12392] debugfs: File '12390' in directory 'proc' already present!
[  212.727587][T12414] binder: 12413:12414 ioctl 40046205 0 returned -22
13:49:38 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:38 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  212.929461][T12418] binder: 12417:12418 ioctl 40046205 0 returned -22
13:49:39 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper={0x4008630a}], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  213.167964][T12426] binder: 12425:12426 ioctl 40046205 0 returned -22
[  213.221715][T12427] binder: BC_ATTEMPT_ACQUIRE not supported
[  213.228688][T12427] binder: 12425:12427 ioctl c0306201 200000c0 returned -22
13:49:39 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:39 executing program 5:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  213.330422][T12430] binder: 12429:12430 ioctl 40046205 0 returned -22
[  213.337332][T12430] binder: 12429:12430 ioctl c0306201 0 returned -14
13:49:39 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper={0x40046307}], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  213.536658][T12437] binder: 12436:12437 ioctl 40046205 0 returned -22
13:49:39 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:39 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  213.742752][T12441] binder: 12440:12441 ioctl 40046205 0 returned -22
13:49:39 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper={0x40086310}], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  213.968409][T12447] binder: BC_ATTEMPT_ACQUIRE not supported
[  213.974491][T12447] binder: 12425:12447 ioctl c0306201 200000c0 returned -22
[  213.993566][T12449] binder: 12448:12449 ioctl 40046205 0 returned -22
13:49:40 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:40 executing program 5:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  214.144667][T12453] binder: 12452:12453 ioctl 40046205 0 returned -22
13:49:40 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper={0x40086303}], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  214.345524][T12461] binder: 12460:12461 ioctl 40046205 0 returned -22
13:49:40 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x14, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7ea"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:40 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  214.553913][T12465] binder: 12464:12465 ioctl 40046205 0 returned -22
13:49:40 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper={0x400c630e}], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  214.805261][T12473] binder: 12472:12473 ioctl 40046205 0 returned -22
13:49:40 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:40 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  214.958591][T12477] binder: 12476:12477 ioctl 40046205 0 returned -22
13:49:41 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper={0x4008630a}], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  215.154851][T12485] binder: 12484:12485 ioctl 40046205 0 returned -22
[  215.207688][T12486] binder: BC_ATTEMPT_ACQUIRE not supported
[  215.213800][T12486] binder: 12484:12486 ioctl c0306201 200000c0 returned -22
13:49:41 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:41 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  215.364656][T12489] binder: 12488:12489 ioctl 40046205 0 returned -22
13:49:41 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper={0x400c630f}], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  215.616234][T12496] binder: 12495:12496 ioctl 40046205 0 returned -22
13:49:41 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:41 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  215.773028][T12500] binder: 12499:12500 ioctl 40046205 0 returned -22
13:49:41 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper={0x40086310}], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  215.955393][T12506] binder: BC_ATTEMPT_ACQUIRE not supported
[  215.961388][T12506] binder: 12484:12506 ioctl c0306201 200000c0 returned -22
[  215.979837][T12508] binder: 12507:12508 ioctl 40046205 0 returned -22
13:49:42 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:42 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  216.177625][T12512] binder: 12511:12512 ioctl 40046205 0 returned -22
13:49:42 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper={0x40106308}], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  216.429319][T12520] binder: 12519:12520 ioctl 40046205 0 returned -22
13:49:42 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:42 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  216.586510][T12524] binder: 12523:12524 ioctl 40046205 0 returned -22
13:49:42 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper={0x400c630e}], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  216.789830][T12532] binder: 12531:12532 ioctl 40046205 0 returned -22
13:49:42 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:42 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  216.992125][T12536] binder: 12535:12536 ioctl 40046205 0 returned -22
13:49:43 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper={0x40106309}], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  217.239655][T12543] binder: 12542:12543 ioctl 40046205 0 returned -22
13:49:43 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:43 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  217.400721][T12547] binder: 12546:12547 ioctl 40046205 0 returned -22
13:49:43 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper={0x400c630f}], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  217.600266][T12554] binder: 12553:12554 ioctl 40046205 0 returned -22
13:49:43 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:43 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  217.804886][T12558] binder: 12557:12558 ioctl 40046205 0 returned -22
13:49:43 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper={0x40406300}], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  218.051178][T12566] binder: 12565:12566 ioctl 40046205 0 returned -22
13:49:44 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:44 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  218.212118][T12570] binder: 12569:12570 ioctl 40046205 0 returned -22
13:49:44 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper={0x40106308}], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  218.411187][T12577] binder: 12576:12577 ioctl 40046205 0 returned -22
13:49:44 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:44 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:44 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  218.618308][T12581] binder: 12580:12581 ioctl 40046205 0 returned -22
13:49:44 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:44 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:44 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  218.862363][T12596] binder: 12595:12596 ioctl 40046205 0 returned -22
13:49:44 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x14, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7ea"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:44 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  219.025941][T12600] binder: 12599:12600 ioctl 40046205 0 returned -22
13:49:45 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper={0x40106309}], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  219.221653][T12609] binder: 12608:12609 ioctl 40046205 0 returned -22
13:49:45 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  219.432312][T12613] binder: 12612:12613 ioctl 40046205 0 returned -22
13:49:45 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:45 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper={0x40486311}], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  219.674024][T12619] binder: 12618:12619 ioctl 40046205 0 returned -22
13:49:45 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:45 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  219.842779][T12623] binder: 12622:12623 ioctl 40046205 0 returned -22
13:49:45 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper={0x40406300}], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  220.032463][T12630] binder: 12629:12630 ioctl 40046205 0 returned -22
13:49:46 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  220.245921][T12634] binder: 12633:12634 ioctl 40046205 0 returned -22
13:49:46 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:46 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper={0x40486312}], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  220.484104][T12641] binder: 12640:12641 ioctl 40046205 0 returned -22
13:49:46 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:46 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  220.656533][T12645] binder: 12644:12645 ioctl 40046205 0 returned -22
13:49:46 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  220.842728][T12653] binder: 12652:12653 ioctl 40046205 0 returned -22
13:49:46 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000340)="4b872d3993"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  221.059014][T12657] binder: 12656:12657 ioctl 40046205 0 returned -22
13:49:47 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  221.140571][T12661] binder: 12660:12661 ioctl 40046205 0 returned -22
13:49:47 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x300, 0x0, &(0x7f0000000140)="f4"})

[  221.294824][T12665] binder: 12664:12665 ioctl 40046205 0 returned -22
13:49:47 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:47 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  221.472301][T12669] binder: 12668:12669 ioctl 40046205 0 returned -22
13:49:47 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper={0x40486311}], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  221.652755][T12676] binder: 12675:12676 ioctl 40046205 0 returned -22
13:49:47 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  221.870979][T12680] binder: 12679:12680 ioctl 40046205 0 returned -22
13:49:47 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  221.954732][T12683] binder: 12682:12683 ioctl 40046205 0 returned -22
13:49:48 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x2, &(0x7f0000000140)="f4"})

[  222.106264][T12686] binder: 12685:12686 ioctl 40046205 0 returned -22
13:49:48 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:48 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  222.286566][T12690] binder: 12689:12690 ioctl 40046205 0 returned -22
13:49:48 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper={0x40486312}], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  222.462387][T12699] binder: 12698:12699 ioctl 40046205 0 returned -22
13:49:48 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  222.683765][T12703] binder: 12702:12703 ioctl 40046205 0 returned -22
13:49:48 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  222.765618][T12706] binder: 12705:12706 ioctl 40046205 0 returned -22
13:49:48 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x3, &(0x7f0000000140)="f4"})

[  222.919013][T12709] binder: 12708:12709 ioctl 40046205 0 returned -22
13:49:49 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  223.097605][T12713] binder: 12712:12713 ioctl 40046205 0 returned -22
13:49:49 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:49 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x2, 0x0, &(0x7f0000000140)="f4"})

[  223.272370][T12720] binder: 12719:12720 ioctl 40046205 0 returned -22
13:49:49 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  223.496423][T12724] binder: 12723:12724 ioctl 40046205 0 returned -22
13:49:49 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  223.580548][T12727] binder: 12726:12727 ioctl 40046205 0 returned -22
13:49:49 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x300, &(0x7f0000000140)="f4"})

[  223.728762][T12731] binder: 12730:12731 ioctl 40046205 0 returned -22
13:49:49 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  223.909623][T12735] binder: 12734:12735 ioctl 40046205 0 returned -22
13:49:49 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:49 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x300, 0x0, &(0x7f0000000140)="f4"})

[  224.082351][T12742] binder: 12741:12742 ioctl 40046205 0 returned -22
13:49:50 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)="4b872d"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  224.309608][T12746] binder: 12745:12746 ioctl 40046205 0 returned -22
13:49:50 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  224.393919][T12750] binder: 12749:12750 ioctl 40046205 0 returned -22
[  224.400785][T12750] binder: 12749:12750 ioctl c0306201 0 returned -14
13:49:50 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x4000, &(0x7f0000000140)="f4"})

[  224.530001][T12752] binder: 12730:12752 ioctl 40046205 0 returned -22
[  224.593350][T12754] binder: 12753:12754 ioctl 40046205 0 returned -22
13:49:50 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  224.720803][T12758] binder: 12757:12758 ioctl 40046205 0 returned -22
13:49:50 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:50 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0xfffffffe, 0x0, &(0x7f0000000140)="f4"})

[  224.892807][T12765] binder: 12764:12765 ioctl 40046205 0 returned -22
13:49:51 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  225.124791][T12769] binder: 12768:12769 ioctl 40046205 0 returned -22
13:49:51 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  225.204929][T12773] binder: 12772:12773 ioctl 40046205 0 returned -22
[  225.211970][T12773] binder: 12772:12773 ioctl c0306201 0 returned -14
13:49:51 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0xfeffff, &(0x7f0000000140)="f4"})

[  225.404954][T12777] binder: 12776:12777 ioctl 40046205 0 returned -22
13:49:51 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000340)="4b872d3993"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  225.534377][T12781] binder: 12780:12781 ioctl 40046205 0 returned -22
13:49:51 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:51 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x2, &(0x7f0000000140)="f4"})

[  225.702003][T12790] binder: 12789:12790 ioctl 40046205 0 returned -22
13:49:51 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  225.937930][T12794] binder: 12793:12794 ioctl 40046205 0 returned -22
13:49:51 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  226.018910][T12797] binder: 12796:12797 ioctl 40046205 0 returned -22
[  226.025812][T12797] binder: 12796:12797 ioctl c0306201 0 returned -14
13:49:52 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x2000000, &(0x7f0000000140)="f4"})

[  226.216228][T12800] binder: 12799:12800 ioctl 40046205 0 returned -22
13:49:52 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  226.349190][T12804] binder: 12803:12804 ioctl 40046205 0 returned -22
13:49:52 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:52 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x3, &(0x7f0000000140)="f4"})

[  226.511071][T12811] binder: 12810:12811 ioctl 40046205 0 returned -22
13:49:52 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  226.752060][T12815] binder: 12814:12815 ioctl 40046205 0 returned -22
13:49:52 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  226.832216][T12818] binder: 12817:12818 ioctl 40046205 0 returned -22
13:49:52 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x3000000, &(0x7f0000000140)="f4"})

[  227.027602][T12822] binder: 12821:12822 ioctl 40046205 0 returned -22
13:49:53 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  227.163065][T12826] binder: 12825:12826 ioctl 40046205 0 returned -22
13:49:53 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:53 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:53 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:53 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:53 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x300, &(0x7f0000000140)="f4"})

[  227.320320][T12841] binder: 12840:12841 ioctl 40046205 0 returned -22
13:49:53 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  227.564956][T12845] binder: 12844:12845 ioctl 40046205 0 returned -22
13:49:53 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  227.646684][T12848] binder: 12847:12848 ioctl 40046205 0 returned -22
13:49:53 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x40000000, &(0x7f0000000140)="f4"})

[  227.838998][T12851] binder: 12850:12851 ioctl 40046205 0 returned -22
13:49:53 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  227.976667][T12855] binder: 12854:12855 ioctl 40046205 0 returned -22
13:49:53 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:54 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x4000, &(0x7f0000000140)="f4"})

[  228.130882][T12862] binder: 12861:12862 ioctl 40046205 0 returned -22
13:49:54 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  228.377356][T12866] binder: 12865:12866 ioctl 40046205 0 returned -22
13:49:54 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  228.460743][T12870] binder: 12869:12870 ioctl 40046205 0 returned -22
13:49:54 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="f4"})

[  228.650026][T12874] binder: 12873:12874 ioctl 40046205 0 returned -22
13:49:54 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)="4b872d"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  228.789025][T12878] binder: 12877:12878 ioctl 40046205 0 returned -22
13:49:54 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:49:54 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0xfeffff, &(0x7f0000000140)="f4"})

[  228.931378][T12884] binder: 12861:12884 ioctl 40046205 0 returned -22
[  228.992291][T12886] binder: 12885:12886 ioctl 40046205 0 returned -22
13:49:55 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  229.191131][T12890] binder: 12889:12890 ioctl 40046205 0 returned -22
13:49:55 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  229.271602][T12894] binder: 12893:12894 ioctl 40046205 0 returned -22
13:49:55 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0xfffffdfd, &(0x7f0000000140)="f4"})

[  229.461010][T12897] binder: 12896:12897 ioctl 40046205 0 returned -22
13:49:55 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  229.602259][T12901] binder: 12900:12901 ioctl 40046205 0 returned -22
13:49:55 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  229.710263][T12905] binder: 12904:12905 ioctl 40046205 0 returned -22
13:49:55 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x1000000, &(0x7f0000000140)="f4"})

[  229.802207][T12910] binder: 12909:12910 ioctl 40046205 0 returned -22
13:49:55 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  230.004702][T12914] binder: 12913:12914 ioctl 40046205 0 returned -22
13:49:55 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  230.085637][T12918] binder: 12917:12918 ioctl 40046205 0 returned -22
13:49:56 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0xfffffe00, &(0x7f0000000140)="f4"})

[  230.272005][T12921] binder: 12920:12921 ioctl 40046205 0 returned -22
13:49:56 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  230.416382][T12925] binder: 12924:12925 ioctl 40046205 0 returned -22
13:49:56 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  230.526123][T12928] binder: 12927:12928 ioctl 40046205 0 returned -22
13:49:56 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x2000000, &(0x7f0000000140)="f4"})

[  230.611510][T12931] binder: 12930:12931 ioctl 40046205 0 returned -22
13:49:56 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)

[  230.815884][T12935] binder: 12934:12935 ioctl 40046205 0 returned -22
13:49:56 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  230.868724][T12936] binder: 12934:12936 ioctl c0306201 0 returned -14
[  230.899518][T12939] binder: 12938:12939 ioctl 40046205 0 returned -22
13:49:56 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0xfeffff00000000, &(0x7f0000000140)="f4"})

[  231.083516][T12943] binder: 12942:12943 ioctl 40046205 0 returned -22
13:49:57 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  231.230047][T12947] binder: 12946:12947 ioctl 40046205 0 returned -22
13:49:57 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  231.338986][T12950] binder: 12949:12950 ioctl 40046205 0 returned -22
13:49:57 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x3000000, &(0x7f0000000140)="f4"})

[  231.421646][T12953] binder: 12952:12953 ioctl 40046205 0 returned -22
13:49:57 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)

[  231.628447][T12957] binder: 12956:12957 ioctl 40046205 0 returned -22
13:49:57 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x14, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7ea"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  231.680710][T12958] binder: 12956:12958 ioctl c0306201 0 returned -14
[  231.712774][T12961] binder: 12960:12961 ioctl 40046205 0 returned -22
13:49:57 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x200000000000000, &(0x7f0000000140)="f4"})

[  231.894942][T12966] binder: 12965:12966 ioctl 40046205 0 returned -22
13:49:57 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  232.044309][T12970] binder: 12969:12970 ioctl 40046205 0 returned -22
13:49:58 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  232.153459][T12973] binder: 12972:12973 ioctl 40046205 0 returned -22
13:49:58 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x40000000, &(0x7f0000000140)="f4"})

[  232.230755][T12976] binder: 12975:12976 ioctl 40046205 0 returned -22
13:49:58 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)

[  232.441791][T12980] binder: 12979:12980 ioctl 40046205 0 returned -22
13:49:58 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  232.494684][T12981] binder: 12979:12981 ioctl c0306201 0 returned -14
[  232.527148][T12984] binder: 12983:12984 ioctl 40046205 0 returned -22
13:49:58 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x300000000000000, &(0x7f0000000140)="f4"})

[  232.706534][T12987] binder: 12986:12987 ioctl 40046205 0 returned -22
13:49:58 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  232.858782][T12991] binder: 12990:12991 ioctl 40046205 0 returned -22
13:49:58 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  232.966730][T12995] binder: 12994:12995 ioctl 40046205 0 returned -22
[  232.973782][T12995] binder: 12994:12995 ioctl c0306201 0 returned -14
13:49:58 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="f4"})

[  233.039999][T12998] binder: 12997:12998 ioctl 40046205 0 returned -22
13:49:59 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)="f4"})

[  233.254353][T13002] binder: 13001:13002 ioctl 40046205 0 returned -22
13:49:59 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  233.341029][T13006] binder: 13005:13006 ioctl 40046205 0 returned -22
13:49:59 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x4000000000000000, &(0x7f0000000140)="f4"})

[  233.518301][T13010] binder: 13009:13010 ioctl 40046205 0 returned -22
13:49:59 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  233.669888][T13014] binder: 13013:13014 ioctl 40046205 0 returned -22
13:49:59 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  233.780000][T13018] binder: 13017:13018 ioctl 40046205 0 returned -22
[  233.786885][T13018] binder: 13017:13018 ioctl c0306201 0 returned -14
13:49:59 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0xfffffdfd, &(0x7f0000000140)="f4"})

[  233.849572][T13022] binder: 13021:13022 ioctl 40046205 0 returned -22
13:49:59 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)="f4"})

[  234.068263][T13026] binder: 13025:13026 ioctl 40046205 0 returned -22
13:50:00 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  234.154134][T13030] binder: 13029:13030 ioctl 40046205 0 returned -22
13:50:00 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0xfdfdffff00000000, &(0x7f0000000140)="f4"})

[  234.329364][T13033] binder: 13032:13033 ioctl 40046205 0 returned -22
13:50:00 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  234.483517][T13037] binder: 13036:13037 ioctl 40046205 0 returned -22
13:50:00 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:00 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0xfffffe00, &(0x7f0000000140)="f4"})

[  234.594764][T13041] binder: 13040:13041 ioctl 40046205 0 returned -22
[  234.601576][T13041] binder: 13040:13041 ioctl c0306201 0 returned -14
[  234.659326][T13044] binder: 13043:13044 ioctl 40046205 0 returned -22
13:50:00 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)="f4"})

[  234.883649][T13048] binder: 13047:13048 ioctl 40046205 0 returned -22
13:50:00 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  234.964097][T13052] binder: 13051:13052 ioctl 40046205 0 returned -22
13:50:01 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=<r2=>0x0)
sched_setattr(r2, &(0x7f00000001c0)={0x38, 0x24fbdfd9284c7962, 0x10000069, 0x7, 0x5, 0x4, 0x6}, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x4, 0x9})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  235.141491][T13057] binder: 13056:13057 ioctl 40046205 0 returned -22
13:50:01 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[  235.296206][T13061] binder: 13060:13061 ioctl 40046205 0 returned -22
13:50:01 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  235.348707][T13062] binder: 13060:13062 ioctl c0306201 0 returned -14
13:50:01 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0xfeffff00000000, &(0x7f0000000140)="f4"})

[  235.406255][T13065] binder: 13064:13065 ioctl 40046205 0 returned -22
[  235.469766][T13068] binder: 13067:13068 ioctl 40046205 0 returned -22
13:50:01 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040), 0x1, 0x0, &(0x7f0000000140)="f4"})

[  235.696414][T13072] binder: 13071:13072 ioctl 40046205 0 returned -22
13:50:01 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  235.778947][T13076] binder: 13075:13076 ioctl 40046205 0 returned -22
13:50:01 executing program 1:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x3}, 0x0)
prlimit64(r0, 0xe, &(0x7f0000000080)={0x7, 0x91}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffff}, 0x0)
r2 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  235.942526][T13058] binder: 13056:13058 ioctl 40046205 0 returned -22
[  235.961852][T13079] binder: 13078:13079 ioctl 40046205 0 returned -22
13:50:02 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[  236.110523][T13083] binder: 13082:13083 ioctl 40046205 0 returned -22
13:50:02 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  236.163716][T13084] binder: 13082:13084 ioctl c0306201 0 returned -14
13:50:02 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x100000000000000, &(0x7f0000000140)="f4"})

[  236.217148][T13087] binder: 13086:13087 ioctl 40046205 0 returned -22
[  236.279082][T13091] binder: 13090:13091 ioctl 40046205 0 returned -22
13:50:02 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040), 0x1, 0x0, &(0x7f0000000140)="f4"})

[  236.510295][T13095] binder: 13094:13095 ioctl 40046205 0 returned -22
13:50:02 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  236.590846][T13099] binder: 13098:13099 ioctl 40046205 0 returned -22
13:50:02 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000180)={'raw\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78)
r3 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dffbd946f610500020081001f038b06020008001f000400dc00ff7e", 0x24}], 0x1}, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  236.772697][T13103] binder: 13102:13103 ioctl 40046205 0 returned -22
[  236.826979][T13104] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
13:50:02 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[  236.924320][T13107] binder: 13106:13107 ioctl 40046205 0 returned -22
13:50:02 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  236.977683][T13108] binder: 13106:13108 ioctl c0306201 0 returned -14
13:50:03 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x200000000000000, &(0x7f0000000140)="f4"})

[  237.027774][T13111] binder: 13110:13111 ioctl 40046205 0 returned -22
[  237.089387][T13114] binder: 13113:13114 ioctl 40046205 0 returned -22
13:50:03 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040), 0x1, 0x0, &(0x7f0000000140)="f4"})

[  237.325226][T13118] binder: 13117:13118 ioctl 40046205 0 returned -22
13:50:03 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  237.403866][T13122] binder: 13121:13122 ioctl 40046205 0 returned -22
13:50:03 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b63789f"], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  237.585541][T13127] binder: 13126:13127 ioctl 40046205 0 returned -22
[  237.640697][T13128] binder: 13126:13128 unknown command -1619500277
[  237.647635][T13128] binder: 13126:13128 ioctl c0306201 200000c0 returned -22
13:50:03 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)="f4"})

[  237.738186][T13131] binder: 13130:13131 ioctl 40046205 0 returned -22
13:50:03 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:03 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x300000000000000, &(0x7f0000000140)="f4"})

[  237.842025][T13135] binder: 13134:13135 ioctl 40046205 0 returned -22
[  237.900031][T13138] binder: 13137:13138 ioctl 40046205 0 returned -22
13:50:04 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x0, 0x0, 0x0})

[  238.141010][T13142] binder: 13141:13142 ioctl 40046205 0 returned -22
13:50:04 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000340)="4b872d3993"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  238.217659][T13146] binder: 13145:13146 ioctl 40046205 0 returned -22
13:50:04 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r1, 0x2)
flock(r2, 0x2)
flock(r0, 0x1)
r3 = dup2(r0, r2)
dup3(r3, r1, 0x0)
getsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, &(0x7f0000000000), &(0x7f0000000080)=0x4)
r4 = getpid()
sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r5 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r5, 0x40046205, 0x0)
r6 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r8 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r7, 0x2)
flock(r8, 0x2)
flock(r6, 0x1)
r9 = dup2(r6, r8)
dup3(r9, r7, 0x0)
writev(r7, &(0x7f00000015c0)=[{&(0x7f0000000180)="6626a352ca2a49a1c9f41962b31eb98d65af4be75a9729b504396f7e17dbf7f35bc0116b2006e61d3ca5fa5eb029c3941d0b3d03e1743557447e179fb500556ecdbf78518f81fa949c0cd78ab63d36daaae4e5c9f2e4429fd317b087417459900550638e9aa30dac2ee8279d702166e50c0ca1acd9ee18e1edee1af4253f267c105dabd10a1949a9c499fac4f65a3f82", 0x90}, {&(0x7f0000000240)="e738c4e8acb26142724de4871bcbe917713caef5749d3de7fd447a893983221ec865d0f8a82707dba8707e3f5518c2d8d72b8be6", 0x34}, {&(0x7f0000000380)="4b3e56eaea7ac9752b851abce3cba20184670bbd719125aa26b37fd44e3a812ff937fa6bb7e4012c6ad0d76acd1cf3891af88ce78926624dfad13b57c862f72ce758ce729d5f267820b0d0bfc3cccb4aad760b8c6e8bcf67525401054a5e2925525e2c45b351f36c62be5c3f70b0e19ab40e0e8690b6a87e3b2a0969c931f6948043fdad59a828479b7030b5c73a6438c9c15fecbefea70b66c02cc0e95422e0641ca6a9ade0e29e5c85821ad44ea68cb3ad1ac026fc91b9243201c95462", 0xbe}, {&(0x7f0000000440)="137084c2cc7d394cc8cac171ec62ce86cb6b8855081e6ba8bb4637293c539af436483c1f57742c158eb86146bbb5cc3bb7dbbf2d25dcb81777f090e0831cfab48dce17034d2dfbf07c896b78f073132a9b1967ebe04ad0fe87c599e111ababed0e91bc5b3ab69d8b464845884c33daf68fc96416de68bf5a48c16bb71c3650fc708cb84dac69767590314fb65e47239cfbab3b15a395058d06239251669f9c02de735fa689d30656ac9ffa8d9b834bb47826ffaeb9de8169dc14615c9499c8b85ec8a659b80123c043c2b298612b9edc975cea3ec0cecc9a669b7957912e7e9b7ce0197924adf3f2c0575575ed8d", 0xee}, {&(0x7f00000002c0)="f89e9c09a1f40a7c8c683711f4a1ea64d6dd544308cfbd05a7362098e1b343a413c6f38f8cf58bdb4ac5560df83a593c08a26300ec04349ba088d6fc53032236aba1cc25a7d7baaf32c50e75a3dd69acd942a43a327d64f1650971cd7237eed9ccf49413abd9cdfa95d3143d8a6dd821f659ea9b657fb8364bae4593", 0x7c}, {&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="15730b7f8e86ee99ea589da27965da3cccfc66b7c52370189ce21a07835ae75dbc4c2a7e155fa5d0232d60b1dd2f479757c0b351632ee8790d2395ea850d847202", 0x41}], 0x7)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:04 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)="f4"})

[  238.493257][T13150] binder: 13149:13150 ioctl 40046205 0 returned -22
[  238.552659][T13155] binder: 13154:13155 ioctl 40046205 0 returned -22
13:50:04 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:04 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x4000000000000000, &(0x7f0000000140)="f4"})

[  238.655761][T13159] binder: 13158:13159 ioctl 40046205 0 returned -22
[  238.709918][T13163] binder: 13162:13163 ioctl 40046205 0 returned -22
13:50:04 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x0, 0x0, 0x0})

[  238.953892][T13167] binder: 13166:13167 ioctl 40046205 0 returned -22
13:50:04 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  239.031758][T13171] binder: 13170:13171 ioctl 40046205 0 returned -22
13:50:05 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bsg\x00', 0x448942, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r4, 0x2)
flock(r5, 0x2)
flock(r3, 0x1)
r6 = dup2(r3, r5)
dup3(r6, r4, 0x0)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000000)={0x21, 0x18, &(0x7f0000000380)})
r7 = getpid()
sched_setattr(r7, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x3}, 0x0)
sched_setattr(r7, &(0x7f00000002c0)={0x38, 0x3, 0x10000020, 0x691e, 0x9, 0x9, 0x6, 0x7bd5, 0x7f, 0x1}, 0x0)
ioctl$USBDEVFS_RELEASE_PORT(r2, 0x80045519, &(0x7f0000000080)=0x8)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="989902e669585d0e9f176dfadc7bd135ff9974c2d600"], 0x1, 0x0, &(0x7f0000000140)="f4"})
r8 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCGSERIAL(r8, 0x541e, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/58})

[  239.201871][T13151] binder: 13149:13151 ioctl 40046205 0 returned -22
[  239.264952][T13174] binder: 13173:13174 ioctl 40046205 0 returned -22
13:50:05 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)="f4"})

[  239.367121][T13179] binder: 13178:13179 ioctl 40046205 0 returned -22
13:50:05 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  239.410140][T13175] binder: 13173:13175 unknown command -436037224
[  239.416553][T13175] binder: 13173:13175 ioctl c0306201 200000c0 returned -22
13:50:05 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0xfdfdffff00000000, &(0x7f0000000140)="f4"})

[  239.465879][T13184] binder: 13183:13184 ioctl 40046205 0 returned -22
[  239.520004][T13187] binder: 13186:13187 ioctl 40046205 0 returned -22
13:50:05 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x0, 0x0, 0x0})

[  239.764410][T13191] binder: 13190:13191 ioctl 40046205 0 returned -22
13:50:05 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  239.844694][T13195] binder: 13194:13195 ioctl 40046205 0 returned -22
13:50:06 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x1}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='.c\x00\x00'], 0x1, 0x0, &(0x7f0000000140)="f4"})
r2 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
close(r3)
r4 = socket$inet6(0xa, 0x802, 0x0)
connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e26, 0x0, @ipv4={[], [], @local}}, 0x1c)
io_setup(0x1000000000000003, &(0x7f00000000c0)=<r5=>0x0)
write$binfmt_elf64(r3, 0x0, 0x0)
io_submit(r5, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x12f}])
r6 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r7 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r6, 0x2)
flock(r7, 0x2)
flock(r2, 0x1)
dup2(r2, r7)
r8 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r9 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r10 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r9, 0x2)
flock(r10, 0x2)
flock(r8, 0x1)
r11 = dup2(r8, r10)
dup3(r11, r9, 0x0)
write$selinux_load(r9, &(0x7f0000000180)={0xf97cff8c, 0x8, 'SE Linux', "23bd7fd81d118385293cc8df5923e03795b0b0a2a608d50f8b0f0a6558eeacf205475c3760bd8927fe97371210599175a494b1859e13356d22eb61df30997a82dded0a6987306c8f2b5aa5"}, 0x5b)

[  240.065571][T13177] binder: 13173:13177 unknown command -436037224
[  240.073015][T13177] binder: 13173:13177 ioctl c0306201 200000c0 returned -22
[  240.094482][T13197] binder: 13196:13197 ioctl 40046205 0 returned -22
13:50:06 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040), 0x1, 0x0, &(0x7f0000000140)="f4"})

[  240.146745][T13198] binder: 13196:13198 unknown command 25390
[  240.152806][T13198] binder: 13196:13198 ioctl c0306201 200000c0 returned -22
[  240.177476][T13201] binder: 13200:13201 ioctl 40046205 0 returned -22
13:50:06 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x14, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7ea"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:06 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000001c0)={0x88, @rand_addr=0x1, 0x4e24, 0x0, 'wlc\x00', 0x21, 0x2f, 0x24}, 0x2c)
r5 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r5)
r6 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r6, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x8040, 0x0)
ioctl$TUNSETTXFILTER(r7, 0x400454d1, &(0x7f0000000180)={0x1, 0x4, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote, @empty, @remote]})

[  240.279033][T13207] binder: 13206:13207 ioctl 40046205 0 returned -22
[  240.423008][T13212] binder: 13211:13212 ioctl 40046205 0 returned -22
13:50:06 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x0, 0x0, &(0x7f0000000140)})

[  240.579157][T13219] binder: 13218:13219 ioctl 40046205 0 returned -22
13:50:06 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  240.658926][T13223] binder: 13222:13223 ioctl 40046205 0 returned -22
[  240.895087][T13202] debugfs: File '13196' in directory 'proc' already present!
13:50:06 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040), 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:06 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x1, &(0x7f00000001c0)=""/76, 0x4c, 0x0, 0x1c}, @flat=@weak_handle={0x77682a85, 0x0, 0x3}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}}], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  240.999559][T13226] binder: 13225:13226 ioctl 40046205 0 returned -22
[  241.006973][T13228] binder: 13227:13228 ioctl 40046205 0 returned -22
13:50:07 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  241.092260][T13233] binder: 13232:13233 ioctl 40046205 0 returned -22
13:50:07 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000ef43ac454af8"], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  241.186123][T13236] binder: 13235:13236 ioctl 40046205 0 returned -22
[  241.238685][T13237] binder: 13235:13237 unknown command 0
[  241.244420][T13237] binder: 13235:13237 ioctl c0306201 200000c0 returned -22
13:50:07 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x0, 0x0, &(0x7f0000000140)})

[  241.394229][T13240] binder: 13239:13240 ioctl 40046205 0 returned -22
13:50:07 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)="4b872d"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  241.472664][T13244] binder: 13243:13244 ioctl 40046205 0 returned -22
13:50:07 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040), 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:07 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='c\x00\x00'], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  241.813988][T13250] binder: 13249:13250 ioctl 40046205 0 returned -22
[  241.826907][T13252] binder: 13251:13252 ioctl 40046205 0 returned -22
13:50:07 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  241.879702][T13254] binder: 13251:13254 unknown command 99
[  241.885422][T13254] binder: 13251:13254 ioctl c0306201 200000c0 returned -22
[  241.902985][T13257] binder: 13256:13257 ioctl 40046205 0 returned -22
13:50:07 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r3, 0x2)
flock(r2, 0x1)
dup2(r2, r3)
ioctl$BLKROSET(r3, 0x125d, &(0x7f0000000000)=0x5)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
fchdir(r4)
r5 = dup3(0xffffffffffffffff, r2, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = dup(r7)
getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}]}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0)
r10 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r11=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r11, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff})
fcntl$dupfd(r13, 0x0, r12)
ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000300)={'team0\x00', <r14=>0x0})
sendmsg$nl_xfrm(r5, &(0x7f0000000740)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c020000130001002bbd7000fbdbdf25e00000010000000039d5d5859a319f23db4e2400004e220400020020803200"/64, @ANYRES32=r9, @ANYRES32=r11, @ANYBLOB="0100000000000000ff03000000000000050b000000000000ff00000000000000010100000000000000040000000000004000000000000000b406000000000000ffffff7f0000000000040000000000000800000000000000ff0000000000000002000000b06b6e0001000100000000003c0017000800000029bd700028bd70002dbd700025bd7000960b0000360b000008000000090000000000000004000000008001005e0000000800000014000e000000000000000000000000000000000008001f00", @ANYRES32=r14, @ANYBLOB="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"], 0x24c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40010)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  242.056237][T13260] binder: 13259:13260 ioctl 40046205 0 returned -22
13:50:08 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x0, 0x0, &(0x7f0000000140)})

[  242.209835][T13264] binder: 13263:13264 ioctl 40046205 0 returned -22
13:50:08 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  242.283410][T13268] binder: 13267:13268 ioctl 40046205 0 returned -22
13:50:08 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x0, 0x0, 0x0})

13:50:08 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x20, 0x0, 0xffff, 0xfffffffffffffffc, 0x8000000000, 0x0, 0x0, 0x3f}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x40, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r4, 0x2)
flock(r3, 0x1)
dup2(r3, r4)
ioctl$TCGETA(r3, 0x5405, &(0x7f0000000180))
ioctl$VT_SETMODE(r2, 0x5602, &(0x7f0000000080)={0x2, 0x77, 0xffff, 0x0, 0x2c5})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="f3ffffff"], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:08 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  242.626680][T13272] binder: 13271:13272 ioctl 40046205 0 returned -22
[  242.633823][T13274] binder: 13251:13274 unknown command 99
[  242.639849][T13274] binder: 13251:13274 ioctl c0306201 200000c0 returned -22
[  242.659859][T13276] binder: 13275:13276 ioctl 40046205 0 returned -22
[  242.716885][T13281] binder: 13280:13281 ioctl 40046205 0 returned -22
13:50:08 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x7d, 0x0, &(0x7f0000000180)="f50f68526ec6e66db26912bacf1637316d939a8d772f36b96fde905966dc1ff704221298ef0a9dfc8bb7581b3a9bcce1c8cc533fa78fa8272e0733b150d3ddcca6b65139d2ac840f6d7902efa34b198a84760534b2108b78918762f8b420f129530524b69ef08808d4d14dfff6b5b3f57f75968026e8f487572d1864ed"})

[  242.761864][T13279] binder: 13275:13279 unknown command -13
[  242.768376][T13279] binder: 13275:13279 ioctl c0306201 200000c0 returned -22
[  242.818662][T13285] binder: 13284:13285 ioctl 40046205 0 returned -22
13:50:08 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000001c0)={0x88, @rand_addr=0x1, 0x4e24, 0x0, 'wlc\x00', 0x21, 0x2f, 0x24}, 0x2c)
r5 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r5)
r6 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r6, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x8040, 0x0)
ioctl$TUNSETTXFILTER(r7, 0x400454d1, &(0x7f0000000180)={0x1, 0x4, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote, @empty, @remote]})

13:50:09 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  243.096862][T13293] binder: 13292:13293 ioctl 40046205 0 returned -22
[  243.116283][T13289] binder: 13288:13289 ioctl 40046205 0 returned -22
13:50:09 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x0, 0x0, 0x0})

13:50:09 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
getpgrp(r0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x1eba40, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x4a, 0x0, &(0x7f0000000200)="dd4d9a215edde0346394e1cca304b04aa8f41a596b7da7cb789ae5af0bfc14d2391ef233ac7fe52bdaa7d44cbbd454a638b594f9865e99968be038f04aaa65d50988454525caea25ff03"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})
r3 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r5 = getpid()
sched_setattr(r5, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x3}, 0x0)
ptrace(0x8, r5)
r6 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r4, 0x2)
r7 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r8 = open(&(0x7f0000000300)='./file0\x00', 0x10a081, 0x0)
flock(r8, 0x2)
flock(r7, 0x1)
r9 = accept4$packet(r4, 0x0, &(0x7f0000000800), 0x0)
dup2(r7, r9)
setsockopt$IP_VS_SO_SET_EDITDEST(r7, 0x0, 0x489, &(0x7f0000000780)={{0x2c, @loopback, 0x4e21, 0x2, 'lc\x00', 0x0, 0x1f, 0x2b}, {@multicast2, 0x4e22, 0x3, 0x1, 0x4, 0x700}}, 0x44)
flock(r6, 0x2)
fcntl$setsig(r8, 0xa, 0x9)
flock(r3, 0x1)
r10 = dup2(r3, r6)
dup3(r10, r4, 0x0)
r11 = accept(r4, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000000000)=0x80)
setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000400300000000000098000000980000009800000000000000a8020000a8020000a8020000a8020000a802000004000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e4651554555450000000000000000000000000000000000000000000002080002000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00020010000000000000000000000000000000000000000280074746c000000000000000000000000000000000000000000000000000000003e000000000000280074746c00000000000000000000000000000000000000000000000000000000ff00000000000060005345540000000000000000000000000000000000000000000000000000000200000001000000000000000700000005000000040000000300000006010000000000000200000001000000020000000100000002000000010000000506000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000f000000000000000000000000000000000000000000050006f736600000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000170000000200000000000000300053455400000000000000000000000000000000000000000000000000000200000501ffff0004ffffffff02000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff000000"], 0x3a0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000340)={0x3, 'batadv0\x00', {}, 0x8000})

[  243.439112][T13297] binder: 13296:13297 ioctl 40046205 0 returned -22
[  243.462239][T13279] binder: 13275:13279 unknown command -13
[  243.468246][T13279] binder: 13275:13279 ioctl c0306201 200000c0 returned -22
13:50:09 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  243.496266][T13300] binder: 13299:13300 ioctl 40046205 0 returned -22
[  243.527994][T13303] binder: 13302:13303 ioctl 40046205 0 returned -22
13:50:09 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
getpid()
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="046304400000e3ff"], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  243.628205][T13310] binder: 13309:13310 ioctl 40046205 0 returned -22
13:50:09 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000001c0)={0x88, @rand_addr=0x1, 0x4e24, 0x0, 'wlc\x00', 0x21, 0x2f, 0x24}, 0x2c)
r5 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r5)
r6 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r6, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x8040, 0x0)
ioctl$TUNSETTXFILTER(r7, 0x400454d1, &(0x7f0000000180)={0x1, 0x4, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote, @empty, @remote]})

13:50:09 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  243.907575][T13320] binder: 13319:13320 ioctl 40046205 0 returned -22
[  243.929292][T13316] binder: 13315:13316 ioctl 40046205 0 returned -22
13:50:10 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x0, 0x0, 0x0})

[  244.250767][T13324] binder: 13323:13324 ioctl 40046205 0 returned -22
13:50:10 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r2 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/create\x00', 0x2, 0x0)
close(r2)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\vP\x00\x00'], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:10 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  244.296535][T13304] debugfs: File '13299' in directory 'proc' already present!
[  244.304176][T13304] binder: 13299:13304 ioctl 40046205 0 returned -22
[  244.322550][T13327] binder: 13326:13327 ioctl 40046205 0 returned -22
[  244.342394][T13330] binder: 13329:13330 ioctl 40046205 0 returned -22
13:50:10 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  244.378649][T13331] binder: 13326:13331 unknown command 20491
[  244.384703][T13331] binder: 13326:13331 ioctl c0306201 200000c0 returned -22
[  244.438147][T13334] binder: 13333:13334 ioctl 40046205 0 returned -22
13:50:10 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000001c0)={0x88, @rand_addr=0x1, 0x4e24, 0x0, 'wlc\x00', 0x21, 0x2f, 0x24}, 0x2c)
r5 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r5)
r6 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r6, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x8040, 0x0)
ioctl$TUNSETTXFILTER(r7, 0x400454d1, &(0x7f0000000180)={0x1, 0x4, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote, @empty, @remote]})

13:50:10 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  244.720483][T13342] binder: 13341:13342 ioctl 40046205 0 returned -22
[  244.742216][T13338] binder: 13337:13338 ioctl 40046205 0 returned -22
13:50:10 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x0, 0x0, &(0x7f0000000140)})

[  245.065330][T13346] binder: 13345:13346 ioctl 40046205 0 returned -22
13:50:11 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1bd1db1695cf455ef8b8b9889215a3ac6b6df2b062c066b346cb25dfcc0b3446c2bc7662fb565b4b"], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:11 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  245.123687][T13331] binder: 13326:13331 ioctl 40046205 0 returned -22
[  245.140289][T13350] binder: 13349:13350 ioctl 40046205 0 returned -22
[  245.160468][T13353] binder: 13352:13353 ioctl 40046205 0 returned -22
13:50:11 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="605844ba"], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  245.195670][T13354] binder: 13349:13354 unknown command 383504667
[  245.202038][T13354] binder: 13349:13354 ioctl c0306201 200000c0 returned -22
[  245.247431][T13357] binder: 13356:13357 ioctl 40046205 0 returned -22
[  245.300694][T13358] binder: 13356:13358 unknown command -1169926048
[  245.307246][T13358] binder: 13356:13358 ioctl c0306201 200000c0 returned -22
13:50:11 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000001c0)={0x88, @rand_addr=0x1, 0x4e24, 0x0, 'wlc\x00', 0x21, 0x2f, 0x24}, 0x2c)
r5 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r5)
r6 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r6, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})
openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x8040, 0x0)

13:50:11 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  245.532429][T13365] binder: 13364:13365 ioctl 40046205 0 returned -22
[  245.555130][T13361] binder: 13360:13361 ioctl 40046205 0 returned -22
13:50:11 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x0, 0x0, &(0x7f0000000140)})

[  245.880528][T13370] binder: 13369:13370 ioctl 40046205 0 returned -22
13:50:11 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:11 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  245.941786][T13373] binder: 13349:13373 unknown command 383504667
[  245.948227][T13373] binder: 13349:13373 ioctl c0306201 200000c0 returned -22
[  245.977143][T13378] binder: 13376:13378 ioctl 40046205 0 returned -22
[  245.977172][T13377] binder: 13375:13377 ioctl 40046205 0 returned -22
13:50:11 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0863107f4b8efc00048000"/20], 0x1, 0x0, &(0x7f0000000140)='\x00'})

[  246.057974][T13382] binder: 13381:13382 ioctl 40046205 0 returned -22
13:50:12 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000001c0)={0x88, @rand_addr=0x1, 0x4e24, 0x0, 'wlc\x00', 0x21, 0x2f, 0x24}, 0x2c)
r5 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r5)
r6 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r6, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:12 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  246.342928][T13390] binder: 13389:13390 ioctl 40046205 0 returned -22
[  246.370217][T13386] binder: 13385:13386 ioctl 40046205 0 returned -22
13:50:12 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x0, 0x0, &(0x7f0000000140)})

[  246.692055][T13395] binder: 13394:13395 ioctl 40046205 0 returned -22
13:50:12 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000340)="4b872d3993"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:12 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  246.796145][T13400] binder: 13399:13400 ioctl 40046205 0 returned -22
[  246.803519][T13402] binder: 13401:13402 ioctl 40046205 0 returned -22
13:50:12 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
prctl$PR_SET_KEEPCAPS(0x8, 0x1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  246.867898][T13407] binder: 13406:13407 ioctl 40046205 0 returned -22
13:50:13 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000001c0)={0x88, @rand_addr=0x1, 0x4e24, 0x0, 'wlc\x00', 0x21, 0x2f, 0x24}, 0x2c)
r5 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r5)
r6 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r6, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})

13:50:13 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  247.155806][T13415] binder: 13414:13415 ioctl 40046205 0 returned -22
[  247.184069][T13411] binder: 13410:13411 ioctl 40046205 0 returned -22
13:50:13 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000001c0)={0x88, @rand_addr=0x1, 0x4e24, 0x0, 'wlc\x00', 0x21, 0x2f, 0x24}, 0x2c)
r5 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r5)
r6 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r6, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})
openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x8040, 0x0)

13:50:13 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:13 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="a22d76d8"], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:13 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  247.599070][T13424] binder: 13419:13424 ioctl 40046205 0 returned -22
[  247.623211][T13428] binder: 13426:13428 ioctl 40046205 0 returned -22
[  247.631184][T13429] binder: 13427:13429 ioctl 40046205 0 returned -22
[  247.676867][T13432] binder: 13431:13432 ioctl 40046205 0 returned -22
[  247.683887][T13433] binder: 13426:13433 unknown command -663343710
[  247.690466][T13433] binder: 13426:13433 ioctl c0306201 200000c0 returned -22
13:50:13 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000001c0)={0x88, @rand_addr=0x1, 0x4e24, 0x0, 'wlc\x00', 0x21, 0x2f, 0x24}, 0x2c)
r5 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r5)
r6 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r6, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})

13:50:13 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[  247.966313][T13441] binder: 13440:13441 ioctl 40046205 0 returned -22
[  247.998102][T13437] binder: 13436:13437 ioctl 40046205 0 returned -22
[  248.018749][T13443] binder: 13440:13443 ioctl c0306201 0 returned -14
13:50:14 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000001c0)={0x88, @rand_addr=0x1, 0x4e24, 0x0, 'wlc\x00', 0x21, 0x2f, 0x24}, 0x2c)
r5 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r5)
r6 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r6, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})
openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x8040, 0x0)

13:50:14 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:14 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="066304400000000099afa9994ce825112dbaea285ad4b2697edca5a332246c3a2ec316b4abd1c723a02d498f7f054f76b4bd35d1098bd3d8f8a1335e80fb3dadd70ef4248ad0abbca00f9a02184daf37a013ba1e8b1ebe87fdbff4f888727d5446588b2c8ac452b19fa28c45ce208aa39dde7eb43510cc8e2d5d2faf9cb6570d90eef2767ec7f111dc6cf47f3decd2a6032ad0db5bf42699347850eea24e2fbc3a537d0b487036863d24d1bcd542ee6a0196f05da39c370bd015f04ec5259ccb809c9377bb520a0dd54d303bab505f7965fb640c40e935c294fd672ddd56f5d6a3587a0b10ff9364e0ea3c45ba9f"], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:14 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0ac4955915cc890dbd5d20a742"], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  248.413297][T13446] binder: 13445:13446 ioctl 40046205 0 returned -22
[  248.443881][T13452] binder: 13451:13452 ioctl 40046205 0 returned -22
[  248.451265][T13454] binder: 13453:13454 ioctl 40046205 0 returned -22
[  248.485535][T13458] binder: 13457:13458 ioctl 40046205 0 returned -22
[  248.538662][T13460] binder: 13457:13460 unknown command 1502987274
[  248.545209][T13460] binder: 13457:13460 ioctl c0306201 200000c0 returned -22
13:50:14 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000001c0)={0x88, @rand_addr=0x1, 0x4e24, 0x0, 'wlc\x00', 0x21, 0x2f, 0x24}, 0x2c)
r5 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r5)
r6 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r6, 0x40046205, 0x0)

13:50:14 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

13:50:14 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000001c0)={0x88, @rand_addr=0x1, 0x4e24, 0x0, 'wlc\x00', 0x21, 0x2f, 0x24}, 0x2c)
r5 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r5)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)

[  248.780929][T13467] binder: 13466:13467 ioctl 40046205 0 returned -22
[  248.813083][T13463] binder: 13462:13463 ioctl 40046205 0 returned -22
[  248.833919][T13471] binder: 13466:13471 ioctl c0306201 0 returned -14
13:50:14 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000001c0)={0x88, @rand_addr=0x1, 0x4e24, 0x0, 'wlc\x00', 0x21, 0x2f, 0x24}, 0x2c)
r5 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r5)

13:50:14 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000001c0)={0x88, @rand_addr=0x1, 0x4e24, 0x0, 'wlc\x00', 0x21, 0x2f, 0x24}, 0x2c)
getpid()

13:50:15 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000001c0)={0x88, @rand_addr=0x1, 0x4e24, 0x0, 'wlc\x00', 0x21, 0x2f, 0x24}, 0x2c)
r5 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r5)
r6 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r6, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})
openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x8040, 0x0)

13:50:15 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000001c0)={0x88, @rand_addr=0x1, 0x4e24, 0x0, 'wlc\x00', 0x21, 0x2f, 0x24}, 0x2c)

13:50:15 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:15 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\fc\x00\x00'], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:15 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

[  249.227423][T13486] binder: 13485:13486 ioctl 40046205 0 returned -22
[  249.246186][T13459] debugfs: File '13453' in directory 'proc' already present!
[  249.264284][T13499] binder: 13498:13499 ioctl 40046205 0 returned -22
13:50:15 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="329a093b"], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  249.275404][T13501] binder: 13500:13501 ioctl 40046205 0 returned -22
[  249.286020][T13460] debugfs: File '13457' in directory 'proc' already present!
[  249.303127][T13508] binder: 13507:13508 ioctl 40046205 0 returned -22
13:50:15 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
dup2(r1, r3)

[  249.355744][T13511] binder: 13507:13511 unknown command 990485042
[  249.362237][T13511] binder: 13507:13511 ioctl c0306201 200000c0 returned -22
13:50:15 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[  249.594225][T13520] binder: 13519:13520 ioctl 40046205 0 returned -22
[  249.646678][T13521] binder: 13519:13521 ioctl c0306201 0 returned -14
13:50:15 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000001c0)={0x88, @rand_addr=0x1, 0x4e24, 0x0, 'wlc\x00', 0x21, 0x2f, 0x24}, 0x2c)
r5 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r5)
r6 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r6, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:15 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)="4b872d"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:16 executing program 1:
r0 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r1, 0x2)
flock(r2, 0x2)
flock(r0, 0x1)
r3 = dup2(r0, r2)
dup3(r3, r1, 0x0)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x2dafd6e6, 0x8})
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$dupfd(r5, 0x0, r4)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f00000002c0)={0x1, 'ip6erspan0\x00', {}, 0xb6})
r6 = getpid()
sched_setattr(r6, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r7 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r7, 0x40046205, 0x0)
pipe(&(0x7f0000000180)={<r8=>0xffffffffffffffff})
ioctl$USBDEVFS_DISCSIGNAL(r8, 0x8010550e, &(0x7f0000000240)={0x100, &(0x7f00000001c0)="9ab2205e2e0130cdba16eba3e6615da4945c1113b0c7e3e7e7602017a93b2d9f03ba3891dbede6fc93a5abd3e20421bdc0fed0c8e968dafe063510d3359ee3f0df02030d2233e84fed30e56779a831b6cb70165ad35d65483a"})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  250.039088][T13524] binder: 13523:13524 ioctl 40046205 0 returned -22
13:50:16 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r3, 0x2)
flock(r2, 0x1)
dup2(r2, r3)
sendfile(r1, r2, &(0x7f0000000080)=0x5, 0x1000)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x5a, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b6300004d71d8a14f1e906e66b204019a8acf58d27b3deb0af9393b1866a700a8713f3085ac21bd56817fad53040044773200"/61], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  250.088956][T13531] binder: 13530:13531 ioctl 40046205 0 returned -22
[  250.114566][T13537] binder: 13536:13537 ioctl 40046205 0 returned -22
13:50:16 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
dup2(r1, r3)

[  250.168837][T13537] binder: 13536:13537 ioctl c0306201 20000280 returned -14
[  250.192891][T13533] binder: 13532:13533 ioctl 40046205 0 returned -22
13:50:16 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)="f4"})

[  250.408103][T13550] binder: 13549:13550 ioctl 40046205 0 returned -22
13:50:16 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000001c0)={0x88, @rand_addr=0x1, 0x4e24, 0x0, 'wlc\x00', 0x21, 0x2f, 0x24}, 0x2c)
r5 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r5)
r6 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r6, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})

13:50:16 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  250.853064][T13554] binder: 13553:13554 ioctl 40046205 0 returned -22
13:50:16 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40480, 0x2)
sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0xe4, 0x2, 0x9, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFCTH_TUPLE={0x60, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @rand_addr="bd8e398dd69adb4af6f38829c6660694"}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_TUPLE={0x60, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @rand_addr=0xc}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4000811}, 0x8080)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x3}, 0x0)
sched_setattr(r2, &(0x7f0000000000)={0x38, 0x5, 0x1000003b, 0x0, 0x0, 0x8, 0x1, 0x48, 0x3, 0x3f}, 0x0)
r3 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
r4 = getpid()
sched_setattr(r4, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x3}, 0x0)
r5 = getpgid(r4)
ptrace$peek(0xffffffffffffffff, r5, &(0x7f0000000240))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000d4db2de3d2e976079b0d966de7444f6d350000"], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:16 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x8}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$BLKBSZGET(r4, 0x80081270, &(0x7f0000000000))
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04002004c5"], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  250.900772][T13562] binder: 13561:13562 ioctl 40046205 0 returned -22
[  250.915431][T13540] binder: 13536:13540 ioctl c0306201 20000280 returned -14
[  250.935353][T13566] binder: 13565:13566 ioctl 40046205 0 returned -22
[  250.935813][T13568] binder: 13567:13568 ioctl 40046205 0 returned -22
13:50:16 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
dup2(r1, r3)

[  250.988713][T13570] binder: 13565:13570 unknown command 69206020
[  250.996078][T13570] binder: 13565:13570 ioctl c0306201 200000c0 returned -22
[  251.003772][T13571] binder: 13567:13571 unknown command -606863360
[  251.010851][T13571] binder: 13567:13571 ioctl c0306201 200000c0 returned -22
13:50:17 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)="f4"})

[  251.221714][T13579] binder: 13578:13579 ioctl 40046205 0 returned -22
13:50:17 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000001c0)={0x88, @rand_addr=0x1, 0x4e24, 0x0, 'wlc\x00', 0x21, 0x2f, 0x24}, 0x2c)
r5 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r5)
r6 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r6, 0x40046205, 0x0)

13:50:17 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000001c0)={0x88, @rand_addr=0x1, 0x4e24, 0x0, 'wlc\x00', 0x21, 0x2f, 0x24}, 0x2c)
r5 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r5)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)

13:50:17 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  251.668085][T13583] binder: 13582:13583 ioctl 40046205 0 returned -22
13:50:17 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
chmod(&(0x7f0000000000)='./file0\x00', 0xc3)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\vc\x00\x00'], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:17 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  251.711767][T13591] binder: 13590:13591 ioctl 40046205 0 returned -22
[  251.737194][T13571] binder: 13567:13571 ioctl 40046205 0 returned -22
[  251.754253][T13597] binder: 13596:13597 ioctl 40046205 0 returned -22
13:50:17 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000001c0)={0x88, @rand_addr=0x1, 0x4e24, 0x0, 'wlc\x00', 0x21, 0x2f, 0x24}, 0x2c)
r5 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r5)

[  251.762280][T13599] binder: 13598:13599 ioctl 40046205 0 returned -22
13:50:17 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
dup3(0xffffffffffffffff, r2, 0x0)

13:50:17 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000001c0)={0x88, @rand_addr=0x1, 0x4e24, 0x0, 'wlc\x00', 0x21, 0x2f, 0x24}, 0x2c)
getpid()

13:50:17 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000001c0)={0x88, @rand_addr=0x1, 0x4e24, 0x0, 'wlc\x00', 0x21, 0x2f, 0x24}, 0x2c)

13:50:17 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)="f4"})

[  252.035378][T13623] binder: 13622:13623 ioctl 40046205 0 returned -22
13:50:18 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:18 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
dup2(r1, r3)

13:50:18 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:18 executing program 1:
prlimit64(0x0, 0x3, &(0x7f0000000280)={0x8000, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x2}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:18 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'gre0\x00', 0x4}, 0x18)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000180)='trusted.overlay.nlink\x00', &(0x7f00000001c0)={'U+', 0x3}, 0x16, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  252.525456][T13639] binder: 13638:13639 ioctl 40046205 0 returned -22
[  252.554822][T13604] binder: 13596:13604 ioctl 40046205 0 returned -22
[  252.563482][T13599] binder: 13598:13599 ioctl 40046205 0 returned -22
[  252.595787][T13643] binder: 13641:13643 ioctl 40046205 0 returned -22
[  252.603463][T13644] binder: 13642:13644 ioctl 40046205 0 returned -22
13:50:18 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
dup3(0xffffffffffffffff, r2, 0x0)

13:50:18 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040), 0x1, 0x0, &(0x7f0000000140)="f4"})

[  252.849657][T13654] binder: 13653:13654 ioctl 40046205 0 returned -22
13:50:18 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
dup2(r1, r3)

13:50:19 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  253.338586][T13663] binder: 13662:13663 ioctl 40046205 0 returned -22
13:50:19 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x40, 0x0)
ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, &(0x7f0000000080))
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x0)
inotify_init1(0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:19 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x8}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='c\x00\x00\x00'], 0x1, 0x0, &(0x7f0000000140)="f4"})
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$PPPIOCGIDLE(r2, 0x8010743f, &(0x7f0000000080))

13:50:19 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
dup3(0xffffffffffffffff, r2, 0x0)

[  253.399698][T13664] binder: 13641:13664 ioctl 40046205 0 returned -22
[  253.411749][T13668] binder: 13667:13668 ioctl 40046205 0 returned -22
[  253.420860][T13670] binder: 13669:13670 ioctl 40046205 0 returned -22
[  253.473647][T13673] binder: 13669:13673 unknown command 99
[  253.479379][T13673] binder: 13669:13673 ioctl c0306201 200000c0 returned -22
13:50:19 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040), 0x1, 0x0, &(0x7f0000000140)="f4"})

[  253.662706][T13680] binder: 13679:13680 ioctl 40046205 0 returned -22
13:50:19 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
dup2(r1, r3)

13:50:20 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  254.153100][T13689] binder: 13688:13689 ioctl 40046205 0 returned -22
13:50:20 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  254.208846][T13692] binder: 13667:13692 ioctl 40046205 0 returned -22
[  254.221547][T13673] binder: 13669:13673 ioctl 40046205 0 returned -22
[  254.221684][T13693] binder: 13669:13693 unknown command 99
[  254.235519][T13693] binder: 13669:13693 ioctl c0306201 200000c0 returned -22
13:50:20 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='/dev/binder#\x00', r4}, 0x10)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r5 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r5, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
r6 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/validatetrans\x00', 0x1, 0x0)
ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000200)={0xffff, 0x7ff})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0b156c118958a04b8400a8fe70ba0ab8720cc582e6a61ef7b53516"], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:20 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000180)={0x8, &(0x7f0000000080)=[{0x5, 0x9, 0x1, 0x200}, {0x2, 0x4b, 0x4, 0x6}, {0x7f, 0x81, 0x5, 0x9}, {0x200, 0x6, 0x20}, {0x401, 0x6, 0x80, 0xbdf}, {0x4, 0x9, 0x1, 0xc222}, {0x4000, 0x4, 0x40, 0x10000}, {0x1, 0x3f, 0x1, 0x5}]}, 0x10)
r2 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:20 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

[  254.252724][T13696] binder: 13695:13696 ioctl 40046205 0 returned -22
[  254.260830][T13696] binder: 13695:13696 ioctl c0306201 20000280 returned -11
[  254.269251][T13696] binder: 13695:13696 ioctl c0306201 200000c0 returned -11
[  254.292379][T13702] binder: 13701:13702 ioctl 40046205 0 returned -22
13:50:20 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:20 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

[  254.383975][T13712] binder: 13699:13712 ioctl 40046205 0 returned -22
13:50:20 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040), 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:20 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

[  254.436839][T13717] binder: 13699:13717 unknown command 292295947
[  254.444210][T13717] binder: 13699:13717 ioctl c0306201 200000c0 returned -22
[  254.477007][T13720] binder: 13719:13720 ioctl 40046205 0 returned -22
13:50:20 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:20 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:20 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
dup3(0xffffffffffffffff, r2, 0x0)

13:50:20 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:20 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(0xffffffffffffffff, 0x2)
flock(r1, 0x1)
r3 = dup2(r1, 0xffffffffffffffff)
dup3(r3, r2, 0x0)

[  254.965581][T13743] binder: 13742:13743 ioctl 40046205 0 returned -22
13:50:21 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})
pipe2(&(0x7f0000000000)={<r2=>0xffffffffffffffff}, 0x4000)
mmap$usbfs(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000005, 0x4010, r2, 0x100000000)

13:50:21 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
r2 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r3, 0x2)
flock(r4, 0x2)
flock(r2, 0x1)
r5 = dup2(r2, r4)
dup3(r5, r3, 0x0)
write$cgroup_type(r3, &(0x7f0000000000)='threaded\x00', 0x9)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='ig|['], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  255.133061][T13712] binder: 13699:13712 unknown command 292295947
[  255.139843][T13712] binder: 13699:13712 ioctl c0306201 200000c0 returned -22
[  255.160243][T13752] binder: 13751:13752 ioctl 40046205 0 returned -22
[  255.169752][T13754] binder: 13753:13754 ioctl 40046205 0 returned -22
[  255.215171][   T22] audit: type=1400 audit(1580219421.117:18075): avc:  denied  { map } for  pid=13751 comm="syz-executor.1" path="pipe:[36216]" dev="pipefs" ino=36216 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=fifo_file permissive=1
13:50:21 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x0, 0x0, 0x0})

[  255.243626][   T22] audit: type=1400 audit(1580219421.117:18076): avc:  denied  { execute } for  pid=13751 comm="syz-executor.1" path="pipe:[36216]" dev="pipefs" ino=36216 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=fifo_file permissive=1
[  255.288517][T13760] binder: 13759:13760 ioctl 40046205 0 returned -22
[  255.316246][T13756] binder: 13753:13756 unknown command 1534879593
[  255.322860][T13756] binder: 13753:13756 ioctl c0306201 200000c0 returned -22
13:50:21 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
dup3(0xffffffffffffffff, r2, 0x0)

13:50:21 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:21 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(0xffffffffffffffff, 0x2)
flock(r1, 0x1)
r3 = dup2(r1, 0xffffffffffffffff)
dup3(r3, r2, 0x0)

[  255.788000][T13771] binder: 13770:13771 ioctl 40046205 0 returned -22
13:50:21 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r3, 0x2)
flock(r2, 0x1)
dup2(r2, r3)
ioctl$TCGETS2(r2, 0x802c542a, &(0x7f0000000000))
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})
socket$inet(0x2, 0x2, 0x2)

[  255.969778][T13756] debugfs: File '13753' in directory 'proc' already present!
13:50:21 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r4, 0x2)
flock(r3, 0x1)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = dup(r7)
getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@setneightbl={0x24, 0x43, 0x300, 0x70bd27, 0x25dfdbff, {0x2}, [@NDTA_THRESH1={0x8, 0x2, 0x8000}, @NDTA_THRESH1={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0)
setsockopt$inet6_mreq(r5, 0x29, 0x15, &(0x7f0000000500)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1f}}, r9}, 0x14)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00')
sendmsg$TIPC_NL_NAME_TABLE_GET(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x120, r10, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x20}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9ef}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x750}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1028553c}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x22}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x273}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x8801}, 0x20004844)
dup2(r3, r4)
ioctl$IOC_PR_PREEMPT_ABORT(r4, 0x401870cc, &(0x7f0000000000)={0x3, 0xfffffffffffffc01, 0xd6, 0x8000})
flock(r1, 0x1)
dup2(r1, r2)
write$selinux_validatetrans(r1, &(0x7f0000000180)={'system_u:object_r:dhcpc_var_run_t:s0', 0x20, 'system_u:object_r:dlm_control_device_t:s0', 0x20, 0x7fff, 0x20, '/usr/sbin/cups-browsed\x00'}, 0x7b)
r11 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r11, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  256.024788][T13779] binder: 13777:13779 ioctl 40046205 0 returned -22
13:50:22 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x0, 0x0, 0x0})

[  256.102668][T13787] binder: 13786:13787 ioctl 40046205 0 returned -22
[  256.134034][T13781] binder: 13780:13781 ioctl 40046205 0 returned -22
13:50:22 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
dup3(0xffffffffffffffff, r2, 0x0)

13:50:22 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(0xffffffffffffffff, 0x2)
flock(r1, 0x1)
r3 = dup2(r1, 0xffffffffffffffff)
dup3(r3, r2, 0x0)

13:50:22 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[  256.614125][T13800] binder: 13798:13800 ioctl 40046205 0 returned -22
[  256.668855][T13802] binder: 13798:13802 ioctl c0306201 0 returned -14
13:50:22 executing program 1:
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=<r0=>0x0)
prlimit64(r0, 0xa, &(0x7f0000000280)={0x9, 0x8a}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r4, 0x2)
flock(r5, 0x2)
flock(r3, 0x1)
r6 = dup2(r3, r5)
dup3(r6, r4, 0x0)
r7 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r8 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r9 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r8, 0x2)
flock(r9, 0x2)
flock(r7, 0x1)
r10 = dup2(r7, r9)
dup3(r10, r8, 0x0)
write$P9_RWRITE(r10, &(0x7f0000000180)={0xb, 0x77, 0x2, 0x8}, 0xb)
ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000380)={0x0, 0x0, 0x3, 0x0, [], [{0x0, 0x3, 0x8, 0xfab9, 0x0, 0xff}, {0x8, 0x8, 0x1, 0x4, 0x7, 0xf2c0}], [[], [], []]})
ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:22 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="800043e9"], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  256.842058][T13810] binder: 13780:13810 ioctl 40046205 0 returned -22
[  256.859075][T13813] binder: 13812:13813 ioctl 40046205 0 returned -22
13:50:22 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x0, 0x0, 0x0})

[  256.911670][T13816] binder: 13812:13816 unknown command -381484928
[  256.919111][T13816] binder: 13812:13816 ioctl c0306201 200000c0 returned -22
[  256.930575][T13818] binder: 13817:13818 ioctl 40046205 0 returned -22
[  256.977715][T13814] binder: 13807:13814 ioctl 40046205 0 returned -22
13:50:23 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:23 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:23 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:23 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:23 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:23 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:23 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(0xffffffffffffffff, 0x2)
flock(r2, 0x2)
flock(r1, 0x1)
r3 = dup2(r1, r2)
dup3(r3, 0xffffffffffffffff, 0x0)

13:50:23 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

13:50:23 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(0xffffffffffffffff, 0x2)
flock(r1, 0x1)
r3 = dup2(r1, 0xffffffffffffffff)
dup3(r3, r2, 0x0)

[  257.437809][T13849] binder: 13848:13849 ioctl 40046205 0 returned -22
[  257.490701][T13856] binder: 13848:13856 ioctl c0306201 0 returned -14
13:50:23 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffff7f"], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:23 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(0xffffffffffffffff, 0x2)
flock(r2, 0x2)
flock(r1, 0x1)
r3 = dup2(r1, r2)
dup3(r3, 0xffffffffffffffff, 0x0)

13:50:23 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x0, 0x0, &(0x7f0000000140)})

13:50:23 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:23 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
open$dir(&(0x7f0000000000)='./file0\x00', 0x8040, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  257.686922][T13859] binder: 13807:13859 ioctl 40046205 0 returned -22
13:50:23 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(0xffffffffffffffff, 0x2)
flock(r2, 0x2)
flock(r1, 0x1)
r3 = dup2(r1, r2)
dup3(r3, 0xffffffffffffffff, 0x0)

[  257.745478][T13869] binder: 13868:13869 ioctl 40046205 0 returned -22
[  257.748164][T13871] binder: 13867:13871 ioctl 40046205 0 returned -22
[  257.754256][T13872] binder: 13870:13872 ioctl 40046205 0 returned -22
13:50:23 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r1, 0x2)
flock(r2, 0x2)
flock(0xffffffffffffffff, 0x1)
r3 = dup2(0xffffffffffffffff, r2)
dup3(r3, r1, 0x0)

13:50:23 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r1, 0x2)
flock(r2, 0x2)
flock(0xffffffffffffffff, 0x1)
r3 = dup2(0xffffffffffffffff, r2)
dup3(r3, r1, 0x0)

13:50:23 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r1, 0x2)
flock(r2, 0x2)
flock(0xffffffffffffffff, 0x1)
r3 = dup2(0xffffffffffffffff, r2)
dup3(r3, r1, 0x0)

13:50:23 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r1, 0x2)
flock(r2, 0x2)
flock(r0, 0x1)
r3 = dup2(r0, r2)
dup3(r3, r1, 0x0)

13:50:24 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r1, 0x2)
flock(r2, 0x2)
flock(r0, 0x1)
r3 = dup2(r0, r2)
dup3(r3, r1, 0x0)

13:50:24 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

13:50:24 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(0xffffffffffffffff, 0x2)
flock(r1, 0x1)
r3 = dup2(r1, 0xffffffffffffffff)
dup3(r3, r2, 0x0)

[  258.273090][T13900] binder: 13899:13900 ioctl 40046205 0 returned -22
13:50:24 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r1, 0x2)
flock(r2, 0x2)
flock(r0, 0x1)
r3 = dup2(r0, r2)
dup3(r3, r1, 0x0)

[  258.325710][T13905] binder: 13899:13905 ioctl c0306201 0 returned -14
13:50:24 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x0, 0x0, &(0x7f0000000140)})

13:50:24 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x3}, 0x0)
sched_setscheduler(r2, 0x6, &(0x7f0000000000)=0x1)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:24 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:24 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  258.555620][T13916] binder: 13870:13916 ioctl 40046205 0 returned -22
[  258.574726][T13920] binder: 13917:13920 ioctl 40046205 0 returned -22
[  258.580432][T13919] binder: 13918:13919 ioctl 40046205 0 returned -22
[  258.589894][T13924] binder: 13922:13924 ioctl 40046205 0 returned -22
13:50:24 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r1, 0x2)
flock(r2, 0x2)
flock(r0, 0x1)
r3 = dup2(r0, r2)
dup3(r3, r1, 0x0)

13:50:24 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r1, 0x2)
flock(r2, 0x2)
flock(r0, 0x1)
r3 = dup2(r0, r2)
dup3(r3, r1, 0x0)

13:50:24 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r1, 0x2)
flock(r2, 0x2)
flock(r0, 0x1)
r3 = dup2(r0, r2)
dup3(r3, r1, 0x0)

13:50:24 executing program 2:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:24 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:25 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(0xffffffffffffffff, 0x2)
flock(r1, 0x1)
r3 = dup2(r1, 0xffffffffffffffff)
dup3(r3, r2, 0x0)

13:50:25 executing program 2:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

[  259.082285][T13951] binder: 13950:13951 ioctl 40046205 0 returned -22
13:50:25 executing program 2:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:25 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x0, 0x0, &(0x7f0000000140)})

13:50:25 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0)
ioctl$RTC_PLL_SET(r2, 0x40207012, &(0x7f0000000080)={0x245, 0x4, 0x1, 0x7, 0x4, 0x60620d02})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:25 executing program 2:
prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

[  259.389953][T13928] binder: 13922:13928 ioctl 40046205 0 returned -22
[  259.394940][T13975] binder: 13974:13975 ioctl 40046205 0 returned -22
[  259.406379][T13978] binder: 13976:13978 ioctl 40046205 0 returned -22
13:50:25 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:25 executing program 2:
prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

[  259.460057][T13982] binder: 13981:13982 ioctl 40046205 0 returned -22
13:50:25 executing program 2:
prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:25 executing program 2:
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:25 executing program 2:
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:25 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:25 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(0xffffffffffffffff, 0x2)
flock(r2, 0x2)
flock(r1, 0x1)
r3 = dup2(r1, r2)
dup3(r3, 0xffffffffffffffff, 0x0)

13:50:25 executing program 2:
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:25 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(0xffffffffffffffff, 0x2)
flock(r2, 0x2)
flock(r1, 0x1)
r3 = dup2(r1, r2)
dup3(r3, 0xffffffffffffffff, 0x0)

[  259.901535][T14008] binder: 14006:14008 ioctl 40046205 0 returned -22
13:50:26 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(0xffffffffffffffff, 0x2)
flock(r2, 0x2)
flock(r1, 0x1)
r3 = dup2(r1, r2)
dup3(r3, 0xffffffffffffffff, 0x0)

13:50:26 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:26 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b6300000de18bc86c96367b5ab16eada6008c5b6733d353278fc899f6b5a63184113b7f0e95885a0208a505ffffc8d5776731111dc0d79049825346f9da051eaf915043ad392391711a828ad8df18c7637efe3e153ceef6fb4745ceb10a528da3117b89a0c91bc206ad2d66cfb6b2b7445d1f63bec773d304708a10b8786d95b669cfdd5a834c126aa8b6b239b2445af99a3b038ddb0e92c3d37985430113126252f1d8da8a968dbb778d73dde28dbc557bc9cabb6f576251af5b7d8a40df15aea467c0723b77d1c04289db2aed1fe2a8435a3b2433f543c0494e0eb7"], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:26 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})
prctl$PR_SET_FP_MODE(0x2d, 0x1)

13:50:26 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000001c0)={0x88, @rand_addr=0x1, 0x4e24, 0x0, 'wlc\x00', 0x21, 0x2f, 0x24}, 0x2c)
r5 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r5)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)

13:50:26 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r1, 0x2)
flock(r2, 0x2)
flock(0xffffffffffffffff, 0x1)
r3 = dup2(0xffffffffffffffff, r2)
dup3(r3, r1, 0x0)

[  260.221402][T14031] binder: 14028:14031 ioctl 40046205 0 returned -22
13:50:26 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r1, 0x2)
flock(r2, 0x2)
flock(0xffffffffffffffff, 0x1)
r3 = dup2(0xffffffffffffffff, r2)
dup3(r3, r1, 0x0)

13:50:26 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r1, 0x2)
flock(r2, 0x2)
flock(0xffffffffffffffff, 0x1)
r3 = dup2(0xffffffffffffffff, r2)
dup3(r3, r1, 0x0)

[  260.281062][T14039] binder: 14038:14039 ioctl 40046205 0 returned -22
13:50:26 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:26 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r1, 0x2)
flock(r2, 0x2)
flock(r0, 0x1)
r3 = dup2(r0, r2)
dup3(r3, r1, 0x0)

13:50:26 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:26 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000001c0)={0x88, @rand_addr=0x1, 0x4e24, 0x0, 'wlc\x00', 0x21, 0x2f, 0x24}, 0x2c)
r5 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r5)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)

[  260.722489][T14066] binder: 14064:14066 ioctl 40046205 0 returned -22
13:50:26 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000001c0)={0x88, @rand_addr=0x1, 0x4e24, 0x0, 'wlc\x00', 0x21, 0x2f, 0x24}, 0x2c)

13:50:26 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r1, 0x2)
flock(r2, 0x2)
flock(r0, 0x1)
r3 = dup2(r0, r2)
dup3(r3, r1, 0x0)

13:50:26 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:27 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})
r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x501080, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r4, 0x2)
flock(r5, 0x2)
flock(r3, 0x1)
r6 = dup2(r3, r5)
r7 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r8 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r9 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r8, 0x2)
flock(r9, 0x2)
flock(r7, 0x1)
r10 = dup2(r7, r9)
dup3(r10, r8, 0x0)
close(r8)
dup3(r6, r4, 0x0)
r11 = accept$inet(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000180)=0x10)
r12 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0xa2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0xb4, 0x0, &(0x7f00000004c0)=[@register_looper, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r4}, @fda={0x66646185, 0x0, 0x0, 0x3e}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}}, @register_looper, @free_buffer={0x40086303, r12}, @dead_binder_done, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0x7, 0x1, 0x2e}, @flat=@handle={0x73682a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/200, 0xc8, 0x1, 0x17}}, &(0x7f0000000480)={0x0, 0x20, 0x38}}}, @exit_looper], 0xb9, 0x0, &(0x7f0000000580)="b329d483ae2fb2eea7328c2fee50a69fea6fdf56e7080518561d597b4bb73aa2555feeaf78888391c357d71a625d9bee3c65f35373a6c290da2dcc3830c86f8d7c16154825c29ef9ced457ef683bf5b387489c9fb887a924cff73666d632024ee8fcf1418606d88a77f0be807e72c33cf36c6a60da91607f0141de81bd2cf80e34ec866c225154edad4582b7e7ef25142994a6236b1ef88f1a6927ba54fb7bf7477655261c8a6583309aa184ba7605a8952971d610c925775f"})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x10, r2, 0x0)

13:50:27 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000001c0)={0x88, @rand_addr=0x1, 0x4e24, 0x0, 'wlc\x00', 0x21, 0x2f, 0x24}, 0x2c)

13:50:27 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r1, 0x2)
flock(r2, 0x2)
flock(r0, 0x1)
r3 = dup2(r0, r2)
dup3(r3, r1, 0x0)

13:50:27 executing program 0:
r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00')
sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00464210f0f42a77c9cd0f930228bd7000ffdbdf25f5e409000000000000007cb30800000008003c19fe00000008000b0002000200000037000d00d59ecb8c68596eac00000600280003000000d271369154c2bd000d5442074cda03b9fd0058e4dcf5bfe0fd7a2579437dc39e7325169a59ab148c8b33e9dd24d02cd0651b45997f580eb1ede3ded5e62cd7388cb42f3d453130bb5717a37b38c4f06076dcb9500c1598e14bb43674a5c33a097c210380e4a54a249042410551753705c0b2dc1f2a6ca4dd821ffe3007afed96d27e10a8022b6fecbd845b9f900857d612c1430bc4df81db204773494c8074631d22b8da32c939644f52c4bd6db1059890190c99eadcdcaea8a53b56c19547a8fc7773f2a51e2a09d33de83f2b47f00000"], 0x44}, 0x1, 0x0, 0x0, 0xc4}, 0x4000001)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}]}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = dup(r7)
getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}]}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'lo\x00', <r10=>r9})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x140, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0x124, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x5000000}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x101}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xcd}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x287}}}]}}]}, 0x140}, 0x1, 0x0, 0x0, 0x24090}, 0x80)
r11 = getpid()
sched_setattr(r11, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r12 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r12, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:27 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

[  261.101186][T14099] binder: 14095:14099 ioctl 40046205 0 returned -22
[  261.112061][T14096] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  261.131118][T14096] binder: 14093:14096 ioctl 40046205 0 returned -22
13:50:27 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000001c0)={0x88, @rand_addr=0x1, 0x4e24, 0x0, 'wlc\x00', 0x21, 0x2f, 0x24}, 0x2c)

13:50:27 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:27 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040), 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:27 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

[  261.543368][T14128] binder: 14124:14128 ioctl 40046205 0 returned -22
13:50:27 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r1, 0x2)
flock(r2, 0x2)
flock(r0, 0x1)
r3 = dup2(r0, r2)
dup3(r3, r1, 0x0)

13:50:27 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:27 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:27 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:27 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)=0x200)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x20, &(0x7f0000000200)='/dev/binder#\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:27 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r1, 0x2)
flock(r2, 0x2)
flock(r0, 0x1)
r3 = dup2(r0, r2)
dup3(r3, r1, 0x0)

13:50:27 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r1, 0x2)
flock(r2, 0x2)
flock(r0, 0x1)
r3 = dup2(r0, r2)
dup3(r3, r1, 0x0)

13:50:27 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
dup2(r1, r3)

[  261.902843][T14099] binder: 14095:14099 ioctl 40046205 0 returned -22
[  261.910399][T14155] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  261.927635][T14096] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14096 comm=syz-executor.0
[  261.941063][T14108] binder: 14093:14108 ioctl 40046205 0 returned -22
[  261.990873][T14162] binder: 14159:14162 ioctl 40046205 0 returned -22
[  261.991077][T14165] binder: 14161:14165 ioctl 40046205 0 returned -22
13:50:28 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r1, 0x2)
flock(r2, 0x2)
flock(r0, 0x1)
r3 = dup2(r0, r2)
dup3(r3, r1, 0x0)

13:50:28 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r1, 0x2)
flock(r2, 0x2)
flock(r0, 0x1)
r3 = dup2(r0, r2)
dup3(r3, r1, 0x0)

[  262.051605][T14170] binder: 14161:14170 unknown command 48
[  262.057366][T14170] binder: 14161:14170 ioctl c0306201 200000c0 returned -22
13:50:28 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r1, 0x2)
flock(r2, 0x2)
flock(r0, 0x1)
r3 = dup2(r0, r2)
dup3(r3, r1, 0x0)

13:50:28 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040), 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:28 executing program 3:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

[  262.361256][T14192] binder: 14189:14192 ioctl 40046205 0 returned -22
13:50:28 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:28 executing program 3:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:28 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x33, 0xfff, 0x7, 0xfffffffffffffffe, 0x0, 0x4, 0x3, 0xff}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x78, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x24, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x2e1}, @CTA_PROTOINFO_SCTP_STATE={0x5}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8}]}}, @CTA_LABELS={0x1c, 0x16, 0x1, 0x0, [0x7fffffff, 0x100, 0x6, 0x7, 0x1f, 0x4]}, @CTA_NAT_SRC={0x20, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_V6_MINIP={0x14, 0x4, @remote}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x4000)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})
ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000240)={'ip6gretap0\x00', {0x2, 0x4e21, @multicast1}})

13:50:28 executing program 3:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:28 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:28 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
dup2(r1, r3)

13:50:28 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x4, 0x6, 0xfffffffffffffff9, 0x9, 0xfffffffffffffffc, 0x0, 0xfffffffc}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={'veth0_to_hsr\x00', {0x2, 0x4e22, @multicast1}})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)="8c0f75a30ba0799f211593f521088089c61acfca6550ea121b393168fa9a52d7803f44cf105f736f30773bfd66641cd41a0392fda63860c7bb0988ec4db92081f84c1ba5e012844a5746c3c6c07c3150e5"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="03000000"], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  262.789358][T14162] binder: 14159:14162 ioctl 40046205 0 returned -22
[  262.791576][T14170] debugfs: File '14161' in directory 'proc' already present!
[  262.803633][T14211] binder: 14161:14211 ioctl 40046205 0 returned -22
[  262.810422][T14170] binder: 14161:14170 unknown command 48
[  262.816157][T14170] binder: 14161:14170 ioctl c0306201 200000c0 returned -22
13:50:28 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="06633500a4a30075d94cba020089b7717a992eac107afef61e03b677b99dc6f8023dbe623e83362558b74a03d6e2dcde3b868d1d1302b85b0f9bf6aa3bd066e000aff87606384aea1f1a6f03ad705cbc9f1056d28f241b94a23b9ce13fd5d83a3ebc3da29fb183f842d069444f65ef5739778cde6051dda20522bdd2b972cf"], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  262.842762][T14221] binder: 14217:14221 ioctl 40046205 0 returned -22
[  262.849621][T14222] binder: 14214:14222 ioctl 40046205 0 returned -22
[  262.850616][T14221] binder: 14217:14221 unknown command 3
[  262.862024][T14221] binder: 14217:14221 ioctl c0306201 200000c0 returned -22
[  262.879628][T14227] binder: 14226:14227 ioctl 40046205 0 returned -22
13:50:28 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:28 executing program 3:
prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

[  262.931723][T14232] binder: 14226:14232 unknown command 3498758
[  262.937901][T14232] binder: 14226:14232 ioctl c0306201 200000c0 returned -22
13:50:29 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040), 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:29 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:29 executing program 3:
prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

[  263.176956][T14252] binder: 14250:14252 ioctl 40046205 0 returned -22
13:50:29 executing program 3:
prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:29 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:29 executing program 3:
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:29 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
dup2(r1, r3)

13:50:29 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
r0 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r1, 0x2)
flock(r0, 0x1)
dup2(r0, r1)
ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000001c0)=<r2=>0x0)
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x8001, 0x6}, 0x0)
r3 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
r4 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r5 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r6 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r5, 0x2)
flock(r6, 0x2)
flock(r4, 0x1)
r7 = dup2(r4, r6)
dup3(r7, r5, 0x0)
getsockopt$inet_mreqsrc(r5, 0x0, 0x28, &(0x7f0000000080)={@broadcast, @broadcast, @loopback}, &(0x7f0000000180)=0xc)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000000)=[@increfs={0x40046304, 0x3}], 0xfffffe6b, 0x0, &(0x7f0000000140)='B'})

13:50:29 executing program 0:
r0 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r1, 0x2)
flock(r0, 0x1)
dup2(r0, r1)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000180)=0x40, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r3 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
r4 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r5 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r6 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r5, 0x2)
flock(r6, 0x2)
flock(r4, 0x1)
r7 = dup2(r4, r6)
dup3(r7, r5, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  263.644688][T14222] binder: 14214:14222 ioctl 40046205 0 returned -22
13:50:29 executing program 3:
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:29 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

[  263.724033][T14275] binder: 14274:14275 ioctl 40046205 0 returned -22
[  263.740195][T14278] binder: 14277:14278 ioctl 40046205 0 returned -22
13:50:29 executing program 3:
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:29 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x0, 0x0, 0x0})

13:50:29 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:29 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

[  263.997342][T14311] binder: 14309:14311 ioctl 40046205 0 returned -22
13:50:30 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:30 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:30 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:30 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:30 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(0x0, 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:30 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
dup3(0xffffffffffffffff, r2, 0x0)

13:50:30 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000000200)="3081", 0x3, r3)
keyctl$reject(0x13, r3, 0x9, 0x6, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = socket(0x10, 0x2, 0x0)
ioctl$TIOCL_UNBLANKSCREEN(r6, 0x541c, &(0x7f0000000240))
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r8=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r8, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = fcntl$dupfd(r10, 0x0, r9)
ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200)
r12 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r13 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r14 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r14, 0x2)
flock(r13, 0x1)
dup2(r13, r14)
r15 = open_tree(r13, &(0x7f00000001c0)='./file0\x00', 0x8c00)
sendfile(r15, r2, 0x0, 0x4)
statx(r12, &(0x7f0000000580)='./file0/file0\x00', 0x100, 0xfff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0})
mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='fuseblk\x00', 0x88841, &(0x7f0000000480)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r8}, 0x2c, {'group_id', 0x3d, r16}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x81}}, {@max_read={'max_read', 0x3d, 0xc2}}], [{@context={'context', 0x3d, 'system_u'}}, {@pcr={'pcr', 0x3d, 0x1f}}, {@dont_measure='dont_measure'}]}})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b631c007adcc79422310ffd04eaa706efd889b44e2547b82b7b6fb6c7f6d801261a6d00ad7e90e4b225476758ba5560cfcd0fa7108fb0ac05bb276df0b4e1307cf9ccc3e922c6b47f7544b1153ad95833035a0ad572718bf9cb6f7be58ee97ea984cf4514115fe0926b777203c2ea7d88596fbaa80912740cc34b6e30446b804d23208420e9e150604850db2caf8d20d11c426c027954effdcad4fd3609ac7df4d5c9d14a2da199678c853ecc5beb23a0fa88973709b59a18526d0bf71cfbec"], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:30 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r1, 0x2)
flock(r2, 0x2)
flock(r0, 0x1)
r3 = dup2(r0, r2)
dup3(r3, r1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r8 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r9 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r8, 0x2)
flock(r9, 0x2)
flock(r7, 0x1)
r10 = dup2(r7, r9)
dup3(r10, r8, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r11, 0xc0, &(0x7f00000005c0)={0x0, <r12=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r12}, 0xc)
r13 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000005c0)={r12}, 0xc)
r14 = syz_open_pts(0xffffffffffffffff, 0x400001)
r15 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vga_arbiter\x00', 0x2000, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r16=>0xffffffffffffffff, <r17=>0xffffffffffffffff})
fcntl$dupfd(r17, 0x0, r16)
r18 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000640)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r19=>0xffffffffffffffff, <r20=>0xffffffffffffffff})
fcntl$dupfd(r20, 0x0, r19)
r21 = eventfd2(0x3, 0x0)
r22 = socket$vsock_dgram(0x28, 0x2, 0x0)
r23 = eventfd(0x3)
r24 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000680)='/dev/urandom\x00', 0x101802, 0x0)
r25 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003080)={&(0x7f0000002f00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0xc, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x8}, {0x7, 0x5}]}, @var={0xe, 0x0, 0x0, 0xe, 0x4, 0x1}, @const={0x8}, @union={0xcb53, 0x1, 0x0, 0x5, 0x1, 0x101, [{0x3, 0x2, 0x4f}]}]}, {0x0, [0x5f, 0x5f, 0x61, 0x5f, 0x61, 0x2e, 0x0, 0x2e, 0x5f, 0x30]}}, &(0x7f0000002f80)=""/253, 0x74, 0xfd, 0x1}, 0x20)
r26 = getpgrp(0xffffffffffffffff)
r27 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r27, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r28=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r28, 0x0)
r29 = getegid()
r30 = getegid()
setregid(r29, r30)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r31=>0xffffffffffffffff, <r32=>0xffffffffffffffff})
r33 = fcntl$dupfd(r32, 0x0, r31)
ioctl$PERF_EVENT_IOC_ENABLE(r33, 0x8912, 0x400200)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000004680)={<r34=>0xffffffffffffffff, r33, 0x0, 0xc, &(0x7f0000004640)='vmnet0-em0{\x00', 0xffffffffffffffff}, 0x30)
r35 = geteuid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r36=>0xffffffffffffffff, <r37=>0xffffffffffffffff})
fcntl$dupfd(r37, 0x0, r36)
getsockopt$sock_cred(r37, 0x1, 0x11, &(0x7f00000046c0)={0x0, 0x0, <r38=>0x0}, &(0x7f0000004700)=0xc)
r39 = getpid()
sched_setattr(r39, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x3}, 0x0)
statx(0xffffffffffffffff, &(0x7f0000004740)='./file0\x00', 0x2000, 0x40, &(0x7f0000004780)={0x0, 0x0, 0x0, 0x0, <r40=>0x0})
r41 = getegid()
r42 = getegid()
setregid(r41, r42)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r43=>0xffffffffffffffff, <r44=>0xffffffffffffffff})
r45 = fcntl$dupfd(r44, 0x0, r43)
ioctl$PERF_EVENT_IOC_ENABLE(r45, 0x8912, 0x400200)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000048c0)={0xffffffffffffffff, <r46=>r45, 0x0, 0x1, &(0x7f0000004880)='\x00'}, 0x30)
r47 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r48 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r48, 0x2)
flock(r47, 0x1)
dup2(r47, r48)
r49 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r50 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r51 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r50, 0x2)
flock(r51, 0x2)
flock(r49, 0x1)
r52 = dup2(r49, r51)
dup3(r52, r50, 0x0)
r53 = inotify_init()
r54 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000004900)='ns/time\x00')
r55 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000004940)='/selinux/context\x00', 0x2, 0x0)
r56 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r57 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r58 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r57, 0x2)
flock(r58, 0x2)
flock(r56, 0x1)
r59 = dup2(r56, r58)
dup3(r59, r57, 0x0)
r60 = dup3(r57, 0xffffffffffffffff, 0x80000)
r61 = getpid()
fstat(0xffffffffffffffff, &(0x7f0000004980)={0x0, 0x0, 0x0, 0x0, <r62=>0x0})
r63 = getegid()
r64 = getegid()
setregid(r63, r64)
stat(&(0x7f0000004c40)='./file0\x00', &(0x7f0000004c80)={0x0, 0x0, 0x0, 0x0, <r65=>0x0})
r66 = getegid()
r67 = getegid()
setregid(r66, r67)
r68 = eventfd2(0xfffffffc, 0x1)
r69 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r70 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r70, 0x2)
flock(r69, 0x1)
dup2(r69, r70)
r71 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004d00)='/proc/diskstats\x00', 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f0000004d80)=[{&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000380)="f3a816765ab23580963d838b9abf85602376dfe6f54a14da098920b72ccbec0aa1b8510ee64fb3da3c718ffef3cfa37f4551bfd4ba3b345b16d999f689ce77c2a8da20c3685f5ff06e7297de64696387a88fd1e709851b699e27052ece2ff7d946763555b092d06a9c13a5996bc3f8412658637dbe10230762e9ed6349a4a34b7f3912a8960b9acf9a37125e20b3122ce2c3ac478c1731b39d4df79ae3e5310120b7bafa1bbacb03e268385f1d3620ffbf6833fd091addeda030c28b48", 0xbd}, {&(0x7f0000000000)="6bbc0da5b5038f98dbfa4e898d94e15b5ea1016a6988c1f0059ea3f917cf0d3c2d1a1b6f5d5d1f0fa641fa70ae8b009b576f56375bb9b7a803f4edcf", 0x3c}], 0x2, &(0x7f0000000200)=[@rights={{0x14, 0x1, 0x1, [r6]}}], 0x18, 0x40810}, {&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000440)="64e5f446eac5bce43c0342e9fec48b217d2d11c3408b9cf192a87332a65b47ac29396c6b2cfedccd86692bd4b7951fad8c5f4fa1e4d3f6240cf1ee58769c43083b0adbccf52604423ab335aa84b61029a97caae57484a55a31692b", 0x5b}, {&(0x7f00000004c0)="d029d4451056ab9dcd1e3c306147a3aad183f2e43888235e959796305572d9c608b84df55588bb4934fd02e8e79f05a39795cc10099a2cc96e9d0f2f3fc3fe79e472d114b305a054d418765c27fc49983eb70cc46aa577ade0eee2fba79bab3941b0b7957a89", 0x66}, {&(0x7f0000000540)="fafb5e110fb9e8bfc5e62d79716cb676d7a59fbc2fdaa9d773ad0728c1186a735661f79097ca6f099f3289b2c71504b8620adc8bf4dd0d0e6983f406f359ad22e7e7841e3407284dfcf3030811441525bfe4dd95c341b8cab895458ac7c1cb9d", 0x60}], 0x3, &(0x7f00000006c0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r8, r13, r14, r15, r16, r18, 0xffffffffffffffff, r20]}}, @rights={{0x20, 0x1, 0x1, [r21, r22, r23, r24]}}], 0x58, 0x44000}, {&(0x7f0000000740)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000002880)=[{&(0x7f00000007c0)="08fb5ded31505181bafa942f04192bbf7026935a3b565ebc15f55e", 0x1b}, {&(0x7f0000000800)="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", 0x1000}, {&(0x7f0000001800)="04fb1191c9105e6f1d06804eceb349f14fe7f06c97d2de54534f6f7cf99251729e3fe1a1bb2bcf99a77dad44f5dce475fa64ff8cbfbf1ceaed0b508cb2afd9abd26a6cc640f66606af401adba87b456528aa6d9e8464d73a90258facb4f8caa18ab60287df60d3af5e51d5e89a5c47fdf8f569741cb69d9178cdfa459e09f0f239c1ce2937bf1f220ed6400624c399bfb1a9153a754dcfab692b1161c5f4486d99c854b57751d529edb1af7d789b3a151a6b7433ce5f7d9e1a1d4bfdd1fc2b627f6ae072ab5cf00b9e3dee8b7abec611a5ca42a9e90c301bef0b660224644acc5d398d16beb336e34f9ea59d622e0a936ae3ec1b891c9952c2e69a8a09cca46836eae908ac2096530083a13cef058ff3eb72db1cfa10ae4f8ec0f33c0f1d99fc9c643f1067404e0b7ba5d818379b7aabd4c8d78d4ba1c0027981c126e6306fdd243fc3a5b77efff9a5e32872a4eba2e2e282bf464924079a77cbcf07ee5840796b766bb0858dbe55a5e42639918862f0cd501a6084d23b8cd829bb0e3f420d3715c8c283633c2f9fa3f8277f97535e425763114d99280e79bde4c6f52d97440a9a2f03d14ff4a956366d3be6fe8990006a9641944434e4b10305f657b0ec8ee76b7af12105e0fe9344bb824b700bb151e496e8af66ed81178c99a04c0d345a7ab2bfcb3b8a29c5b58cf15ce8b3f136b0ea195a54094bc3e15db48b73e097114e0ac48822b3723d5243d3fa129091d8f1dce35d7af19cd0ebe80d1a3937009425313754d35d1f0be2c8b9402f70043a2b1dcc1ee39de3b90295084874a1958c99b85dc5e2aa0d41130e1b828bf96b0b1e2fa0c64abcca4c02c72c0ad357b1e2a7ddf3138857a89324a0f71a9dba38498f605be3028263e112a4156020cbe2fb0030aff2d58b536be309856eb1eb24b7089b145582437f261caaf385d92e71fe30acc3295244002ebdb9d8bf6f7172fd6db408cd8836272e397cc519efdec92a1bb66c1e20f417e44202d9ee90b3f7ea86ddd5ee0dd8a37177603e01215560feea13b3c01f6e850f8feecda0c410a6f40b23c8f940885ad42ee09d5321dcfb5ecf793eced1a6de75b0920c31040e1aac2bba7ef856823110576f8fd1cc0fbbf3575bbd5509d6e1a76f28d69895f7fd123aef73e03ddf8e3afaed2fbc6494bad19765abe2dc96d4c709a13aa5aaa3ac28f67da5784fff436004f9a9a58c579ed4420919a8736b531e4d866869fad8e7a5cd1ab90f0e9805f821e5943429ba5435e5f3a06c4b43d06f5cb77d2d98bb468dd0c9073c3e774c56e464cbab55e15a01db475eba0d004279cc00d26629c5d153e1b26b0a72764b9aa68989dfaec7b1eb68e420b85215f47cd41da2ffab7840baf76bd0cca2f330a3bc6cbde82dd3c12eff4f9f59524a0742146f87bd9874b3a3554e240059487dfecd74b5c3cd5c55b18e3a2699493531b10a9c1c8351aa6dfcc966bbd313068a9078b58964e1f19d0218a6aba0fe3681c45513f2db42d7c00cd8ee446dbbf658f93409c923a5ca5278c5f9bbae6b66a543c6eb49186f56cb6bbbb1c0ffec275ab524bd2dad8541b4fa32bb05c82cc13c96a3d7f4bb361d2f8fb0266793990f3c3e065aa1a1a0fb6d0cd6056e8c6d2da4e7c0db25c4a42df57f53b211840a2ffdd20464fff1cf2d47df462d8eeae74bb85f6500e757a5c0ed78317c0da976d74d4541f90ba6bddba77831d4c5f4611b09703b9da3279ae711404cc4c7233bb6f60621ea7ec3ca8d7341eaa65ea658f65e13ad41da6fd3518ac9ca13a5219cd27123ec08f561ec0a73e350197776445a763bb8a5332434405ac2659708afcf71646b2dd0b60b621bd488b23585dbc82aeacd9252a31a18d9db23dfed94b978a1a8f82493151330a3d5ab208bae64dc4106e8e701a98e344cbe5d9b8df3fb36c63bd424643f6bf56bb59be5fa8092a5cb9d0a4831ef32bca0eee0b5b1b35c4b5dd1940533a9c0cbf11087eb6d7b70697bb7ac67ddf336999e0ea7fb49e6ab6cfb689ed5f0978a585ffe8de5fe95ee1adef606743f0aa9957b563e5ceca5dde92aacbd590ea573af439430824a248015caf69accaa62067ea5807592eae4d38d66132b55cfd1cce2ee1cf734ed3013660b2553bd9e17167e111b430af2e29c1ea54d437879ed2f502d53661028cdb222df4c3d24bf6e1f26bd5d5495bc23eaed90f41cc54285e1ece52cc2a6854f5bc4c4ed3889d0cf6184a3d5ccf4830228cef8cea73a503ad1edd907db737e47e7037fe3bc68ac51ad87e3472bfa448c08ac5940d35c9dc577ea89fd4d98c2273c316877467040e8911562677e02a0ce9398305b16c0d195d02359a207866051b192cc2226a7f80eec988cfee8752fda3766c274ecb530009900eb17d3a1b6f85112113e2f8a1f0807e024caba3ea5fd811675941bc4a1ec90eb4a7588f962b5d19e26c050944ec9db90dfd34556e9ddbe905208fdf56d4b0301ecb1577a00775101314ed4077b9476fad76e6fa946713b4263de2ab8bc90e644c6f0627199dcc9e8d705b24360d093f03ea684e31ed2448a6f258d362f652cfbce368f295bb18505f70030ba696920c9fe2679876ea88a11bbca0f2207939aeef8e5c073522a5a1f2d0c7ce914bf0d2278a3d2ef19a0e3b974a3d0c55e0d3db8fac7974571bbd1622395f8798fc2f9b7444c63e4a172f7ad95d4a417264c4aaceaea1ab3877c96be83fdee6863ebaeaaff7d82f51b1aca533bc547babd0b3e8f6e381e742493b7786caa5cee5ebe34e6bf49b36195b22f174de66293c98afd7296bfb0b5bf37a24db37fdc4cb3d4a931d92b2b3aadbe002f70bac6833e0f95cda166beb3d259473948fe6fdae8a4e5a20f93ada160ace44c69d024c49e06ecd5f864546d3f358c19396a5269c26625619a044d4e1676c6f494945fc0e9d380d7856f28cf089fe70e8109f1379935e4d17c43c87a0d2f3eec192355ff8c354c0ee5f55b66b7810f96370e88ad3a1e11ab0a3bf0b255ef48006c7185f5d744103b75dfb4fabdccc2c205b2c790337d34fb164f5c54695ba86157405b3bfe71aedfe407f3e834fc36bb9bce5d74e787d0ee82b6de9eb5af4a8f8c2a383fa334d888b2daf1013c021d4936f82ef30c6a9222d6993263002d4010b84006fab3d5a9bee30de27688d1e3988e9456a37b5ba05fda14c1508352d0d2a9ca3fade284f703d3e0b18b8c5e50cd519762bf912aa721cb8adcee8e0ac009ae35b39fda81a5d0b9e3356399b2bef68b985b43cda6e711a0b2a3f96ac14b01ae542ef456535170d723feaf03e815ecb5e429ad8ac5645faacac511adc63039177efe5e839c37d082d3bec9f15e30703aed2ad194022f237d559fa1d8f2c3727461c7453d2162d89c6cac898f1fd71f051fb5e5c66a354fe2fac2d3cd015632e893e9f6f55f780231a578b805ee61a06187fac4a41f3aad055d8e6291bf0ef285aaf065078176c8d3422931c810cf789c09134cffb057512b84c90aa11fbc92ec06bd8c0049238de96edea31ed18f63a6b1b996bcad8ded0b46f183e8807f796c32ab7cefc6078a4af5c749cc1a1153d09732a399912ef68156d5cca656b18c9298521fcad0ba1559e9fe018245832db40b23125e0f67641a6c45ca16c8c90cdcee2c25cdca197dd0506762310d0eff818aa1e2c8ff842b9b025dab6d041785a67c6867bd209206c6697d986bf40079378658e702683e466430741f75d6ab9a405eb2c9d780d82888d1c2ded6650cfdddc7cb89ab6383fcdde9bbc30055146cb364e09eb94641babe0ac9ca73b410d83bd9ca822cda30f446fa1f85e844da7bc3b78787faf02d20a360c446e3a05545000d582b84192d8004c4f57f2010103bea22feea910feccd30df7f86d664e2c144b496f00a344539dc46c347ffc733e7a301ecb8076b8c71f5fe2f267f1f3b1a47c9a79204bfb58a4129937df817aa9e7e08d6d5d87219e1d1725711cfc3a0e884c18c5e8a5df391af8b4dfe2ec2563c6dba05d7e807cd4b71fce2ce9cfa6158a13291a7806e2af39191a1ebb501e0b7c9c0388467c003580b4c8ee90abed1691d093bfa9264415e90a3570ba22bfeafaeeb263369a839f72a9a940dd234cc36339ca27f6fbe9178da2bcb2d9f2267ba510cbb21dcfdd35a20db99beab1541ca51dd126b641da6ec84841c7790a3ee27563a384e1f63abb3c805c311e419b51569ed891b8a2914ab7542029c39a713c9a7c853954ce6f1caedb14d859ff830165b9f07c555c65fcec7f2b34c882d96cb552dab8c50823777de55ffc9366167946e9ec591d7421891cf8361c0e58d11c0c5382faf147b8789cd6b5a5c8ec89047a79155d5862fc344659b7df9318b558cef414d8ca8adeadd008e2f6bd0bd25fced2750c28476f4d992637fca4e1b73cd8b4caf806e87f875e959db6e05c654b04ffb64d11596b784aee1193440bc4a64016f2806ca4c7a9a488ea4da512558b3bad2fd8443d00c53647065aad69c40a8255fc1704a883c62c8428dfc3aae21e845f2ee842161286f5d7d8706c3c39ae847b944cf8bf7246c56021c886c911d26aeaf213bb75daa0fe33c2538e790b3f6741bb6619c62529c7d3821d90246a4f0917351fef8cfe3cfb4a8744ddab464e47b3b3ec00c96811ed991bd26019906d2a420b0d76781777e71fedae70e10dc2b4cf625c0820563bbf293ca44603ad311ce1d63b3c842fb8c4dc3eb7b6c9f037a69a57ce7e573fdf324e421545e144d9a41853257c1ede6c724c3d62f3303a5c9fedadf582d11e7ead7c289ffe98936ba9732dfb44023123a9e7cd7d385b064d2b925d13c432e7788f705f2e9f8e0a4ce258dcdb263bede2a26958dd29ca761c66dc0a9e68b111c7e50463e01a438f4e1dbb60741de757ccdf4692d42fd1b65eaa97e76554424b934bcec6791c5942cb7f183b3d734cc55b40fad0ebeb36b40cb11d5e38ae3f055d4aa774af76db4c7e692169b251f2eda2cc84866c1fc6900f6fc4d942efccc2a03aa4d6720631b7fb5c18da6a2deb28305a2f6084ec9efc15d0cdd6ecf3a12343f833410bf00c3264518d511afe997b1d9fef53003ec74047bd921b3af9aba0ce93d9b488a739db55f19706bd2ad4442c5e6d731aa82f5dfa2c8ec1282daf964c51c238c0c909b981367c46cb79a46a2b76e38826e8dfa4afcf2c6e1f42fc8acdfa5f8d9659b16f70c640ffb586c0672dc2375fe24744e6d9310721a75604e9bdeb855015d90c1a44eedbd822e5c80eaafe2d0118c1d1805802e8a3775c9d7ea6527cfd7330952ccb4e60d4f8cebfba96715d521a74e10f82d2719897e24af679e43b3885fe30c1efb9e0f59265bf044b9450f222193ae5cec465386e6ae5c90a36f5645a16f1d5146e9ebd1b590243b888132542ae3fd04c66e065d3199021fd908bf7e75dfe616700c2e18252de422187ca86df84fb4b99a61cf36ad123c342e111fce3249916495ee2b20ac7f7e89c091b1e9223fd881319a583177692e621c56a3fd324488c784c378c379035277d6c4f70a9a1d6dc6e4098d84efbcfe02954a387de3a9610c191a5679aa362b54faa2907346059f9061b2e1f6e1cb69fa97c145ca5c39c1e9ae1942cadc624616bfa18e853561358ba229cd15b03f436ac2716bcffb1654d39cb30e3e7799db1189e2fea35de46e2585dab84a93ba6383a06d08be1a87f3de1dbbf4cced3c02d98d33d086240744d28bbb48f5e537776f94008310c759889037a34d94655b2a29850d9d9842bcd408fac4604116da4959f774e8c419", 0x1000}, {&(0x7f0000002800)}, {&(0x7f0000002840)="dd92fdefb72e87177d32e020b22745f0b8fc1682b9cc90c69fdbac169b4cb1fcf556", 0x22}], 0x5, 0x0, 0x0, 0x4000}, {&(0x7f0000002900)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000002e80)=[{&(0x7f0000002980)="41fa1029ec3405125ff1c72205e6d4613148fd8c3892fa0bd4b70b5e43b3dfba1b3d6e866ed7008a7a3c6a58addde63bcd06146543149195ea1be7e3bbffaad11db3a3260e2ee06ef2f04c521864b19a2cc4a5d6c70c32e32e9a15d0f949f2679684b0f7e2fbd8fbf4da5df66050c66395026d3f46bbb782bb643f74dc7a8a94d610b69a2d3fa7156b2c3368f486ef90d6692d3bd8e092e3342e16e6ab93c0493e7651662227516512102edf5e08bec2dac35d3c468f5054e5d1a2958889ee", 0xbf}, {&(0x7f0000002a40)="2d1183b06ecd96901229b73ddc0fd3a00141658dfae20f76613ffe1b50379f1714ec5b3cfedbb2e833890903e19f38e3a3b26d90d852bc184fe8ec91714db439ea41b43103676222b54a4285fc491c72941348c53dc491d4d0ae3876f202795775e2ae500ea378cc06bf18de14aff1c94faaba9ce82059ac86fbbd43cc125b798592ee03a5437e0d5abf65ec990203941dd2892a85846c2534d5199c272a5da6c8f84d9dd02aeec9b88397de527feb8541aef978451179d883be037a6b1cdd3f389993405d48f60169df043d2c6c8ab7db2095c401ecdfc865f451a3a0315bb3cc745198822068698f4c714d", 0xec}, {&(0x7f0000002b40)="efb695d1e498bd340e2682b2fbbbcc00525c394ed0724ff842b510ba0e63a652a7a69095231d768cb0180508d4f9d1dbc0dd041bf2c1cb69337da61289d7982d854f8c5bf03d82ec7941bb1940a62e349d3fcedcf29e75ebfed524f0e755", 0x5e}, {&(0x7f0000002bc0)="13349aaba6ec2b7be1c40038cf1f27af7083cb774c5442c4b5f16160bbe3bb766ef79b7ae1d54353791d5a648f11a447a53c13b71360012448d0831e264f6d78f22f1423119e15cb4b194da8abdafd14be09078e3de57533473abbedfe59725b32008a48a8a4e2f927fb3677986dbc5a0caf85fa03c04ee330319beab53923f1a47bad25d64863dde525deaf0f491f2eddea4f7533f4dc2c1a7e59033dccf601899480847bb0bb7e3a899564b553120fe69990aadf8c98920487d3785f50ce6e92a2f406522db337b691", 0xca}, {&(0x7f0000002cc0)="39b70942d4d03c3989a3bf190c8cf765cf3b09fcb5e5add6f5f9801a293ad2d2160f7feb71b3ad5550921a59a0c3d70281f292da865d2d4783468d945daedfef69bdbcdb96e509793d7c3ea59902dd47a2bf28f0d511c55a5ccba303b30db1985bfacf62c9349a5593bd76dd82203b03c7f548fa12cdeb09cf79510d3461f46cda8858baa661178a73c1ca158e9e4af1c84d912807ce4453cfba46e280b0aef078b1", 0xa2}, {&(0x7f0000002d80)="5199eb2171e9b93fd94b2689360c05c64b6e1b5d6dd4dfed7567fc11b3a984937f52685456be9d4a1178b212de3d016614d4f9a0191002341b802d9b73bef9d73150af69797301d167e8e3a1d953bde012d6bb59651c5008023e953c90070725e2524e482f1d16bbceb7b12df19329d798d129195208b46baf2d28c182077d4e4d67cd3f5f89cc8b76f7603105c614bc564c6a8a5eb99d0c9c7fa403d34ecb2856d07c3fc6fb9e4f6b11864111644c71ba027f05ed9444ad6efbae23639d2d0bc8d290c390494a163ce44ac5e0495cbeb9711c420dff32f6c3c76a38643416d705", 0xe1}], 0x6, &(0x7f00000030c0)=[@rights={{0x14, 0x1, 0x1, [r25]}}, @cred={{0x1c, 0x1, 0x2, {r26, r28, r29}}}], 0x38, 0x88800}, {&(0x7f0000003100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004580)=[{&(0x7f0000003180)="fe068792a703d2770be578d716081739b92827fa83d2595fff9b47f13d7e577649b0f47b88e4ee5ec8d82879f7f1e66614a7d93d3bd5b493411b8a6fd1c60a0987a3e370396da20f60cf8183a23e69cf1e97ef69336d45b1dd626fc56745bbb8086990b2c924d03783a8193e28e5982b5e9155b3d398bacd15e8491e6fd32d0086073e9a042322506b862dd339b759", 0x8f}, {&(0x7f0000003240)="648d10f650a515f4e02be5908f44c0", 0xf}, {&(0x7f0000003280)="dbcea0e4dec23b232f1902a0b9b6593ddb54f927ce909f29cfc8", 0x1a}, {&(0x7f00000032c0)="5ac231214817d26147c540a56ff04bfe0987ca47a820f61a9b2ba3b3ac83d623a2e7b9c450f8150c474ec3", 0x2b}, {&(0x7f0000003300)="d54f9e0f2c2842a8a098187c36dc6fc3da3bdcfeb018c4e9f626dec2a568c18e147c14cfbe600be1629a58ed5c237bd195c7f5f7b15176d1362ed9ea621357034f26e7298894a8a284d0884e", 0x4c}, {&(0x7f0000003380)="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", 0x1000}, {&(0x7f0000004380)="f91f1c82f84003904f0e8a2bc876556acdff8e115c3f5aa06b7bc87e5f8af45f9cb7955de3e98ee08ce3", 0x2a}, {&(0x7f00000043c0)="e59d88f240b291a5eab9d18d3123cac74a60b53b05f1f6ed6b5b062c52adc404edd5730d048d8d9dfb6d83bd9fd7305e533e670b50d36a040e54868ee2b5be59add083f3ac06739e6a31d2145e638c3fcf89aa63398359b0bcd166f570309f6c750410687813e8f2b1d3a767b1e957975f15dfb0c4416f815e355660ef7f311f4c5118dee6bee52cde5e14248b910052b6c43672c4895668a2fa6509", 0x9c}, {&(0x7f0000004480)="a5ca10e954408897c03f33949c96a438a3b531185a4e4ee6c69e60080003c1b45f3ad77dd72c83c8f75ce8771f3beaf02d2bd96de23b1bbb870fe057c6c0552fee8d436a1b697cc14a0bc59dd4907ce069a998bbbc6e1a75f6eaf441951b5eb84679294be13ef2a00429646cd0cf921f02356095d7b949d64c3ee50cda5ac748388764fc67495943ae30cfbc2417bf9f316f13d039cdc7258a2758e81d9f1d309e5e8c5cfe5c0e695d06df151bf42cfdd9b32c1a0877525eb93439e79481c05ac5c992c6", 0xc4}], 0x9, &(0x7f0000004a00)=[@cred={{0x1c, 0x1, 0x2, {r34, r35, r38}}}, @cred={{0x1c, 0x1, 0x2, {r39, r40, r41}}}, @rights={{0x30, 0x1, 0x1, [r46, r47, r50, r53, 0xffffffffffffffff, r54, r55, r60]}}, @cred={{0x1c, 0x1, 0x2, {r61, r62, r63}}}], 0x90, 0x20000000}, {&(0x7f0000004ac0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004c00)=[{&(0x7f0000004b40)="bad9db8f243706a1cc098e86de58ced504508cd35dff30040e44d1f981ec4029924747", 0x23}, {&(0x7f0000004b80)="e26d825258d70e9fe6d05ad0070ba4caa1f04c0bcb91f9d8b3d1f2d714544be5d8322d95d972656fa353f368f77591fd501f24b2cc20f48259bc92c44cfaecc0707547e17fb732e19e521414fb3321cf014bdafc", 0x54}], 0x2, &(0x7f0000004d40)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r65, r67}}}, @rights={{0x20, 0x1, 0x1, [r68, r69, 0xffffffffffffffff, r71]}}], 0x40, 0x4000000}], 0x6, 0x8000)
r72 = getpid()
sched_setattr(r72, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r73 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r73, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r73, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r73, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:30 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(0x0, 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

[  264.583204][T14347] binder: 14346:14347 ioctl 40046205 0 returned -22
[  264.640786][T14357] binder: 14346:14357 unknown command 1860363
[  264.647516][T14357] binder: 14346:14357 ioctl c0306201 200000c0 returned -22
13:50:30 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x0, 0x0, 0x0})

13:50:30 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:30 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(0x0, 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:30 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:30 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)

13:50:30 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:30 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:30 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(0x0, 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

[  264.839733][T14368] binder: 14366:14368 ioctl 40046205 0 returned -22
[  264.842251][T14372] binder: 14371:14372 ioctl 40046205 0 returned -22
13:50:31 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
dup3(0xffffffffffffffff, r2, 0x0)

13:50:31 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:31 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06941bed"], 0x1, 0x0, &(0x7f0000000140)="f4"})
utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={{0x0, 0x7530}})

13:50:31 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(0x0, 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:31 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(0x0, 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

[  265.424850][T14399] binder: 14398:14399 ioctl 40046205 0 returned -22
[  265.477677][T14403] binder: 14398:14403 unknown command -316959738
[  265.484170][T14403] binder: 14398:14403 ioctl c0306201 200000c0 returned -22
13:50:31 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x0, 0x0, 0x0})

13:50:31 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:31 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(0x0, 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:31 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="ca08ac65ecac7fb74588fb0362efa8e29d23aba142eb628f97b0e9e4611516a6c352763cbfecf355f55640913486863e497e2aba63ffc2796b5127cc4433b5a5637fe87613007de89bc93ce531be9ffcb59f2231ebddec7a1c7c8913a43f4c0a3d393cee6c970bf94c967796edbe8dffb4ea6a6ba5949b9745b5c4021d7309f8de492be985d2c4e1"], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  265.643535][T14384] debugfs: File '14371' in directory 'proc' already present!
[  265.661648][T14419] binder: 14418:14419 ioctl 40046205 0 returned -22
[  265.670658][T14421] binder: 14420:14421 ioctl 40046205 0 returned -22
13:50:31 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r1, 0x2)
flock(r2, 0x2)
flock(r0, 0x1)
r3 = dup2(r0, r2)
dup3(r3, r1, 0x0)

[  265.723740][T14425] binder: 14420:14425 unknown command 1705773258
[  265.730213][T14425] binder: 14420:14425 ioctl c0306201 200000c0 returned -22
13:50:31 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r1, 0x2)
flock(r2, 0x2)
flock(r0, 0x1)
r3 = dup2(r0, r2)
dup3(r3, r1, 0x0)

13:50:31 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r1, 0x2)
flock(r2, 0x2)
flock(r0, 0x1)
r3 = dup2(r0, r2)
dup3(r3, r1, 0x0)

13:50:32 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
dup3(0xffffffffffffffff, r2, 0x0)

13:50:32 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:32 executing program 1:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:32 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

[  266.225984][T14448] binder: 14398:14448 ioctl 40046205 0 returned -22
[  266.243837][T14453] binder: 14452:14453 ioctl 40046205 0 returned -22
[  266.296673][T14459] binder: 14452:14459 unknown command -2017743555
[  266.303415][T14459] binder: 14452:14459 ioctl c0306201 200000c0 returned -22
13:50:32 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:32 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x0, 0x0, &(0x7f0000000140)})

13:50:32 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(0x0, 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:32 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
getsockopt$sock_int(r1, 0x1, 0x13, &(0x7f0000000080), &(0x7f0000000180)=0x4)
r2 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:32 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

[  266.488540][T14472] binder: 14470:14472 ioctl 40046205 0 returned -22
[  266.496667][T14473] binder: 14469:14473 ioctl 40046205 0 returned -22
13:50:32 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:32 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:32 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:32 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:32 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:32 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r3, 0x2)
flock(r4, 0x2)
flock(r2, 0x1)
r5 = dup2(r2, r4)
dup3(r5, r3, 0x0)
r6 = accept$inet(r5, &(0x7f0000000240)={0x2, 0x0, @broadcast}, &(0x7f00000002c0)=0x10)
getsockopt$IP_VS_SO_GET_DAEMON(r6, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000380)=0x30)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\vL\x00\x00'], 0x1, 0x0, &(0x7f0000000140)="f4"})
r7 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r7, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x5d29c46df77e93ce}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40000)

13:50:32 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:33 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

[  267.044245][T14453] binder: 14452:14453 ioctl 40046205 0 returned -22
[  267.070843][T14508] binder: 14507:14508 ioctl 40046205 0 returned -22
[  267.173036][T14508] binder: 14507:14508 unknown command 19467
[  267.179376][T14508] binder: 14507:14508 ioctl c0306201 200000c0 returned -22
13:50:33 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x0, 0x0, &(0x7f0000000140)})

13:50:33 executing program 1:
r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
ioctl$LOOP_SET_CAPACITY(r0, 0x4c07)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:33 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x84800)
write$P9_RWSTAT(r0, &(0x7f0000000080)={0x7, 0x7f, 0x1}, 0x7)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r3 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000140)=0x8)
ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x0, 0x0, &(0x7f0000000140)})

13:50:33 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:33 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(0x0, 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:33 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(0x0, 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

[  267.289889][T14481] binder: 14469:14481 ioctl 40046205 0 returned -22
[  267.321344][T14529] binder: 14527:14529 ioctl 40046205 0 returned -22
[  267.322030][T14530] binder: 14528:14530 ioctl 40046205 0 returned -22
13:50:33 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(0x0, 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:33 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(0x0, 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:33 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:33 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:33 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

[  267.364485][T14538] binder: 14536:14538 ioctl 40046205 0 returned -22
13:50:33 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:34 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x0, 0x0, &(0x7f0000000140)})

13:50:34 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
getuid()
r2 = syz_open_pts(0xffffffffffffffff, 0x4000)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x9, 0x2, 0x1}, @fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x1, &(0x7f0000000080)=""/42, 0x2a, 0x1, 0x6}}, &(0x7f0000000200)={0x0, 0x20, 0x38}}, 0x75821e60c432e8f}], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:34 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b63000098440578b7cb7e09e1c6fc5097ae17bb165c5c6763fd648fe46e0d0b8cf0929273bc6d8a238c501eae9e6eb1c4cf438ceda3a9f01c0bc6d6f4e91e390ddbb6a8aafb81e5a9ce6c9eae996772126b5b80431248aea9fcf1b7e4f4d57841814f07129b1721ab6602f5331cf4aff35e5d98fc542b16"], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:34 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(0x0, 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:34 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:34 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(0xffffffffffffffff, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

[  268.120918][T14566] binder: 14527:14566 ioctl 40046205 0 returned -22
[  268.143853][T14569] binder: 14568:14569 ioctl 40046205 0 returned -22
[  268.150377][T14571] binder: 14570:14571 ioctl 40046205 0 returned -22
13:50:34 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

[  268.180310][T14576] binder: 14574:14576 ioctl 40046205 0 returned -22
13:50:34 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(0x0, 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:34 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(0xffffffffffffffff, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:34 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(0xffffffffffffffff, 0x2)
flock(r1, 0x1)
r3 = dup2(r1, 0xffffffffffffffff)
dup3(r3, r2, 0x0)

13:50:34 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(0x0, 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:34 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(0xffffffffffffffff, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:34 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(0x0, 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:34 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x0)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:34 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000001c0)={0x88, @rand_addr=0x1, 0x4e24, 0x0, 'wlc\x00', 0x21, 0x2f, 0x24}, 0x2c)
r5 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r5)
r6 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r6, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})

13:50:34 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x4, 0x1, 0x5, 0x7, 0x7c79, 0x0, 0x0, 0x4}, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00')
r3 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="4400001a10000308000000000000000000822fb1d64d7f6524729ac1f0a52c23b699e0e81ae5e4f5a918bcd337fae59ef7f44e463506000d6395a6998b8167319b4c519d44255586b0e93957bd44d992add7599c5d9da3cdaceddcfb6a2d6edc5a520478c09740d4063f2a54d686c2d0", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a8018000a80140007000000000000000000000000000000000008000a00", @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x0)
sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0xaf6e91f890b3ee04}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r2, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x98a}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x73cc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040040)
r7 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r7, 0x40046205, 0x0)
r8 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r9 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r9, 0x2)
flock(r8, 0x1)
dup2(r8, r9)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r8, 0xc0505405, &(0x7f0000000180)={{0xffffffffffffffff, 0x0, 0x8, 0x2, 0x80000000}, 0x4, 0x8, 0xffff})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})
r10 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/policy\x00', 0x0, 0x0)
ioctl$USBDEVFS_REAPURB(r10, 0x4008550c, &(0x7f0000000440))

13:50:34 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})
r2 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r3, 0x2)
flock(r4, 0x2)
flock(r2, 0x1)
r5 = dup2(r2, r4)
dup3(r5, r3, 0x0)
ioctl$EVIOCSABS20(r5, 0x401845e0, &(0x7f0000000000)={0x7f, 0x6d9, 0x40, 0x2, 0x3, 0x3})

13:50:34 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x0)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

[  268.995357][T14627] binder: 14626:14627 ioctl 40046205 0 returned -22
[  268.999775][T14625] binder: 14624:14625 ioctl 40046205 0 returned -22
13:50:35 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x0)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:35 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(0xffffffffffffffff, 0x2)
flock(r1, 0x1)
r3 = dup2(r1, 0xffffffffffffffff)
dup3(r3, r2, 0x0)

[  269.087217][T14623] binder: 14622:14623 ioctl 40046205 0 returned -22
13:50:35 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(0xffffffffffffffff, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:35 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(0xffffffffffffffff, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:35 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(0xffffffffffffffff, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:35 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x0)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:35 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(0x0, 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:35 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x0)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:35 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x0)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:35 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
socket$netlink(0x10, 0x3, 0x2)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r3, 0x2)
flock(r4, 0x2)
flock(r2, 0x1)
r5 = dup2(r2, r4)
dup3(r5, r3, 0x0)
write$P9_RRENAME(r5, &(0x7f0000000180)={0x7, 0x15, 0x1}, 0x7)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r5, 0x28, 0x0, &(0x7f0000000000)=0x5, 0x8)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b631e00"], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:35 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x3)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="8139"], 0x1, 0x0, &(0x7f0000000140)="f4"})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$dupfd(r3, 0x0, r2)
r4 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = dup(r5)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$sock_SIOCBRDELBR(r7, 0x89a1, &(0x7f0000000200)='caif0\x00')
getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x68040}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x8, 0x7, @empty}]}]}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0)
ptrace$peeksig(0x4209, r0, &(0x7f0000000180)={0x5, 0x1, 0x6}, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}])
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r9=>r8})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x47, r9})

13:50:35 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x0)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:35 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)="4b872d"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  269.836998][T14682] binder: 14681:14682 ioctl 40046205 0 returned -22
[  269.843593][T14684] binder: 14680:14684 ioctl 40046205 0 returned -22
[  269.870639][T14691] binder: 14690:14691 ioctl 40046205 0 returned -22
13:50:35 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(0xffffffffffffffff, 0x2)
flock(r1, 0x1)
r3 = dup2(r1, 0xffffffffffffffff)
dup3(r3, r2, 0x0)

13:50:35 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(0xffffffffffffffff, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

[  269.890698][T14692] binder: 14681:14692 unknown command 14721
[  269.896672][T14692] binder: 14681:14692 ioctl c0306201 200000c0 returned -22
[  269.949921][T14684] binder: 14680:14684 unknown command 1991435
[  269.960164][T14684] binder: 14680:14684 ioctl c0306201 200000c0 returned -22
13:50:35 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(0xffffffffffffffff, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:35 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b6317d2c0f5677ea42b956c149feee6cfcf7dca2f2c44487dc974c7e30253740a7950e6cfb5e4e44b513e2a852f3332c671d132781299d6764566b61f646550fbae4ba8c55698206cec494f82dfb538ab190750d823519355211797eca4a7ed2c813603cc4cf374518227ca4a6a621a3392d730ef61536029d8a2b720f10bc2247590cce31149c84a59d41836a0be01b0479b0a0292802e7430a436146fe655df6042a81ab67111e916f7d12d5b2929a7e81ef08ac336907d3d6c7f52e1c6ea407b943661bb91681b6a7b79a648ef2b2012"], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:36 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(0xffffffffffffffff, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

[  270.035304][T14711] binder: 14710:14711 ioctl 40046205 0 returned -22
[  270.087780][T14714] binder: 14710:14714 unknown command -770219253
[  270.094203][T14714] binder: 14710:14714 ioctl c0306201 200000c0 returned -22
13:50:36 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(0x0, 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:36 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x0)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:36 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0xc481, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00')
sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="84000000790a5307b76fccf0da9cff4febaa82d1602a5018a7b7d49221fd37578d38c943125cedbbf47a1f27308535e96ce9537e5152037d893ab05a3f8506f288daa2161c7998e914df5b437a7c91084146266b74ea91e033a2b48ab4a9474576d0cb7391857118aa3af6edbe8da94fcfee4fd6ff9bcb262fdb91bfdc256a321d5308dadb54c31147eed89c7fa9ec6bfebe1bef222e1ca9bf7424579f0b85f2548a096e69da3806e366d79c0e53da4c85d77c2f17b0b6a5e2bf7b2e9160ad2e97be5981de77b0fe9a506405af00a742f91838bb03d189dd22f667ef00b71a8e1f09f7d8ba5497d55471c2354f3b68f654a7", @ANYRES16=r1, @ANYBLOB="000326bd7000ffdbdf251100000006001a01040000000500c200040000000600b500a70000000c00430000000100000008003c008100050001000900000005000100090000000500010006000000050001002600000005000200010000000500020000000000050001000600000006001000170400000500e40001000000"], 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x40)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r3 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000000)={0x3, 0x7, 0x3147, 0x101, 0xffffb72d})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0b6300007bfe5425123b977a2f68fbf344ae3f21e76f70fb10cabc5ddc5fda118c61c93fbb5aa85f054f10af5f8d4be625a358fcab8e81c1d6fe99885d59b9f8aac5a3dc167d908c70c5dee5115f6ea72429aff9743181b67f9b5580ea2bab44468f71e9386fb0dbdb314f5f3189d381aacb5c7effbb767883c886aa251fec6f0b548aab4cfc1af7edeb6c6e7b7245dbae99fcefcb6a6362be19463c9a732905"], 0x1, 0x0, &(0x7f0000000140)="f4"})
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000002c0))

13:50:36 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x0)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:36 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  270.649112][T14728] binder: 14727:14728 ioctl 40046205 0 returned -22
13:50:36 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x0)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:36 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(0xffffffffffffffff, 0x2)
flock(r2, 0x2)
flock(r1, 0x1)
r3 = dup2(r1, r2)
dup3(r3, 0xffffffffffffffff, 0x0)

[  270.702643][T14737] binder: 14727:14737 ioctl 801c581f 20000000 returned -22
13:50:36 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(0xffffffffffffffff, r3)
dup3(r4, r2, 0x0)

13:50:36 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(0xffffffffffffffff, 0x2)
flock(r2, 0x2)
flock(r1, 0x1)
r3 = dup2(r1, r2)
dup3(r3, 0xffffffffffffffff, 0x0)

13:50:36 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
chmod(&(0x7f0000000000)='./file0\x00', 0xc)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:36 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(0xffffffffffffffff, 0x2)
flock(r2, 0x2)
flock(r1, 0x1)
r3 = dup2(r1, r2)
dup3(r3, 0xffffffffffffffff, 0x0)

[  270.847556][T14758] binder: 14757:14758 ioctl 40046205 0 returned -22
13:50:36 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r1, 0x2)
flock(r2, 0x2)
flock(0xffffffffffffffff, 0x1)
r3 = dup2(0xffffffffffffffff, r2)
dup3(r3, r1, 0x0)

13:50:37 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(0xffffffffffffffff, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:37 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r1, 0x2)
flock(r2, 0x2)
flock(0xffffffffffffffff, 0x1)
r3 = dup2(0xffffffffffffffff, r2)
dup3(r3, r1, 0x0)

13:50:37 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r1, 0x2)
flock(r2, 0x2)
flock(0xffffffffffffffff, 0x1)
r3 = dup2(0xffffffffffffffff, r2)
dup3(r3, r1, 0x0)

13:50:37 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
r0 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r1, 0x2)
flock(r2, 0x2)
flock(r0, 0x1)
r3 = dup2(r0, r2)
dup3(r3, r1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={<r4=>0x0}, &(0x7f0000000080)=0xc)
sched_setattr(r4, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x497, 0x0, 0xfffffffd}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
fcntl$dupfd(r6, 0x0, r5)
getsockopt$IP_VS_SO_GET_SERVICES(r6, 0x0, 0x482, &(0x7f0000000180)=""/124, &(0x7f0000000200)=0x7c)
r7 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r7, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:37 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000340)="4b872d39937b0c4b02ce5278aeb574be5701d7eadeb966ddc74a070e0fb339c0b2538a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})
clone(0x0, &(0x7f0000000100), 0x0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002080)=[{0x0}], 0x1}}], 0x2, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x808, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100), 0x8}, 0x1400, 0x3, 0x0, 0x9, 0x1, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
sched_setattr(0x0, &(0x7f00000002c0)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(0x0, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

13:50:37 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(0xffffffffffffffff, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:37 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r1, 0x2)
flock(r2, 0x2)
flock(r0, 0x1)
r3 = dup2(r0, r2)
dup3(r3, r1, 0x0)

[  271.449868][T14728] binder: 14727:14728 ioctl 40046205 0 returned -22
[  271.449883][T14737] binder: 14727:14737 ioctl 801c581f 20000000 returned -22
13:50:37 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(0xffffffffffffffff, r3)
dup3(r4, r2, 0x0)

13:50:37 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(0xffffffffffffffff, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

[  271.573567][T14780] binder: 14779:14780 ioctl 40046205 0 returned -22
13:50:37 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r1, 0x2)
flock(r2, 0x2)
flock(r0, 0x1)
r3 = dup2(r0, r2)
dup3(r3, r1, 0x0)

13:50:37 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="e0185d6e0ff1c40e894c1c95121a3a"], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:37 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x0)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

[  271.666498][T14810] binder: 14809:14810 ioctl 40046205 0 returned -22
13:50:37 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x0)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:37 executing program 5 (fault-call:5 fault-nth:0):
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:37 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xa00540, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r1, 0x2)
flock(r2, 0x2)
flock(r0, 0x1)
r3 = dup2(r0, r2)
dup3(r3, r1, 0x0)

[  271.719699][T14819] binder: 14809:14819 unknown command 1851594976
[  271.726099][T14819] binder: 14809:14819 ioctl c0306201 200000c0 returned -22
[  271.759683][T14828] binder: 14827:14828 ioctl 40046205 0 returned -22
[  271.812807][T14835] FAULT_INJECTION: forcing a failure.
[  271.812807][T14835] name failslab, interval 1, probability 0, space 0, times 0
[  271.826012][T14835] CPU: 1 PID: 14835 Comm: syz-executor.5 Not tainted 5.4.15-syzkaller-01128-gb2b96d09ef40 #0
[  271.836682][T14835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  271.850165][T14835] Call Trace:
[  271.856335][T14835]  dump_stack+0x1b0/0x228
[  271.861352][T14835]  ? devkmsg_release+0x127/0x127
[  271.866318][T14835]  ? avc_has_perm+0x15f/0x260
[  271.871047][T14835]  ? show_regs_print_info+0x18/0x18
[  271.876249][T14835]  should_fail+0x6fb/0x860
[  271.880774][T14835]  ? setup_fault_attr+0x2b0/0x2b0
[  271.885949][T14835]  __should_failslab+0x11a/0x160
[  271.890969][T14835]  ? binder_get_thread+0x25d/0x930
[  271.896179][T14835]  should_failslab+0x9/0x20
[  271.900816][T14835]  kmem_cache_alloc_trace+0x3a/0x2f0
[  271.906331][T14835]  binder_get_thread+0x25d/0x930
[  271.911341][T14835]  binder_ioctl+0x390/0x7ef0
[  271.916463][T14835]  ? __rcu_read_lock+0x50/0x50
[  271.921395][T14835]  ? unwind_next_frame+0x415/0x870
[  271.926500][T14835]  ? stack_trace_save+0x1e0/0x1e0
[  271.931544][T14835]  ? stack_trace_save+0x1e0/0x1e0
[  271.936563][T14835]  ? __kernel_text_address+0x9a/0x110
[  271.942041][T14835]  ? unwind_get_return_address+0x4c/0x90
[  271.947958][T14835]  ? arch_stack_walk+0x98/0xe0
[  271.952984][T14835]  ? binder_poll+0x540/0x540
[  271.958044][T14835]  ? __rcu_read_lock+0x50/0x50
[  271.963023][T14835]  ? avc_has_extended_perms+0xb27/0x10d0
[  271.968725][T14835]  ? __kasan_slab_free+0x1e2/0x220
[  271.973823][T14835]  ? __rcu_read_lock+0x50/0x50
[  271.979022][T14835]  ? avc_ss_reset+0x3e0/0x3e0
[  271.983882][T14835]  ? entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  271.990787][T14835]  ? get_pid_task+0x8d/0xa0
[  271.995624][T14835]  ? proc_fail_nth_write+0x166/0x200
[  272.000938][T14835]  ? proc_fail_nth_read+0x1c0/0x1c0
[  272.006137][T14835]  ? __kasan_check_write+0x14/0x20
[  272.011682][T14835]  ? expand_files+0xd1/0x970
[  272.016657][T14835]  ? memset+0x31/0x40
[  272.020890][T14835]  ? fsnotify+0x1390/0x1450
[  272.025415][T14835]  ? __kernel_write+0x350/0x350
[  272.030349][T14835]  ? binder_poll+0x540/0x540
[  272.034937][T14835]  do_vfs_ioctl+0x747/0x1700
[  272.039961][T14835]  ? selinux_file_ioctl+0x6e6/0x930
[  272.045157][T14835]  ? ioctl_preallocate+0x240/0x240
[  272.050511][T14835]  ? __fget+0x37c/0x3c0
[  272.054976][T14835]  ? fget_many+0x30/0x30
[  272.059329][T14835]  ? security_file_ioctl+0xae/0xd0
[  272.064543][T14835]  __x64_sys_ioctl+0xe3/0x120
[  272.069206][T14835]  do_syscall_64+0xc0/0x100
[  272.073706][T14835]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  272.079616][T14835] RIP: 0033:0x45b349
[  272.083670][T14835] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  272.104025][T14835] RSP: 002b:00007f5610307c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  272.112553][T14835] RAX: ffffffffffffffda RBX: 00007f56103086d4 RCX: 000000000045b349
[  272.120907][T14835] RDX: 00000000200000c0 RSI: 00000000c0306201 RDI: 0000000000000003
[  272.128892][T14835] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000
[  272.137026][T14835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  272.145253][T14835] R13: 000000000000020d R14: 00000000004c2e1b R15: 0000000000000000
[  272.153999][T14835] binder: 14827:14835 ioctl c0306201 200000c0 returned -12
13:50:38 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x0)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:38 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:38 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"})

13:50:38 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(0xffffffffffffffff, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

[  272.296681][T14844] binder: 14843:14844 ioctl 40046205 0 returned -22
13:50:38 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(0xffffffffffffffff, r3)
dup3(r4, r2, 0x0)

13:50:38 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(0xffffffffffffffff, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:38 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r1, 0x2)
flock(r2, 0x2)
flock(r0, 0x1)
r3 = dup2(r0, r2)
dup3(r3, r1, 0x0)

13:50:38 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(0xffffffffffffffff, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:38 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
r2 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r3, 0x2)
flock(r2, 0x1)
dup2(r2, r3)
ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f0000000180)=""/246)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:38 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r1, 0x2)
flock(r2, 0x2)
flock(r0, 0x1)
r3 = dup2(r0, r2)
dup3(r3, r1, 0x0)

[  272.463729][T14863] binder: 14809:14863 unknown command 1851594976
[  272.470527][T14863] binder: 14809:14863 ioctl c0306201 200000c0 returned -22
[  272.497054][T14871] binder: 14869:14871 ioctl 40046205 0 returned -22
13:50:38 executing program 5 (fault-call:5 fault-nth:1):
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:38 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x0)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:38 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x0)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:38 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r1, 0x2)
flock(r2, 0x2)
flock(r0, 0x1)
r3 = dup2(r0, r2)
dup3(r3, r1, 0x0)

[  272.580093][T14885] binder: 14883:14885 ioctl 40046205 0 returned -22
13:50:39 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x0)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:39 executing program 4:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:39 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f00000002c0)={{0xa, 0x4e20, 0x3, @mcast1, 0xfffffeff}, {0xa, 0x4e24, 0x7f, @remote, 0x331b}, 0x3ec, [0x1, 0x3ff, 0x1f, 0x40, 0x7f, 0xc8, 0x7, 0x6]}, 0x5c)
r2 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x204000, 0x0)
getsockopt$IP_SET_OP_GET_BYINDEX(r3, 0x1, 0x53, &(0x7f00000001c0)={0x7, 0x7, 0x2}, &(0x7f0000000200)=0x28)
r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000080)={0x2})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:39 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(0xffffffffffffffff, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:39 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, 0xffffffffffffffff)
dup3(r4, r2, 0x0)

13:50:39 executing program 4:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

[  273.239339][T14914] binder: 14912:14914 ioctl 40046205 0 returned -22
13:50:39 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(0xffffffffffffffff, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:39 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x6fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000240)=r0)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
r5 = dup3(r4, r2, 0x0)
openat$cgroup_subtree(r2, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000200)={[{0x2b, 'rdma'}, {0x2b, 'io'}, {0x2d, 'pids'}, {0x2b, 'io'}]}, 0x14)
r6 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x1a0280, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r5)
r7 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r7, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="ed630000"], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  273.292988][T14921] binder: 14912:14921 unknown command 981042713
[  273.297413][T14886] debugfs: File '14869' in directory 'proc' already present!
[  273.299323][T14921] binder: 14912:14921 ioctl c0306201 200000c0 returned -22
13:50:39 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:39 executing program 4:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:39 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(0xffffffffffffffff, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:39 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x0)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

[  273.406717][T14943] binder: 14940:14943 ioctl 40046205 0 returned -22
[  273.429117][T14931] binder: 14929:14931 ioctl 40046205 0 returned -22
13:50:39 executing program 4:
prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:39 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x0)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

[  273.481545][T14935] binder: 14929:14935 unknown command 25581
[  273.487523][T14935] binder: 14929:14935 ioctl c0306201 200000c0 returned -22
13:50:39 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, 0xffffffffffffffff)
dup3(r4, r2, 0x0)

13:50:39 executing program 4:
prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:39 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x0)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:39 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})
r2 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r3, 0x2)
flock(r4, 0x2)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x20440, 0x0)
ioctl$VT_GETMODE(r5, 0x5601, &(0x7f00000001c0))
flock(r2, 0x1)
r6 = dup2(r2, r4)
dup3(r6, r3, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000000), 0x4)

[  274.040022][T14914] binder: 14912:14914 unknown command 981042713
[  274.046720][T14914] binder: 14912:14914 ioctl c0306201 200000c0 returned -22
13:50:40 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(0xffffffffffffffff, r3)
dup3(r4, r2, 0x0)

[  274.083539][T14975] binder: 14972:14975 ioctl 40046205 0 returned -22
13:50:40 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
keyctl$set_reqkey_keyring(0xe, 0x6)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="100029bd7000fcdbdf251a000000050092000100000008000100030000002c002280080006000200000008000500000000000800050001000000080007006f00000008000200080000000800010001000000080001000300000008009a0000000000"], 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4050)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='net/igmp\x00')
r5 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0)
close(r5)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x18, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}}, 0x0)
sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x180, r6, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x28, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4054}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3e}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_MEDIA={0xcc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xac}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfc5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}]}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="89270ffa80857dcd707ced54d4403d649bcd6545f28a37b2e290dc4f47080b6eb30400000000000000a498fcafd06408fe953c0087e2d6c0d25370f68a2dd7d1eb2f53ccfcfe2507b255dd1af3dc343066aabb380de6cc5b2bce3258028f27bfaed54b35ff411d16c6b405e00482b8fe04"], 0x1, 0x0, &(0x7f0000000140)="f4"})
r7 = syz_open_procfs(0x0, &(0x7f0000000380)='syscall\x00')
ioctl$GIO_FONT(r7, 0x4b60, &(0x7f00000003c0)=""/116)

13:50:40 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0x2, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:40 executing program 4:
prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

[  274.183007][T14935] binder: 14929:14935 unknown command 25581
[  274.189708][T14935] binder: 14929:14935 ioctl c0306201 200000c0 returned -22
[  274.197320][T14931] binder: 14929:14931 ioctl 40046205 0 returned -22
[  274.233455][T14993] binder: 14991:14993 ioctl 40046205 0 returned -22
[  274.242437][T14996] binder: 14994:14996 ioctl 40046205 0 returned -22
13:50:40 executing program 4:
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

[  274.297695][T15000] binder: 14994:15000 unknown command -99670135
[  274.304154][T15000] binder: 14994:15000 ioctl c0306201 200000c0 returned -22
13:50:40 executing program 4:
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:40 executing program 4:
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:40 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:40 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, 0xffffffffffffffff)
dup3(r4, r2, 0x0)

13:50:40 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:40 executing program 0:
prlimit64(0xffffffffffffffff, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='?\x00\x00\x00'], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:40 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(0xffffffffffffffff, r3)
dup3(r4, r2, 0x0)

[  274.903766][T15028] binder: 15026:15028 ioctl 40046205 0 returned -22
13:50:40 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

[  274.956699][T15034] binder: 15026:15034 unknown command 63
[  274.962959][T15034] binder: 15026:15034 ioctl c0306201 200000c0 returned -22
13:50:40 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x3}, 0x0)
sched_setattr(r2, &(0x7f0000000080)={0x38, 0x6, 0x10000000, 0x4, 0x8000, 0x7, 0x0, 0x2, 0x5, 0x4}, 0x0)

[  275.030921][T14993] binder: 14991:14993 ioctl 40046205 0 returned -22
[  275.039211][T15042] binder: 14994:15042 ioctl 40046205 0 returned -22
[  275.047005][T15042] binder: 14994:15042 unknown command -99670135
[  275.053506][T15042] binder: 14994:15042 ioctl c0306201 200000c0 returned -22
[  275.074528][T15046] binder: 15045:15046 ioctl 40046205 0 returned -22
13:50:41 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0x4b47, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:41 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

[  275.096953][T15049] binder: 15048:15049 ioctl 40046205 0 returned -22
[  275.149654][T15055] binder: 15048:15055 ioctl 4b47 200000c0 returned -22
13:50:41 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:41 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:41 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r1, 0x2)
flock(r2, 0x2)
flock(r0, 0x1)
r3 = dup2(r0, r2)
dup3(r3, r1, 0x0)

13:50:41 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r1, 0x2)
flock(r2, 0x2)
flock(r0, 0x1)
r3 = dup2(r0, r2)
dup3(r3, r1, 0x0)

13:50:41 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
dup2(r1, r3)
dup3(0xffffffffffffffff, r2, 0x0)

13:50:41 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r1, 0x2)
flock(r2, 0x2)
flock(r0, 0x1)
r3 = dup2(r0, r2)
dup3(r3, r1, 0x0)

13:50:41 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/context\x00', 0x2, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x18002, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:41 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(0xffffffffffffffff, r3)
dup3(r4, r2, 0x0)

[  275.704841][T15034] binder: 15026:15034 ioctl 40046205 0 returned -22
[  275.714574][T15034] binder: 15026:15034 unknown command 63
[  275.730468][T15034] binder: 15026:15034 ioctl c0306201 200000c0 returned -22
[  275.747599][T15086] binder: 15085:15086 ioctl 40046205 0 returned -22
13:50:41 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:41 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  275.885871][T15103] binder: 15102:15103 ioctl 40046205 0 returned -22
[  275.897716][T15049] binder: 15048:15049 ioctl 40046205 0 returned -22
13:50:41 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0x4b49, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:41 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

[  275.971292][T15110] binder: 15109:15110 ioctl 40046205 0 returned -22
13:50:41 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

[  276.023840][T15112] binder: 15109:15112 ioctl 4b49 200000c0 returned -22
13:50:42 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:42 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:42 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:42 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
dup2(r1, r3)
dup3(0xffffffffffffffff, r2, 0x0)

13:50:42 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:42 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000012c0)=[{{&(0x7f0000000180)=@nfc_llcp, 0x80, &(0x7f0000000640)=[{&(0x7f0000000380)=""/209, 0xd1}, {&(0x7f0000000200)=""/79, 0x4f}, {&(0x7f00000002c0)=""/112, 0x70}, {&(0x7f0000000480)=""/110, 0x6e}, {&(0x7f0000000500)=""/75, 0x4b}, {&(0x7f0000000580)=""/172, 0xac}], 0x6, &(0x7f00000006c0)=""/200, 0xc8}, 0x1ff}, {{&(0x7f00000007c0)=@x25={0x9, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000840)=""/182, 0xb6}], 0x1, &(0x7f0000000900)=""/80, 0x50}, 0x1}, {{&(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff}}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000a00)=""/176, 0xb0}, {&(0x7f0000000ac0)=""/207, 0xcf}, {&(0x7f0000000080)=""/55, 0x37}, {&(0x7f0000000bc0)=""/105, 0x69}, {&(0x7f0000000c40)=""/17, 0x11}, {&(0x7f0000000c80)=""/10, 0xa}, {&(0x7f0000000cc0)=""/251, 0xfb}, {&(0x7f0000000dc0)=""/50, 0x32}], 0x8, &(0x7f0000000e80)=""/93, 0x5d}, 0x5}, {{&(0x7f0000000f00)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000001200)=[{&(0x7f0000000f80)=""/44, 0x2c}, {&(0x7f0000000fc0)=""/156, 0x9c}, {&(0x7f0000001080)=""/114, 0x72}, {&(0x7f0000001100)=""/247, 0xf7}], 0x4, &(0x7f0000001240)=""/101, 0x65}, 0x3}], 0x4, 0x2000, &(0x7f00000013c0))
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001400)={0x2, 0x0, 0x8000}, 0x4)
r2 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:42 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, 0xffffffffffffffff)
dup3(r4, r2, 0x0)

[  276.557560][T15143] binder: 15142:15143 ioctl 40046205 0 returned -22
13:50:42 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:42 executing program 1:
r0 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r1, 0x2)
flock(r0, 0x1)
dup2(r0, r1)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=<r2=>0x0)
prlimit64(r2, 0xe, &(0x7f0000000280)={0x9, 0x4000000008d}, 0x0)
r3 = getpid()
sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r4 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r4, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:42 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0x541b, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:42 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

[  276.750373][T15161] binder: 15160:15161 ioctl 40046205 0 returned -22
[  276.772744][T15110] binder: 15109:15110 ioctl 40046205 0 returned -22
[  276.840006][T15168] binder: 15166:15168 ioctl 40046205 0 returned -22
13:50:42 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(0x0, 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:42 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(0x0, 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

[  276.892691][T15171] binder: 15166:15171 ioctl 541b 200000c0 returned -22
13:50:42 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(0x0, 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:42 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:43 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
dup2(r1, r3)
dup3(0xffffffffffffffff, r2, 0x0)

13:50:43 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

[  277.360182][T15149] binder: 15142:15149 ioctl 40046205 0 returned -22
13:50:43 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f00000001c0)={0x6, 0x54})
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x4)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
chroot(&(0x7f0000000080)='./file0\x00')
open(&(0x7f0000000180)='./file0\x00', 0x800, 0x65f4bde0cc7f75da)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r3, 0x2)
flock(r4, 0x2)
flock(r2, 0x1)
r5 = dup2(r2, r4)
dup3(r5, r3, 0x0)
epoll_pwait(r5, &(0x7f0000000240)=[{}, {}, {}, {}], 0x4, 0x4, &(0x7f00000002c0)={[0x3]}, 0x8)
syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
r6 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/access\x00', 0x2, 0x0)
write$binfmt_elf32(r6, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x81, 0x4, 0xde, 0xfffffffffffffffb, 0x3, 0x3e, 0xa00, 0x17c, 0x38, 0x289, 0x8, 0x3, 0x20, 0x1, 0x8001, 0x2, 0xfff8}, [{0x3, 0xffff, 0xffffffff, 0x101, 0x9, 0x3ff, 0x2, 0x99}], "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", [[], [], [], [], [], [], []]}, 0x1758)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:43 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:43 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, 0xffffffffffffffff)
dup3(r4, r2, 0x0)

[  277.434420][T15199] binder: 15196:15199 ioctl 40046205 0 returned -22
13:50:43 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x3f}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b630000b44a8506df1ee9844a4c86b514d844a51a2ebd9bee5dad6f93e49ec959b1733f1143e61743b30172b98119084da60d78420499af379a9a52b5875c896795f1098e2d0579a54005e8e2ef387f359ad00857bd8d878148011b336c1bd14be94bb46a79588cee5667fd15d61bd062afd9d6aa6b0b18b2ffd85130f69a7d37a1652bc95c75b811e9fd23c801fdc043ecd4d0290642104b8f43a14f598450411ec553d17012265aaa93d6f44cc05e313af29bea7e4b52ddae2ead423f70a828feb97cabd88d7349afd29888faa3650b631a05b71387fc3bba"], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  277.514327][T15206] binder: 15205:15206 ioctl 40046205 0 returned -22
[  277.639762][T15168] binder: 15166:15168 ioctl 40046205 0 returned -22
13:50:43 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:43 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(0x0, 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:43 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(0x0, 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

[  277.692519][T15171] binder: 15166:15171 ioctl 541b 200000c0 returned -22
[  277.715848][T15215] binder: 15214:15215 ioctl 40046205 0 returned -22
13:50:43 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(0x0, 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:43 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(0x0, 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:44 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, 0xffffffffffffffff, 0x0)

13:50:44 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, 0xffffffffffffffff)
dup3(r4, r2, 0x0)

13:50:44 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x20000041, 0x0, 0x5, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffc}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000200)={'filter\x00'}, &(0x7f0000000000)=0x44)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="03001000b79adc4021708a1afd82b463a1d130b137ac089b55910b10cda5a119828c14bc16a77699c7691492df1a22651c693e8ce4f72af9da0744602c4470e4b7ba03d84cb4"], 0x6b, 0x0, &(0x7f0000000180)="99bcce12d82e9e0fbf9ddb1c193801e16d933b4107fa12e20c15d03ebf98c29d1abcee024ec1df378c0c120327135eb96112b3f8722e18a7b5ff0a3f46efb4020d7b8e6e2d939932502faf7003dbf9eac345ad4a8767df2c7738435498b2873d46c773f2af3cf07aaf1998"})

[  278.231165][T15199] binder: 15196:15199 ioctl 40046205 0 returned -22
[  278.258424][T15240] binder: 15239:15240 ioctl 40046205 0 returned -22
13:50:44 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})
r2 = socket$unix(0x1, 0x5, 0x0)
getsockname$unix(r2, &(0x7f0000000180), &(0x7f0000000000)=0x6e)

[  278.311758][T15243] binder: 15239:15243 unknown command 1048579
[  278.318899][T15243] binder: 15239:15243 ioctl c0306201 200000c0 returned -22
[  278.332682][T15247] binder: 15246:15247 ioctl 40046205 0 returned -22
13:50:44 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0x5450, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  278.516850][T15215] binder: 15214:15215 ioctl 40046205 0 returned -22
[  278.538235][T15252] binder: 15251:15252 ioctl 40046205 0 returned -22
13:50:44 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(0x0, 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:44 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, 0xffffffffffffffff, 0x0)

13:50:44 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
dup2(r1, r3)
dup3(0xffffffffffffffff, r2, 0x0)

13:50:45 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r1, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@ipv4={[], [], @loopback}, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f00000002c0)=0xe8)
newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x4e9b179018feb802)
r4 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r5=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r5, 0x0)
getresuid(&(0x7f0000000400)=<r6=>0x0, &(0x7f0000000440), &(0x7f0000000480))
r7 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r8=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r8, 0x0)
r9 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r10=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r10, 0x0)
r11 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r12=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r12, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0, <r13=>0x0}, &(0x7f0000000500)=0xc)
r14 = getgid()
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000540)={{}, {0x1, 0x4}, [{0x2, 0x2, r1}, {0x2, 0x5, r2}, {0x2, 0x4, r3}, {0x2, 0x6, r5}, {0x2, 0x2, r6}, {0x2, 0x5, r8}, {0x2, 0x0, r10}, {0x2, 0x4, r12}], {0x4, 0x1}, [{0x8, 0x1, r13}, {0x8, 0x6, r14}], {0x10, 0x3}, {0x20, 0x2}}, 0x74, 0x1)
r15 = getpid()
sched_setattr(r15, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r16 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r16, 0x40046205, 0x0)
setsockopt$inet_tcp_int(r9, 0x6, 0x18, &(0x7f00000005c0)=0x101, 0x4)
ioctl$BINDER_WRITE_READ(r16, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r16, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:45 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x80880, 0x0)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000080)=0x7ff, 0x4)

13:50:45 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
rt_sigreturn()
fcntl$dupfd(r3, 0x0, r2)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'vlan0\x00', {0x2, 0x4e20, @local}})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  279.102980][T15272] binder: 15271:15272 ioctl 40046205 0 returned -22
[  279.145967][T15277] binder: 15276:15277 ioctl 40046205 0 returned -22
13:50:45 executing program 1:
r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x135800, 0x0)
ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000080))
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000200)={0x38, 0x5, 0x40, 0x2, 0x2, 0x0, 0x78, 0x3, 0x5, 0x6}, 0x0)
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})
socketpair(0x15, 0x6, 0x4, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f00000001c0)=0x4, 0x4)

[  279.221599][T15282] binder: 15281:15282 ioctl 40046205 0 returned -22
13:50:45 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0x5451, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  279.339438][T15252] binder: 15251:15252 ioctl 40046205 0 returned -22
[  279.406929][T15287] binder: 15286:15287 ioctl 40046205 0 returned -22
13:50:45 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(0x0, 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:45 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, 0xffffffffffffffff, 0x0)

13:50:45 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
dup2(r1, r3)
dup3(0xffffffffffffffff, r2, 0x0)

13:50:45 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1, 0x0, &(0x7f0000000140)="f4"})
r2 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r3, 0x2)
flock(r4, 0x2)
flock(r2, 0x1)
r5 = dup2(r2, r4)
dup3(r5, r3, 0x0)
fstat(r5, &(0x7f00000002c0))
socketpair(0x29, 0x800, 0x7, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$FS_IOC_GETFSLABEL(r6, 0x81009431, &(0x7f0000000180))

[  279.913757][T15303] binder: 15302:15303 ioctl 40046205 0 returned -22
[  279.966676][T15305] binder: 15302:15305 unknown command 0
[  279.972460][T15305] binder: 15302:15305 ioctl c0306201 200000c0 returned -22
13:50:45 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$dupfd(r2, 0x0, r1)
r3 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
ioctl$PPPIOCCONNECT(r3, 0x4004743a, &(0x7f0000000080)=0x3)
ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000440)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0x7, 0x2, 0xf}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/240, 0xf0, 0x1, 0x800002f}, @ptr={0x70742a85, 0x1001, &(0x7f00000004c0)=""/161, 0xa1, 0x2, 0x3e}}, &(0x7f0000000000)={0x0, 0x20, 0x48}}}], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  280.022914][T15282] binder: 15281:15282 ioctl 40046205 0 returned -22
13:50:46 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
finit_module(r4, &(0x7f00000002c0)='cgroupeth1\x00', 0x3)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8080, 0x1)
r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000001340)='nbd\x00')
sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000001440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001400)={&(0x7f00000014c0)=ANY=[@ANYBLOB="44000000e9f2f76d30b06b04d8db6230ef96bcf1dbb0beea42b657924d39c958e3caa3c04d852d9a23cbecee3d40e364d0d99c0684cd3690f9e739f80c12384b0e113cfa0b7179a964930cf426fae30f71ff8680189f48e333b40be40f7b98721b0e9292f603ed05b74472d49700d9e8cf49c7de97c3c4e5bc0a17fc3f4ab58421cc8356b3b600efe3cc0e6f1a48a20d2abb8bbbcf81ff8311ac051afec7f12c00cf91e6b2c1170a27e65c25565b6b0c170e49f6ce2c75b5cda14f69a4496c5cdee1b31dd7", @ANYRES16=r7, @ANYBLOB="00082dbd7000ffdbdf25050000000c00080001000000000000000c000300fb000000000000000c000400ff0f0000000000000c0002007f00000000000000"], 0x44}}, 0x4)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0x1, 0x28, &(0x7f0000000300)={0x0, <r8=>0x0}}, 0x10)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={r8, 0x8}, 0xc)
sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r7, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x80000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x8044)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="cda14f890b8a645095a6b8f0810558acd78692ceb8ff840d35de4cba17ea5ebac86b584b28fca82eb81470277ca95f9694e13cccf5e648290b0637956e1a301a635b1c70a664f1f14913339c0722c09eef653c686447700b2de51c04a15013a90e9bdcebcdcda084b7d3b9f33d4b27e3814f8074a5a9b173884fb42f8f8a2744e0ae13a4bfcf0a7c4d11261959e0b29b8eff9d55cec0161dcfc3e23914d59c06c243c9bbe460c38a0503e8e9a30728174032728633eb3a598700"/198], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  280.091519][T15318] binder: 15317:15318 ioctl 40046205 0 returned -22
[  280.155691][T15320] binder: 15317:15320 unknown command -1991269939
[  280.162262][T15320] binder: 15317:15320 ioctl c0306201 200000c0 returned -22
13:50:46 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0x5452, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  280.207863][T15287] binder: 15286:15287 ioctl 40046205 0 returned -22
[  280.227561][T15323] binder: 15322:15323 ioctl 40046205 0 returned -22
13:50:46 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(0xffffffffffffffff, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:46 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(0xffffffffffffffff, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:46 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(0xffffffffffffffff, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:46 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x0)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:46 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x0)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:46 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:46 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x0)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:46 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
dup2(r1, r3)
dup3(0xffffffffffffffff, r2, 0x0)

13:50:46 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(0xffffffffffffffff, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:46 executing program 2 (fault-call:7 fault-nth:0):
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

[  280.737934][T15362] FAULT_INJECTION: forcing a failure.
[  280.737934][T15362] name failslab, interval 1, probability 0, space 0, times 0
[  280.751475][T15362] CPU: 1 PID: 15362 Comm: syz-executor.2 Not tainted 5.4.15-syzkaller-01128-gb2b96d09ef40 #0
[  280.761989][T15362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  280.772055][T15362] Call Trace:
[  280.775365][T15362]  dump_stack+0x1b0/0x228
[  280.779709][T15362]  ? devkmsg_release+0x127/0x127
[  280.784657][T15362]  ? show_regs_print_info+0x18/0x18
[  280.789868][T15362]  ? __rcu_read_lock+0x50/0x50
[  280.794646][T15362]  ? __fsnotify_parent+0x300/0x300
[  280.799777][T15362]  should_fail+0x6fb/0x860
[  280.804207][T15362]  ? setup_fault_attr+0x2b0/0x2b0
[  280.809288][T15362]  __should_failslab+0x11a/0x160
[  280.814268][T15362]  ? __se_sys_flock+0x156/0x560
[  280.819129][T15362]  should_failslab+0x9/0x20
[  280.823739][T15362]  kmem_cache_alloc+0x37/0x2b0
[  280.828515][T15362]  __se_sys_flock+0x156/0x560
[  280.833204][T15362]  __x64_sys_flock+0x5b/0x70
[  280.837806][T15362]  do_syscall_64+0xc0/0x100
[  280.842334][T15362]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  280.848235][T15362] RIP: 0033:0x45b349
[  280.852133][T15362] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  280.872823][T15362] RSP: 002b:00007f5fcd2d4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000049
13:50:46 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
fsetxattr$security_evm(r0, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000080)=@v2={0x3, 0x0, 0xd, 0x4, 0x30, "e101969dd73660af1b29d1fea9266905f027effa9fb9e62ebac98ce0c1bdded8bc11746a6796c1f620c71788647afd2c"}, 0x39, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x0)
prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  280.881326][T15362] RAX: ffffffffffffffda RBX: 00007f5fcd2d56d4 RCX: 000000000045b349
[  280.889431][T15362] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000005
[  280.897404][T15362] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  280.905380][T15362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[  280.913445][T15362] R13: 00000000000000c6 R14: 00000000004c201c R15: 0000000000000000
[  280.951329][   T22] audit: type=1400 audit(1580219446.857:18077): avc:  denied  { create } for  pid=15370 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1
[  280.978118][T15372] binder: 15370:15372 ioctl 40046205 0 returned -22
13:50:46 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0x5460, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:46 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(0xffffffffffffffff, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:46 executing program 2 (fault-call:7 fault-nth:1):
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

[  280.989533][   T22] audit: type=1400 audit(1580219446.887:18078): avc:  denied  { setattr } for  pid=15370 comm="syz-executor.1" name="NETLINK" dev="sockfs" ino=40240 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1
[  281.035976][T15323] binder: 15322:15323 ioctl 40046205 0 returned -22
[  281.062066][T15380] FAULT_INJECTION: forcing a failure.
[  281.062066][T15380] name failslab, interval 1, probability 0, space 0, times 0
[  281.075094][T15380] CPU: 1 PID: 15380 Comm: syz-executor.2 Not tainted 5.4.15-syzkaller-01128-gb2b96d09ef40 #0
[  281.085441][T15380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  281.095497][T15380] Call Trace:
[  281.098807][T15380]  dump_stack+0x1b0/0x228
[  281.103148][T15380]  ? devkmsg_release+0x127/0x127
[  281.108095][T15380]  ? arch_stack_walk+0x98/0xe0
[  281.112871][T15380]  ? show_regs_print_info+0x18/0x18
[  281.118088][T15380]  ? __rcu_read_lock+0x50/0x50
[  281.122861][T15380]  should_fail+0x6fb/0x860
[  281.125990][T15383] binder: 15377:15383 ioctl 40046205 0 returned -22
[  281.127291][T15380]  ? setup_fault_attr+0x2b0/0x2b0
[  281.127300][T15380]  ? avc_has_perm_noaudit+0x2fc/0x3f0
[  281.127315][T15380]  __should_failslab+0x11a/0x160
[  281.149337][T15380]  ? flock_lock_inode+0x35b/0x1c60
[  281.154457][T15380]  should_failslab+0x9/0x20
[  281.158978][T15380]  kmem_cache_alloc+0x37/0x2b0
[  281.163870][T15380]  ? locks_get_lock_context+0xe6/0x380
[  281.169339][T15380]  ? kasan_slab_alloc+0xe/0x10
[  281.174107][T15380]  flock_lock_inode+0x35b/0x1c60
[  281.179231][T15380]  ? lease_setup+0x140/0x140
[  281.183855][T15380]  ? __fsnotify_parent+0x300/0x300
[  281.188969][T15380]  locks_lock_inode_wait+0x22d/0x3f0
[  281.194267][T15380]  ? fcntl_setlease+0x750/0x750
[  281.199128][T15380]  ? ___slab_alloc+0xab/0x450
[  281.203814][T15380]  ? __should_failslab+0x11a/0x160
[  281.208933][T15380]  ? selinux_file_lock+0x4e/0x60
[  281.213879][T15380]  ? security_file_lock+0xab/0xc0
[  281.218911][T15380]  __se_sys_flock+0x45b/0x560
[  281.223684][T15380]  __x64_sys_flock+0x5b/0x70
[  281.228283][T15380]  do_syscall_64+0xc0/0x100
[  281.232795][T15380]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  281.238689][T15380] RIP: 0033:0x45b349
[  281.242584][T15380] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  281.262189][T15380] RSP: 002b:00007f5fcd2d4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000049
[  281.270600][T15380] RAX: ffffffffffffffda RBX: 00007f5fcd2d56d4 RCX: 000000000045b349
[  281.278743][T15380] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000005
[  281.286722][T15380] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  281.294849][T15380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[  281.302840][T15380] R13: 00000000000000c6 R14: 00000000004c201c R15: 0000000000000001
13:50:47 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(0xffffffffffffffff, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:47 executing program 2 (fault-call:7 fault-nth:2):
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:47 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x0)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:47 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, 0xffffffffffffffff, 0x0)

[  281.498294][T15392] FAULT_INJECTION: forcing a failure.
[  281.498294][T15392] name failslab, interval 1, probability 0, space 0, times 0
[  281.531930][T15392] CPU: 0 PID: 15392 Comm: syz-executor.2 Not tainted 5.4.15-syzkaller-01128-gb2b96d09ef40 #0
[  281.542203][T15392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  281.552261][T15392] Call Trace:
[  281.555582][T15392]  dump_stack+0x1b0/0x228
[  281.559943][T15392]  ? devkmsg_release+0x127/0x127
[  281.564916][T15392]  ? show_regs_print_info+0x18/0x18
[  281.570124][T15392]  should_fail+0x6fb/0x860
[  281.574565][T15392]  ? setup_fault_attr+0x2b0/0x2b0
[  281.579598][T15392]  __should_failslab+0x11a/0x160
[  281.584571][T15392]  ? flock_lock_inode+0x35b/0x1c60
[  281.589699][T15392]  should_failslab+0x9/0x20
[  281.594215][T15392]  kmem_cache_alloc+0x37/0x2b0
[  281.598984][T15392]  ? locks_get_lock_context+0xe6/0x380
[  281.604450][T15392]  flock_lock_inode+0x35b/0x1c60
[  281.609398][T15392]  ? lease_setup+0x140/0x140
[  281.614009][T15392]  ? finish_wait+0x17d/0x190
[  281.618610][T15392]  locks_lock_inode_wait+0x22d/0x3f0
[  281.624022][T15392]  ? fcntl_setlease+0x750/0x750
[  281.628884][T15392]  ? init_wait_entry+0xe0/0xe0
[  281.633655][T15392]  ? __should_failslab+0x11a/0x160
[  281.638792][T15392]  ? selinux_file_lock+0x4e/0x60
[  281.643748][T15392]  ? security_file_lock+0xab/0xc0
[  281.648784][T15392]  __se_sys_flock+0x45b/0x560
[  281.653841][T15392]  __x64_sys_flock+0x5b/0x70
[  281.658440][T15392]  do_syscall_64+0xc0/0x100
[  281.662957][T15392]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  281.668853][T15392] RIP: 0033:0x45b349
[  281.672755][T15392] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
13:50:47 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x0)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:47 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\b\x00\x00'], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  281.692361][T15392] RSP: 002b:00007f5fcd2d4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000049
[  281.700972][T15392] RAX: ffffffffffffffda RBX: 00007f5fcd2d56d4 RCX: 000000000045b349
[  281.708949][T15392] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000005
[  281.716969][T15392] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  281.724941][T15392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[  281.733089][T15392] R13: 00000000000000c6 R14: 00000000004c201c R15: 0000000000000002
13:50:47 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x0)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:47 executing program 2 (fault-call:7 fault-nth:3):
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

[  281.776053][T15414] binder: 15413:15414 ioctl 40046205 0 returned -22
13:50:47 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(0xffffffffffffffff, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

[  281.835604][T15422] binder: 15413:15422 unknown command 2048
[  281.841513][T15422] binder: 15413:15422 ioctl c0306201 200000c0 returned -22
[  281.862792][T15381] binder: 15377:15381 ioctl 40046205 0 returned -22
13:50:47 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:47 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x400000, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x40200, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x7)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="03630840", @ANYRES64=r5, @ANYBLOB="0500000000000000ce84d33a563fa04540f1e137b4b2878375ce225cc05af3c0888dcf91edd068a3b38229041e17662548aeb1f59ab8ece8456b62c3f6d23079bcdc6ef91a2758579fd63f1ed4259cfa82c4066a1d"], 0xd5, 0x0, &(0x7f00000002c0)="7d9652a428cee51a8746bf5f11b9884371a2fec53d860e7d0c05082034db7799a34c069d0d9ed611d4d7ee8f062fb0100563632e3ed8e45844c48d67d090676379e119f8509baea7b28f55c5b603f47e4a423d0ec6757afaf912846bef9bbfb4e7d238f824cbdc9750451fc948f8f305cc38e0fb5ea11101af03e7de3f643c0fd867e603cb2e89a3711272a97e87ff329b0880347812c113b0e0a322c46050e1793cb4d04eb06524596b38be16f538df72386f9497af6bfe372f328c4bd04eef797ebffd4e6e571b8a49e5a18ddad1aff3a893edc6"})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0c63000010630840000000000363084000000000", @ANYRES64=r5], 0x3f, 0x0, &(0x7f00000001c0)="a91521e840eaf82ff6dd22d26b45839d0cb7856a9d4cc5a12f499fcb42752e30f873fe3eb8535679f808ef71b42a009f3f36b73bdd39927c2875a8e428d377"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000580)='/dev/full\x00', 0x200, 0x0)
getsockopt$TIPC_SOCK_RECVQ_DEPTH(r6, 0x10f, 0x84, &(0x7f00000005c0), &(0x7f0000000600)=0x4)
socket$inet6(0xa, 0x1, 0x0)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)={0x1d0, r7, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xf0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x65, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9fc}]}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x600000}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe9}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x903}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x8, @empty, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xd145}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x0, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x4, 0x2, 0x200}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x400c810}, 0x40)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x1, 0x0, &(0x7f0000000140)="f4"})
r8 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r9 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r10 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = fcntl$dupfd(r12, 0x0, r11)
ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200)
fallocate(r13, 0x10, 0x0, 0xfffffffffffffbff)
flock(r9, 0x2)
flock(r10, 0x2)
flock(r8, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r14=>0xffffffffffffffff, <r15=>0xffffffffffffffff})
fcntl$dupfd(r15, 0x0, r14)
r16 = dup2(r15, r10)
dup3(r16, r9, 0x0)
getsockopt$IP6T_SO_GET_INFO(r9, 0x29, 0x40, &(0x7f0000000940)={'security\x00'}, &(0x7f0000000840)=0x3)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f0000000880)={0x3, 'veth1_macvtap\x00', {0x4}, 0xfffa})
keyctl$set_reqkey_keyring(0xe, 0x3)

13:50:47 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:47 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(0xffffffffffffffff, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

[  281.931811][T15430] binder: 15429:15430 ioctl 40046205 0 returned -22
[  281.933329][T15432] binder: 15431:15432 ioctl 40046205 0 returned -22
13:50:47 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(0xffffffffffffffff, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

[  281.986142][T15441] binder: 15429:15441 unknown command 1838611924
[  281.992918][T15441] binder: 15429:15441 ioctl c0306201 200000c0 returned -22
13:50:47 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x8)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:48 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x0)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:48 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, 0xffffffffffffffff, 0x0)

13:50:48 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(0xffffffffffffffff, 0x2)
flock(r2, 0x2)
flock(r1, 0x1)
r3 = dup2(r1, r2)
dup3(r3, 0xffffffffffffffff, 0x0)

13:50:48 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000180)=""/79, 0x4f)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:48 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x0)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:48 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x0)
r4 = dup2(0xffffffffffffffff, r3)
dup3(r4, r2, 0x0)

[  282.585796][T15474] binder: 15472:15474 ioctl 40046205 0 returned -22
13:50:48 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:48 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
listen(0xffffffffffffffff, 0x3)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x4800, 0x1)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x240600, 0x0)
r5 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r6 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r7 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r6, 0x2)
flock(r7, 0x2)
flock(r5, 0x1)
r8 = dup2(r5, r7)
dup3(r8, r6, 0x0)
setsockopt$CAN_RAW_LOOPBACK(r6, 0x65, 0x3, &(0x7f0000000140), 0x4)
write$input_event(r4, &(0x7f0000000100)={{}, 0x17, 0x8001, 0x6}, 0x18)
r9 = dup2(r1, r3)
dup3(r9, r2, 0x0)

13:50:48 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x7fff, 0xfffffffffffffffd, 0x800000000000, 0x0, 0x0, 0x10000000}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xf1, 0x0, &(0x7f0000000380)="4b0600000000000000d57feba144488dcf997ba74b4fab6accc190dc2f913f2ece0ef79ebc4f12dab76158cc4eec9f0c95931372b1362e95ecd7da705a1040eaef74a0ea24f031104c7e3b56171db881d38aff1e3413c0c266a4768c99e5674d8a203aebb3316b810bfce46263d96dd1abacf0964b048dd95836ae9b9ee56da4579e7645c66fbbb2792ab7b16eeccaa8c02e409356a2b192899143bd005f0683ed2ae970995789359e551dec43062c49e68ce37213c0c0ee0981126fe3adf4861ffb2eefb73fcf2d9d2d70dd2135aa79eb175a72dc9c4479ce60d36d68768cfbc2f300"/241})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  282.734394][T15432] binder: 15431:15432 ioctl 40046205 0 returned -22
[  282.755987][T15486] binder: 15484:15486 ioctl 40046205 0 returned -22
[  282.764706][T15489] binder: 15487:15489 ioctl 40046205 0 returned -22
13:50:49 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, 0xffffffffffffffff, 0x0)

13:50:49 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r1, 0x2)
flock(r0, 0x1)
dup2(r0, r1)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00')
sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x8040)
r3 = getpid()
sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r4 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r4, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  283.386401][T15474] binder: 15472:15474 ioctl 40046205 0 returned -22
13:50:49 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x0)
r4 = dup2(0xffffffffffffffff, r3)
dup3(r4, r2, 0x0)

[  283.463585][T15503] binder: 15502:15503 ioctl 40046205 0 returned -22
13:50:49 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r3, 0x2)
flock(r4, 0x2)
flock(r2, 0x1)
r5 = dup2(r2, r4)
dup3(r5, r3, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
fcntl$dupfd(r7, 0x0, r6)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
fcntl$dupfd(r9, 0x0, r8)
ioctl$sock_inet_SIOCSIFDSTADDR(r9, 0x8918, &(0x7f0000000080)={'veth1_virt_wifi\x00', {0x2, 0x4e22, @loopback}})
syncfs(r6)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:49 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x1, 0x0)
flock(r1, 0x1)
r4 = dup2(r1, r3)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100))
dup3(r4, r2, 0x0)

[  283.565118][T15489] binder: 15487:15489 ioctl 40046205 0 returned -22
13:50:49 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0x40046208, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  283.636872][T15518] binder: 15517:15518 ioctl 40046205 0 returned -22
[  283.665845][T15510] binder: 15509:15510 ioctl 40046205 0 returned -22
13:50:49 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000000c0)=0x80041)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

[  283.720552][T15513] binder: 15509:15513 unknown command 1768304430
[  283.726963][T15513] binder: 15509:15513 ioctl c0306201 200000c0 returned -22
13:50:49 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x40000, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x5)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r4 = open(&(0x7f0000000540)='./file0\x00', 0x0, 0x0)
flock(r3, 0x2)
flock(r4, 0x2)
flock(r2, 0x1)
r5 = dup2(r2, r4)
dup3(r5, r3, 0x0)
r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r6, 0x511, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40480c0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = fcntl$dupfd(r8, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_GET_KEY(r9, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, r10, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "2eb70fa81c"}, @NL80211_ATTR_KEY_SEQ={0xc, 0xa, "91fcd94805a6d186"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f547a18efb55ed5b0da521ead4"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "21ae766ce3"}]}, 0x50}, 0x1, 0x0, 0x0, 0x845}, 0x4080)
r11 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r12 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r13 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r12, 0x2)
flock(r13, 0x2)
pidfd_open(r0, 0x0)
flock(r11, 0x1)
r14 = dup2(r11, r13)
r15 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r16 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r17 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r16, 0x2)
flock(r17, 0x2)
flock(r15, 0x1)
r18 = dup2(r15, r17)
dup3(r18, r16, 0x0)
ioctl$FIBMAP(r18, 0x1, &(0x7f0000000500)=0x7fffffff)
dup3(r14, r12, 0x0)

13:50:49 executing program 3 (fault-call:7 fault-nth:0):
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

[  283.976574][T15537] FAULT_INJECTION: forcing a failure.
[  283.976574][T15537] name failslab, interval 1, probability 0, space 0, times 0
[  283.989323][T15537] CPU: 0 PID: 15537 Comm: syz-executor.3 Not tainted 5.4.15-syzkaller-01128-gb2b96d09ef40 #0
[  283.999465][T15537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  284.009515][T15537] Call Trace:
[  284.012788][T15537]  dump_stack+0x1b0/0x228
[  284.017115][T15537]  ? devkmsg_release+0x127/0x127
[  284.022047][T15537]  ? show_regs_print_info+0x18/0x18
[  284.027222][T15537]  ? __rcu_read_lock+0x50/0x50
[  284.031971][T15537]  ? __fsnotify_parent+0x300/0x300
[  284.037094][T15537]  should_fail+0x6fb/0x860
[  284.041507][T15537]  ? setup_fault_attr+0x2b0/0x2b0
[  284.046548][T15537]  __should_failslab+0x11a/0x160
[  284.051469][T15537]  ? __se_sys_flock+0x156/0x560
[  284.056298][T15537]  should_failslab+0x9/0x20
[  284.060795][T15537]  kmem_cache_alloc+0x37/0x2b0
[  284.065557][T15537]  __se_sys_flock+0x156/0x560
[  284.070225][T15537]  __x64_sys_flock+0x5b/0x70
[  284.074800][T15537]  do_syscall_64+0xc0/0x100
[  284.079301][T15537]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  284.085169][T15537] RIP: 0033:0x45b349
[  284.089101][T15537] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  284.108772][T15537] RSP: 002b:00007f473d0b5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000049
[  284.117180][T15537] RAX: ffffffffffffffda RBX: 00007f473d0b66d4 RCX: 000000000045b349
[  284.125145][T15537] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000005
[  284.133146][T15537] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  284.141105][T15537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[  284.149167][T15537] R13: 00000000000000c6 R14: 00000000004c201c R15: 0000000000000000
13:50:50 executing program 3 (fault-call:7 fault-nth:1):
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:50 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x3}, 0x0)
sched_setattr(r0, &(0x7f0000000240)={0x38, 0x0, 0x0, 0x1, 0x5, 0xe5, 0x4}, 0x0)
ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000080)={0x1, 'veth1_to_bridge\x00', {}, 0x9})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40000, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="2beb149b27914f414e78b113bca5d4216c6c90a1ccb21458ecf8d093bc796bd2a184926ead57ad0c96f1b6215c29620c04436271139ce42713f3942c6b99d40c4e449542a589ce7ccc388100870b950292efe19b4c4be1169c4917da0000000000000000211d3ef07ad104af9e59fd04fb280953f690d844cb8a06b5abd660f684b5fd2b6bdce6c62677c78fb7f4293e0203a0bf830d596f93a6db724304319fd012d29642e9062eb07079890387c7f04e75"], 0x1, 0x0, &(0x7f0000000140)="f4"})
r5 = socket(0x1a, 0x6, 0x0)
setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f00000001c0)={0x5, 0x0, 0x5, 0xc3d, 0x1}, 0xc)
r6 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r8 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r9 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r9, 0x2)
r10 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r11 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r11, 0x2)
flock(r10, 0x1)
dup2(r10, r11)
fcntl$setflags(r10, 0x2, 0x0)
flock(r8, 0x1)
dup2(r8, r9)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc)
r12 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r7, 0x2)
flock(r12, 0x2)
flock(r6, 0x1)
r13 = dup2(r6, r12)
dup3(r13, r7, 0x0)
write$P9_RLOCK(r7, &(0x7f0000000100)={0x8, 0x35, 0x2, 0x1}, 0x8)
get_thread_area(&(0x7f0000000180)={0x3f, 0x20000800, 0xffffffffffffffff, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1})

[  284.206811][T15503] binder: 15502:15503 ioctl 40046205 0 returned -22
[  284.241537][T15542] FAULT_INJECTION: forcing a failure.
[  284.241537][T15542] name failslab, interval 1, probability 0, space 0, times 0
13:50:50 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x0)
r4 = dup2(0xffffffffffffffff, r3)
dup3(r4, r2, 0x0)

[  284.254459][T15542] CPU: 0 PID: 15542 Comm: syz-executor.3 Not tainted 5.4.15-syzkaller-01128-gb2b96d09ef40 #0
[  284.264614][T15542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  284.274654][T15542] Call Trace:
[  284.277938][T15542]  dump_stack+0x1b0/0x228
[  284.282270][T15542]  ? devkmsg_release+0x127/0x127
[  284.287208][T15542]  ? arch_stack_walk+0x98/0xe0
[  284.291975][T15542]  ? show_regs_print_info+0x18/0x18
[  284.297180][T15542]  ? __rcu_read_lock+0x50/0x50
[  284.301986][T15542]  should_fail+0x6fb/0x860
[  284.306396][T15542]  ? setup_fault_attr+0x2b0/0x2b0
[  284.311414][T15542]  ? avc_has_perm_noaudit+0x2fc/0x3f0
[  284.316783][T15542]  __should_failslab+0x11a/0x160
[  284.321715][T15542]  ? flock_lock_inode+0x35b/0x1c60
[  284.326955][T15542]  should_failslab+0x9/0x20
[  284.331515][T15542]  kmem_cache_alloc+0x37/0x2b0
[  284.336320][T15542]  ? locks_get_lock_context+0xe6/0x380
[  284.341758][T15542]  ? kasan_slab_alloc+0xe/0x10
[  284.346509][T15542]  flock_lock_inode+0x35b/0x1c60
[  284.351468][T15542]  ? lease_setup+0x140/0x140
[  284.356085][T15542]  ? __fsnotify_parent+0x300/0x300
[  284.362331][T15542]  locks_lock_inode_wait+0x22d/0x3f0
[  284.367609][T15542]  ? fcntl_setlease+0x750/0x750
[  284.373064][T15542]  ? __should_failslab+0x11a/0x160
[  284.378222][T15542]  ? selinux_file_lock+0x4e/0x60
[  284.383150][T15542]  ? security_file_lock+0xab/0xc0
[  284.388155][T15542]  __se_sys_flock+0x45b/0x560
[  284.392810][T15542]  __x64_sys_flock+0x5b/0x70
[  284.397385][T15542]  do_syscall_64+0xc0/0x100
[  284.401892][T15542]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  284.407760][T15542] RIP: 0033:0x45b349
[  284.411632][T15542] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  284.431225][T15542] RSP: 002b:00007f473d0b5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000049
[  284.437023][T15518] binder: 15517:15518 ioctl 40046205 0 returned -22
[  284.439647][T15542] RAX: ffffffffffffffda RBX: 00007f473d0b66d4 RCX: 000000000045b349
13:50:50 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0x40049409, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:50 executing program 3 (fault-call:7 fault-nth:2):
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

[  284.439652][T15542] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000005
[  284.439656][T15542] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  284.439661][T15542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[  284.439665][T15542] R13: 00000000000000c6 R14: 00000000004c201c R15: 0000000000000001
[  284.501724][T15559] binder: 15509:15559 ioctl 40046205 0 returned -22
13:50:50 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  284.508922][T15561] binder: 15509:15561 unknown command 1768304430
[  284.515458][T15561] binder: 15509:15561 ioctl c0306201 200000c0 returned -22
[  284.526434][T15565] binder: 15563:15565 ioctl 40046205 0 returned -22
[  284.535098][T15567] binder: 15566:15567 ioctl 40046205 0 returned -22
[  284.613710][T15564] FAULT_INJECTION: forcing a failure.
[  284.613710][T15564] name failslab, interval 1, probability 0, space 0, times 0
[  284.626866][T15564] CPU: 1 PID: 15564 Comm: syz-executor.3 Not tainted 5.4.15-syzkaller-01128-gb2b96d09ef40 #0
[  284.636998][T15564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  284.647046][T15564] Call Trace:
[  284.650339][T15564]  dump_stack+0x1b0/0x228
[  284.654652][T15564]  ? devkmsg_release+0x127/0x127
[  284.659576][T15564]  ? sched_clock_cpu+0x32/0x390
[  284.664404][T15564]  ? show_regs_print_info+0x18/0x18
[  284.669585][T15564]  should_fail+0x6fb/0x860
[  284.673979][T15564]  ? setup_fault_attr+0x2b0/0x2b0
[  284.679955][T15564]  ? nohz_balance_enter_idle+0x3a0/0x3a0
[  284.686374][T15564]  ? dequeue_task_fair+0x68a/0x1050
[  284.691899][T15564]  ? find_next_bit+0xf7/0x120
[  284.696554][T15564]  __should_failslab+0x11a/0x160
[  284.701485][T15564]  ? flock_lock_inode+0x35b/0x1c60
[  284.706592][T15564]  should_failslab+0x9/0x20
[  284.711099][T15564]  kmem_cache_alloc+0x37/0x2b0
[  284.715842][T15564]  ? locks_get_lock_context+0xe6/0x380
[  284.721309][T15564]  flock_lock_inode+0x35b/0x1c60
[  284.726261][T15564]  ? lease_setup+0x140/0x140
[  284.730845][T15564]  ? finish_wait+0x17d/0x190
[  284.735414][T15564]  locks_lock_inode_wait+0x22d/0x3f0
[  284.740689][T15564]  ? fcntl_setlease+0x750/0x750
[  284.745527][T15564]  ? init_wait_entry+0xe0/0xe0
[  284.750797][T15564]  ? __should_failslab+0x11a/0x160
[  284.755908][T15564]  ? selinux_file_lock+0x4e/0x60
[  284.760830][T15564]  ? security_file_lock+0xab/0xc0
[  284.765834][T15564]  __se_sys_flock+0x45b/0x560
[  284.770501][T15564]  __x64_sys_flock+0x5b/0x70
[  284.775103][T15564]  do_syscall_64+0xc0/0x100
[  284.780141][T15564]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  284.786008][T15564] RIP: 0033:0x45b349
[  284.789879][T15564] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
13:50:50 executing program 3 (fault-call:7 fault-nth:3):
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:50 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)
accept$packet(r2, &(0x7f0000000400)={0x11, 0x0, <r5=>0x0}, &(0x7f0000000440)=0x14)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x14, 0x2, 0x400, 0x80, 0xf4f80ee4dd1b5c1, 0xffffffffffffffff, 0x6, [], r5, 0xffffffffffffffff, 0x1, 0x2}, 0x3c)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r6, &(0x7f00000002c0)="d1012926140b0237c2112a4f18156dde8a053e54ed71d8b8964a215f9a0161361f77f80e896bf41f527e9239f3b117d3c43146b31fdc88dbce90933465898dc1fa8b", &(0x7f0000000340)=""/126}, 0x20)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r7 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r8 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r9 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r8, 0x2)
flock(r9, 0x2)
flock(r7, 0x1)
r10 = dup2(r7, r9)
r11 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r12 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r13 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r12, 0x2)
flock(r13, 0x2)
flock(r11, 0x1)
r14 = dup2(r11, r13)
dup3(r14, r12, 0x0)
ioctl$FS_IOC_FSGETXATTR(r12, 0x801c581f, &(0x7f0000000100)={0x5, 0xffff749a, 0x9, 0x4, 0x8c5f})
sendmsg$IPSET_CMD_HEADER(r10, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x54, 0xc, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000)
ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x2400, 0x800)
dup3(r10, r8, 0x0)

[  284.809563][T15564] RSP: 002b:00007f473d0b5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000049
[  284.818104][T15564] RAX: ffffffffffffffda RBX: 00007f473d0b66d4 RCX: 000000000045b349
[  284.826070][T15564] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000005
[  284.834512][T15564] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  284.842558][T15564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[  284.850506][T15564] R13: 00000000000000c6 R14: 00000000004c201c R15: 0000000000000002
[  284.980789][T15581] FAULT_INJECTION: forcing a failure.
[  284.980789][T15581] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  284.994399][T15581] CPU: 0 PID: 15581 Comm: syz-executor.3 Not tainted 5.4.15-syzkaller-01128-gb2b96d09ef40 #0
[  285.004556][T15581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  285.014595][T15581] Call Trace:
[  285.017913][T15581]  dump_stack+0x1b0/0x228
[  285.022230][T15581]  ? devkmsg_release+0x127/0x127
[  285.027155][T15581]  ? unwind_next_frame+0x415/0x870
[  285.032267][T15581]  ? show_regs_print_info+0x18/0x18
[  285.037462][T15581]  should_fail+0x6fb/0x860
[  285.041879][T15581]  ? setup_fault_attr+0x2b0/0x2b0
[  285.046902][T15581]  ? stack_trace_save+0x1e0/0x1e0
[  285.052073][T15581]  should_fail_alloc_page+0x4f/0x60
[  285.058253][T15581]  __alloc_pages_nodemask+0x274/0x3010
[  285.063698][T15581]  ? arch_stack_walk+0x98/0xe0
[  285.068545][T15581]  ? stack_trace_save+0x111/0x1e0
[  285.073692][T15581]  ? stack_trace_snprint+0x150/0x150
[  285.078964][T15581]  ? gfp_pfmemalloc_allowed+0x140/0x140
[  285.084491][T15581]  ? _raw_spin_lock+0xa1/0x170
[  285.089241][T15581]  ? _raw_spin_trylock_bh+0x190/0x190
[  285.094750][T15581]  ? kasan_slab_free+0xe/0x10
[  285.100367][T15581]  ? flock_lock_inode+0x1157/0x1c60
[  285.105544][T15581]  ? locks_lock_inode_wait+0x22d/0x3f0
[  285.111100][T15581]  ? __kasan_check_read+0x11/0x20
[  285.117381][T15581]  ? _raw_spin_unlock+0x9/0x20
[  285.122158][T15581]  ? sugov_update_single+0xcfd/0x1010
[  285.127524][T15581]  alloc_slab_page+0x3f/0x390
[  285.132192][T15581]  ? __perf_event_task_sched_in+0x4ed/0x550
[  285.138118][T15581]  new_slab+0x98/0x430
[  285.142184][T15581]  ? setup_fault_attr+0x2b0/0x2b0
[  285.147240][T15581]  ___slab_alloc+0x2e0/0x450
[  285.151888][T15581]  ? flock_lock_inode+0x35b/0x1c60
[  285.157534][T15581]  ? __should_failslab+0x11a/0x160
[  285.162630][T15581]  ? flock_lock_inode+0x35b/0x1c60
[  285.167731][T15581]  kmem_cache_alloc+0x203/0x2b0
[  285.172624][T15581]  ? locks_get_lock_context+0xe6/0x380
[  285.178067][T15581]  flock_lock_inode+0x35b/0x1c60
[  285.182987][T15581]  ? lease_setup+0x140/0x140
[  285.187717][T15581]  ? finish_wait+0x17d/0x190
[  285.192469][T15581]  locks_lock_inode_wait+0x22d/0x3f0
[  285.197745][T15581]  ? fcntl_setlease+0x750/0x750
[  285.202602][T15581]  ? init_wait_entry+0xe0/0xe0
[  285.207477][T15581]  ? __should_failslab+0x11a/0x160
[  285.212693][T15581]  ? selinux_file_lock+0x4e/0x60
[  285.217618][T15581]  ? security_file_lock+0xab/0xc0
[  285.222640][T15581]  __se_sys_flock+0x45b/0x560
[  285.227317][T15581]  __x64_sys_flock+0x5b/0x70
[  285.234140][T15581]  do_syscall_64+0xc0/0x100
[  285.238685][T15581]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  285.244691][T15581] RIP: 0033:0x45b349
[  285.248578][T15581] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  285.268545][T15581] RSP: 002b:00007f473d0b5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000049
[  285.277081][T15581] RAX: ffffffffffffffda RBX: 00007f473d0b66d4 RCX: 000000000045b349
[  285.285064][T15581] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000005
[  285.293222][T15581] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  285.301241][T15581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[  285.309308][T15581] R13: 00000000000000c6 R14: 00000000004c201c R15: 0000000000000003
13:50:51 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x0)
r4 = dup2(r1, 0xffffffffffffffff)
dup3(r4, r2, 0x0)

13:50:51 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
r2 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r3, 0x2)
flock(r4, 0x2)
flock(r2, 0x1)
r5 = dup2(r2, r4)
dup3(r5, r3, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0xf, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2f8e8cd123810089c5800000000000"], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:51 executing program 3 (fault-call:7 fault-nth:4):
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:51 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0x40086602, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  285.328974][T15565] binder: 15563:15565 ioctl 40046205 0 returned -22
[  285.344222][T15570] debugfs: File '15566' in directory 'proc' already present!
[  285.369710][T15596] binder: 15594:15596 ioctl 40046205 0 returned -22
13:50:51 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})
r2 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r3, 0x2)
r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0)
r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICLIST(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x48, r5, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20)
flock(r2, 0x1)
dup2(r2, r3)
ioctl$USBDEVFS_GET_CAPABILITIES(r2, 0x8004551a, &(0x7f0000000000))

[  285.377506][T15599] binder: 15566:15599 ioctl 40046205 0 returned -22
[  285.379825][T15604] binder: 15603:15604 ioctl 40046205 0 returned -22
[  285.396974][T15606] binder: 15605:15606 ioctl 40046205 0 returned -22
13:50:51 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

[  285.437651][T15610] binder: 15603:15610 ioctl 40086602 200000c0 returned -22
13:50:51 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x8)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:51 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000940)={@empty, <r3=>0x0}, &(0x7f0000000980)=0x14)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000020c0)=[{{&(0x7f00000005c0)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000600)="ef3206af4bac2be82ca31e6f64c65a666173e756e4b64528315911a13596d1512341281a1e0fc0de451c66f461704dfca0743cd9ce0851c0e33873cbcfd6380ccf206fa3496c3c702804bb2aa7c83c2a8e3f10099ce17651473654e923d9746e189b19110006b8a964a4bff5b1af8460f09441b1b1fc374641cddf55354b3075fbece14189ab54bc5b123d566b03bb04ba490832ce76b16fbfdf6717890e1ea40c5f5aec5791986cd723f46402123296ce6d68c2b4da3b54d1bae5586981851bc6bd66511b744ef980da527dd850d8bf4fcc4d73d59c3cfd02305cab58a5bc0bdafa496809049b9b360ece793e2dea6ea7967c", 0xf3}, {&(0x7f0000000700)="00de1716db68fd987b086b30bbc01a0ca5ecef6038c94c6ab9951387419eb8f8678d8230021dcbdc1a9eae994534a211d25f815e345ee551d622b56a7b3b53e76abd8edc31920076d1628e420ca62de47037de5d1ef3793fe53a698f5289843cebaeb0501b1caa35", 0x68}, {&(0x7f0000000780)="115861980c4b0bbc2e7e943111bdab8613a8ec17303412dd908f55344358b2e1d01d791b366d2952cf135cd9d134d241428e91749e210976dd8440b052fd750a8236c10d6ab47083fc3e30493f9d649e8a1bf9e1ec0b6e8b700d35be47e7f3a7934e86a73bf94822c99ade11fa82b1e9d2fdb19aa7512570d22b1e545b87e49f7679beb0c877bf309c19a833b4db0aa2b7925b8c3fc536c0a520b9d24f6106f8e6a07ddebe66fbc10a8fcc6df1", 0xad}, {&(0x7f0000000840)="173298848274f7fe9c5b546002f9b9e94a0c11bb92997a1ff702058989223ff2b8535a94a8f91e21dab20a600268fb0e7c57849ec5258ff5b1d56c730e9661aa404451dc817fc14cdd453e828f33d56c6f3f9e36af251751cebf80e3059bc39a95673d17de357c64cecfb42a0263e0ecae2dc7fcd80f792f4484f0c5813ff8261ea9eb826cf65061c59be33212dd03f2b0e6d7fdb10e4a0e31082b09ed7d8bb41a8cd3a283bbfba7d8e5610abeaeb600b79b1cff9a966f", 0xb7}], 0x4, &(0x7f00000009c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @loopback}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @rand_addr=0x9, @multicast1}}}, @ip_retopts={{0x60, 0x0, 0x7, {[@cipso={0x86, 0x3b, 0x3, [{0x7, 0x9, "69fda3eaec25ac"}, {0x6, 0xc, "e6307360a955581a1338"}, {0x7, 0xe, "18ae1e684d0cd37bf5d2501a"}, {0x7, 0x12, "bde1aef88f9bab7ba35aaa4594fd393c"}]}, @timestamp_prespec={0x44, 0x14, 0xd3, 0x3, 0x5, [{@remote, 0xf8c}, {@remote, 0x8}]}, @noop]}}}], 0xb8}}, {{&(0x7f0000000a80)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000001f00)=[{&(0x7f0000000ac0)="92a93b24475dae0ef8979d3da74854ec8b5cfea34a5ddfca094eea3db7da992cb5050124194a68ea81ae66969d5660d6856796e3ce3b32c5d7d0f2a4d4ae7fb91422184c4793453a6a14e95fbf9b2a4eb2616b132b9c0d7c25dfee8f782a266c1673c86935c9a8a4b34d34ad7400a29f9a023ef589a7a5625f36ef08d40b295ef8a15e14b1c02c5c88267ff8da8bbceed9e91f8469c56469b6b1e8d2ba33dec8fee255b6f772", 0xa6}, {&(0x7f0000000b80)="d7f793370d67eac86ab3f78dc3c2e6509051623502518574f3d0a4f6ebacd003f55ef8ecc7fe6f6e8e2c1d61befff46eaa25b8c038c424d60f865037b4cc97ac9c246605d64ca92640995069f733090e1053996548359d87c457e1cf19c4fe85e1d3796d0b7dda0794a2f50e9169bfca8a30185c9f4a5975157f3d9602b03a5eb248085e92", 0x85}, {&(0x7f0000000c40)="b86dfc3395a2ec8846d4f68c4f2bcc4a94fdf78e0e7f84a1584fb4f0b1f4be3ba355eeb8b7d2e4701a3901b08d5baa31b8fc2eadc0044a9303156af446fada9719d6a956e3f770a08c5daedcb98593651b42371ba75190e4cb2c40699aa60c910a7f610762a7045a3935ca060c93e8f7c666aa398451370c3a6de479921940d3bc900bb6af0ea2f5206e67a6", 0x8c}, {&(0x7f0000000d00)="d00b128a7f7607c2682f138c78382121aeb6634e43c1ff342ef2590c309aef95917eed6e4b09", 0x26}, {&(0x7f0000000d40)="cfe15d5758ec67db28686eba3458b784d148c2bfbae070752b26c9c4caa0886129238b500cab2eeb", 0x28}, {&(0x7f0000000d80)="8fed82120b585dc84bbe26b07e4056eb7b444f4b6ec21accc3d742a504bbaa7c77d2230d9a8ef678354ee67ddbd7297e8fbfc5f3d827ea119b5d6afed13aacff89f40edee323c7bed67657866877c89c4b66c5ca7b0e57e1490579e7062f5c478c8d8a0d997e40cc458d73b0df993eef", 0x70}, {&(0x7f0000000e00)="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", 0x1000}, {&(0x7f0000001e00)="f691f46a4d7f3a4d61a938378083ba3333bf5ef51656cdc012c7823d126d510a307ed9b1a36647f639392b7db8475380521cd171bde6", 0x36}, {&(0x7f0000001e40)="510135657c", 0x5}, {&(0x7f0000001e80)="cfa37d93117647019130559cd609b434a9f3e1894f3f5ed197bdbda67f42f3c0a9027fbde4befb54ff2a0884ab9e32fd1d5edcad95762ee95dccb717aef7bdb228", 0x41}], 0xa, &(0x7f0000001fc0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x80000000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4b}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x2c, 0xd5, 0x3, 0x1, [{@multicast2, 0x800}, {@empty, 0x9}, {@multicast1, 0x5}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff}]}, @end, @rr={0x7, 0xf, 0x3c, [@dev={0xac, 0x14, 0x14, 0x16}, @loopback, @empty]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8ab}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xe1}}, @ip_retopts={{0x24, 0x0, 0x7, {[@noop, @lsrr={0x83, 0x13, 0x53, [@rand_addr=0x80, @loopback, @broadcast, @local]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0xf0}}], 0x2, 0xc000)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r4, 0x2)
flock(r1, 0x1)
r5 = dup2(r1, r4)
prctl$PR_GET_FPEXC(0xb, &(0x7f00000000c0))
dup3(r5, r2, 0x0)
r6 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000000200)="3081", 0x3, r6)
r7 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000000200)="3081", 0x3, r7)
keyctl$instantiate_iov(0x14, r6, &(0x7f0000000440)=[{&(0x7f0000000100)="18ab16d6d9fca9f5dbf3a8301e13f65b52d65bf4309d9528267e2cdd4c7add3a826e1f738a42048161de9dafc3397c0f354d9b57d45527ee6fd15e3b3310cc2be5f0dbe1dce5b27c9b413e1f458c9de91bc80d96e4c6d9c6ef4c098674c2e1ccd1f080e530559f00c1ba197b0cab84ffeb549f37b8a3786190638bd55e669e2a59dd99bbf87c35144a11947243dfc480866c91d7f113db1372e837dd74f14a4b681d8b846e9d3109bde2f61f936e27e8b9fce7f0a24fe5379eac5c6dabce566a0f9d190533d860c7eb271a0aacbb785f337566", 0xd3}, {&(0x7f0000000200)="f48a5bd495ebf2e2d9aa485b27bfae672a9d056bd9ba0ccb515c925ba1d8ac3085caada528ade291557c51df8ea4c523ee0d833fe6cc7552faa705a481733ce8c0030690d4d1efd6de1e", 0x4a}, {&(0x7f00000002c0)="a9527344149de8f8387d10d9be1585c8344dfaeb4b846892612c0b9ad8f241b87f08e70ce9a4e405d018f30eca8703c6c0e4d1ee874a40ed767eaaaf979930bbfee555e48cf035c7d82bdf07ecff9ac43338b6fd0f2836025a513eab595570dec1fd93026f986e4740d1457ce1fb6d368d2334dca01a0562e1396346a619ae36eb8c54086e3c8325765a638f2f0916", 0x8f}, {&(0x7f0000000380)="513b3eb8f92cb5c6da3e18e327b25ee382f8a843888f4ecf923cc18d4af1779b5550922a4647206ae999d178b059ff40bb2eb3427e5236fc6ef90088e9e364dfd74efd13622dac78d91e2ed5f26cd06417d48fe50e40dd1bbc99401e642f5425276fe3cb010e99ccc02aad4c0ac1238cba77823d35e7f7d2d8a3e76d19b81417450280db2b540b5b6b761814bf025ad07dd24b", 0x93}], 0x4, r7)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="34001f00", @ANYRES16=r8, @ANYBLOB="000425bddec3cf94df25200000000800010001000000feffffff04160000000000000c0099001cb9993e00000000"], 0x34}, 0x1, 0x0, 0x0, 0x400c0c1}, 0x800)

13:50:51 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f00000000c0)='./file0\x00', 0x60000, 0x90)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x5, 0x0, 0xcd, 0x20}, 0x14)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r4, 0x2)
flock(r1, 0x1)
r5 = dup2(r1, r4)
dup3(r5, r2, 0x0)

13:50:51 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x3}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x3}, 0x0)
r3 = getpid()
sched_setattr(r3, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x3}, 0x0)
r4 = getpid()
sched_setattr(r4, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x3}, 0x0)
clone3(&(0x7f00000003c0)={0x94201000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=<r5=>0x0, {0x3d}, &(0x7f0000000180)=""/112, 0x70, &(0x7f00000002c0)=""/205, &(0x7f0000000200)=[r0, 0xffffffffffffffff, r1, r2, r3, r4], 0x6}, 0x50)
sched_setattr(r5, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x400000}, 0x0)
r6 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r8 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r7, 0x2)
flock(r8, 0x2)
flock(r6, 0x1)
r9 = dup2(r6, r8)
dup3(r9, r7, 0x0)

13:50:51 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r4, 0x2)
flock(r3, 0x1)
dup2(r3, r4)
fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f00000000c0)='posixacl\x00', 0x0, 0x0)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r5, 0x2)
flock(r1, 0x1)
r6 = dup2(r1, r5)
dup3(r6, r2, 0x0)

13:50:51 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r5 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r6 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r5, 0x2)
flock(r6, 0x2)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000180)={0x20002000})
sendto$inet6(r7, 0x0, 0x7, 0x200408d4, &(0x7f0000000380)={0xa, 0x0, 0x0, @loopback}, 0x1c)
epoll_pwait(r8, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0)
flock(r4, 0x1)
r9 = dup2(r4, r6)
dup3(r9, r5, 0x0)
ioctl$VT_OPENQRY(r9, 0x5600, &(0x7f0000000180))
write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202e2f66696c65302091242065746830207a6d3040207070703076626f786e657430212023757365726264657673656c6629766d6e65bfca37ff54b82a88616e306367726f75705c7b5b293a747275737465646c6f70726f637e707070305c202020202a5e1c000a3f728c6b33c64e0064e8c9955f28b597c054db89d37aa22eb1bd40a3dd3c5c1d8ecabbd74c4f8d0c174fc5a045fe9f762f7e69ad981fd15098f58dbe"], 0xa6)
flock(r3, 0x2)
flock(r1, 0x1)
r10 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r11 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0xb7)
r12 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r11, 0x2)
flock(r12, 0x2)
flock(r10, 0x1)

[  286.055534][   T22] audit: type=1400 audit(1580219451.957:18079): avc:  denied  { block_suspend } for  pid=15652 comm="syz-executor.2" capability=36  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1
13:50:52 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x0)
r4 = dup2(r1, 0xffffffffffffffff)
dup3(r4, r2, 0x0)

13:50:52 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
ioctl$NS_GET_NSTYPE(r2, 0xb703, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x0, &(0x7f0000000140)="f4"})
accept(r2, &(0x7f0000000180)=@hci, &(0x7f0000000000)=0x80)

13:50:52 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0x40087602, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  286.181643][T15604] binder: 15603:15604 ioctl 40046205 0 returned -22
[  286.201412][T15612] debugfs: File '15605' in directory 'proc' already present!
13:50:52 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
timerfd_create(0x9, 0x400)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  286.228501][T15667] binder: 15666:15667 ioctl 40046205 0 returned -22
[  286.236065][T15668] binder: 15665:15668 ioctl 40046205 0 returned -22
[  286.244610][T15671] binder: 15670:15671 ioctl 40046205 0 returned -22
[  286.281688][T15674] binder: 15666:15674 ioctl 40087602 200000c0 returned -22
13:50:52 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
r4 = request_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='^\x00', 0xffffffffffffffff)
keyctl$read(0xb, r4, &(0x7f0000000180)=""/153, 0x99)
flock(r1, 0x1)
r5 = dup2(r1, r3)
dup3(r5, r2, 0x0)

13:50:52 executing program 3:
prlimit64(0xffffffffffffffff, 0x9, &(0x7f0000000280)={0x9, 0xfffffffffffffff9}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$dupfd(r2, 0x0, r1)
r3 = dup2(0xffffffffffffffff, r1)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'gretap0\x00', 0x400})
r4 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r5 = open(&(0x7f0000000000)='./file0\x00', 0x240082, 0x0)
r6 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r5, 0x2)
flock(r6, 0x2)
flock(r4, 0x1)
ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607)
r7 = dup2(r4, r6)
dup3(r7, r5, 0x0)

13:50:52 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fcntl$dupfd(r6, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
write(r7, &(0x7f00000000c0)="aabf0e1ee437942f1b54b9ec39870c060c5993e88e1e325bfee7e5bc001c519d0f06ce1b95806d912c17a5869420f373adb4bd69b26d2dc4a65d37264e58b53b5e07b53f69f496be70d57400c1", 0x4d)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0)='NLBL_MGMT\x00')
sendmsg$NLBL_MGMT_C_VERSION(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r10, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x80)
r11 = fcntl$dupfd(r9, 0x0, r8)
ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200)
r12 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r13 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r13, 0x2)
flock(r12, 0x1)
dup2(r12, r13)
setsockopt$inet_MCAST_JOIN_GROUP(r13, 0x0, 0x2a, &(0x7f0000000300)={0x8, {{0x2, 0x4e20, @empty}}}, 0x88)
r14 = dup2(0xffffffffffffffff, r11)
inotify_add_watch(r14, &(0x7f0000000140)='./file0/file0\x00', 0x200)
dup3(r4, r2, 0x0)

13:50:52 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000580))
flock(r2, 0x2)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f00000005c0)='trusted.overlay.nlink\x00', &(0x7f0000000600)={'U-', 0x2}, 0x16, 0x0)
flock(r5, 0x2)
flock(r4, 0x1)
dup2(r4, r5)
flock(r4, 0x2)
flock(r1, 0x1)
recvmsg(r2, &(0x7f0000000540)={&(0x7f00000000c0)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000140)=""/64, 0x40}, {&(0x7f0000000180)=""/195, 0xc3}, {&(0x7f00000002c0)=""/28, 0x1c}, {&(0x7f0000000300)=""/180, 0xb4}, {&(0x7f00000003c0)=""/115, 0x73}], 0x5, &(0x7f00000004c0)=""/66, 0x42}, 0x40000000)
r6 = dup2(r1, r3)
dup3(r6, r2, 0x0)
ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000640)={0x1, 0x0, {0x3a, 0x9, 0xa, 0x1e, 0x7, 0x5, 0x0, 0x146}})

13:50:52 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x0)
r4 = dup2(r1, 0xffffffffffffffff)
dup3(r4, r2, 0x0)

13:50:52 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})
ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000080))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$dupfd(r3, 0x0, r2)
fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000000)=0x4)

13:50:52 executing program 0:
lsetxattr$security_capability(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='security.capability\x00', &(0x7f0000000380)=@v1={0x1000000, [{0x4, 0xa74}]}, 0xc, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
prctl$PR_SET_DUMPABLE(0x4, 0x1)
ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000000200)="3081", 0x3, r1)
r2 = request_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)='/dev/binder#\x00', r1)
request_key(&(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000180)='/dev/binder#\x00', r2)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r4, 0x2)
flock(r3, 0x1)
dup2(r3, r4)
syncfs(r4)
ioctl$EVIOCGVERSION(r3, 0x80044501, &(0x7f00000003c0)=""/131)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1f307e0b2dce367b06ebe73fb2d84ddecb09d389597dc630beeb5732311a9eca9a414a64b04a0505a94aae09d00cfa04dd6983a6c5e46fb4dfec61fbfa0bb283e260cc0fed6312536d538367fd72a6c3bf4a50c87e9a8d0f55952671e923b3dc95cc09a7bf3a6be695b0588669659311a4bf441e23b55a88ad32a09d7c395c24d38ad295a9054bf18fcbe3361a9fe036cf380252dbd188f8cdbb724368279e4a5826840de69bbfeadd4e7a306f64661e0472a963cc3c2d2d98cbda31c1e591a13bdac026af4d2b070516da5d"], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  287.029452][T15667] binder: 15666:15667 ioctl 40046205 0 returned -22
[  287.036709][T15675] debugfs: File '15665' in directory 'proc' already present!
[  287.044357][T15700] binder: 15665:15700 ioctl 40046205 0 returned -22
13:50:53 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:53 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'ipvlan0\x00', 0x1000})
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000080)="f4"})
r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000000200)="3081", 0x3, r3)
r4 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)="1dd8c954ad18c9cbb169c1b78f8c9e1be2bb21e1718892634cfdfff9694dacdaa3104cd0b1458393012156e851abd62f90af06827e114f77fa6131a651bf46e746ceae8915bf72bfa816ef0ffc108a53efc6c4c15c4129d45de046bbedcc575797ad8272c24693e6bc1546e1a24e897a1b71d7ac7673d8a4401db11ddad4772be8970a328bd1c5d005d14a2ccce2301af696", 0x92, r3)
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000002c0)={r4, 0x2, 0x76}, &(0x7f0000000380)={'enc=', 'oaep', ' hash=', {'xxhash64\x00'}}, &(0x7f0000000300)="1247", &(0x7f0000000400)=""/118)

[  287.079621][T15706] binder: 15705:15706 ioctl 40046205 0 returned -22
[  287.118789][T15711] binder: 15710:15711 ioctl 40046205 0 returned -22
[  287.163441][T15717] binder: 15716:15717 ioctl 40046205 0 returned -22
13:50:53 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r5, 0x2)
flock(r4, 0x1)
dup2(r4, r5)
r6 = dup2(r4, r3)
dup3(r6, r2, 0x0)

13:50:53 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000100))
dup3(r4, r2, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x1, 0x0)

13:50:53 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0xc)
flock(r7, 0x2)
flock(r1, 0x1)
r8 = dup2(r1, r3)
dup3(r8, r2, 0x0)

13:50:53 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x0)
dup2(r1, r3)
dup3(0xffffffffffffffff, r2, 0x0)

13:50:53 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = epoll_create1(0x0)
vmsplice(r0, &(0x7f0000000540)=[{&(0x7f0000000180)="de3a0132c269b11ee9a8ab70990131a98ae2caad06cad1c6dd4a203b777b5ebefde1f2fc457454a367c840e546ab2da9270454dcced5850f7b0424721a8fc6794ae11ee4861961a63096f1bdeff0d218f5a76919ed75cd73f612386438b15a859dc27c199f26f58b49907386641b9573b123c42a2e09c95e404cef0f7d059485caac8ea360dfc922", 0x88}, {&(0x7f00000002c0)="a348f882cfc40840f49c8390d8b73161ee7a23f1da65ee4123d5731fd3b793f5106673d6c78cde4e8b1652c50dba94217584f6380cbed5b93f88176998b3b5847ec3d7fce270b70f01b708e5274e9bf9459cfa1edeede99d6c239910ad183b0d34303adc040dc0013038ffda5f", 0x6d}, {&(0x7f0000000000)="d7c59b728ecbf3f8928a3e6734d163da03d4b79abbd11ff772037cdde0a679bb3e77b64f99bb3894da2c", 0x2a}, {&(0x7f0000000080)}, {&(0x7f0000000380)="ddae2bdf0067854619b3170a8615f8cc86eaa304cc273c88028833d5840fac0050e3183f52f6ce458f523795f640572cd7637ead259b62202e565af04dd5a646e044f20de15a70250b11ce67ea324621143edc48a70b47121808d06dc049c27d4dfd44e1eec2", 0x66}, {&(0x7f0000000240)="6e9c02afc72654e1a270a3b6d2c2a862af307b034f3b423e337d18a473a17d4485", 0x21}, {&(0x7f0000000400)="1a9f18c436a5b6dd55d922e81e7af02b390d97b9dd7bb2d5167deba94464e4da468e24", 0x23}, {&(0x7f0000000440)="6029aa2eaba71a06c9d6cffe1cecd9178283d2de9398c4c1b2dc37", 0x1b}, {&(0x7f0000000480)="828c64028792df373295358649a70875637e61931574f33511f8330a923913e48d19a56e268ca0325d0ee11d27244ca6b3ac73ebcbb93da7cd9867986d2090463ff9c255c6dc7d6b0e5e40a60dc2a895b632a56e8f9a4833315fb2f65741434ec297a11d8df80108f804567e9eecc8c5d994283708660f27f82721ce98f5e1be5ba2", 0x82}], 0x9, 0xa)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:53 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x10000024, 0x0, 0x4}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
write$binfmt_elf64(r2, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x9, 0x20, 0x4, 0x80000001, 0x3, 0x6, 0x8001, 0x2c, 0x40, 0x1f4, 0xff, 0x3, 0x38, 0x2, 0xffff, 0x3, 0x1}, [{0x60000000, 0x3, 0x0, 0x9, 0x1000, 0x2f9, 0x1, 0x100000000008}, {0x60000000, 0x8, 0x20, 0x100000001, 0x6, 0x101, 0x8, 0x1}], "569dad9023fd380315abd280b184fa4fdae88dbac7f5d79f0034991118da7891ef08b8339073972fadbde4", [[], [], [], [], [], [], [], [], [], []]}, 0xadb)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x20800, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f0000000100)=0x6)
r5 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r6 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r6, 0x2)
flock(r5, 0x1)
dup2(r5, r6)
openat$cgroup_type(r5, &(0x7f00000001c0)='cgroup.type\x00', 0x2, 0x0)
flock(r3, 0x2)
flock(r1, 0x1)
r7 = dup2(r1, r3)
dup3(r7, r2, 0x0)

13:50:53 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0x4020940d, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:53 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})
r2 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r3, 0x2)
flock(r2, 0x1)
prctl$PR_GET_SECUREBITS(0x1b)
read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
dup2(r2, r3)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00', <r4=>0x0})
r5 = getuid()
setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@mcast1, @in=@local, 0x4e22, 0x200, 0x4e20, 0x56, 0xa, 0x80, 0x0, 0x6, r4, r5}, {0x0, 0xfe, 0x3, 0x2c1, 0x401, 0x0, 0x97, 0xffffffff}, {0xfff, 0x4, 0x3, 0x100000000}, 0x1, 0x6e6bb8, 0x1, 0x1, 0x1, 0x2}, {{@in6=@remote, 0x4d4, 0x32}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0xf}, 0x34ff, 0x1, 0x0, 0x2, 0x3, 0xf87f, 0x1}}, 0xe8)

[  287.903971][T15745] binder: 15744:15745 ioctl 40046205 0 returned -22
[  287.919800][T15711] binder: 15710:15711 ioctl 40046205 0 returned -22
[  287.940413][T15752] binder: 15751:15752 ioctl 40046205 0 returned -22
[  287.974846][T15761] binder: 15760:15761 ioctl 40046205 0 returned -22
13:50:54 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x4}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:54 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x10)
dup3(r4, r2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
fcntl$dupfd(r6, 0x0, r5)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x810, r5, 0xb2693000)

13:50:54 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x0)
dup2(r1, r3)
dup3(0xffffffffffffffff, r2, 0x0)

13:50:54 executing program 1:
prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0)
write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18, 0x0, 0x8}, 0x18)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  288.711785][T15782] binder: 15781:15782 ioctl 40046205 0 returned -22
13:50:54 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
accept4(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000140)=0x80, 0x80000)
dup3(r4, r2, 0x0)

13:50:54 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x1a1)
flock(r2, 0x2)
flock(r3, 0x2)
prctl$PR_SET_ENDIAN(0x14, 0x1)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:54 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r3, 0x2)
flock(r2, 0x1)
dup2(r2, r3)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000005040)='TIPC\x00')
bpf$OBJ_GET_MAP(0x7, &(0x7f0000005180)={&(0x7f0000005140)='./file0\x00', 0x0, 0x10}, 0x10)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000005100)={&(0x7f0000005000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000050c0)={&(0x7f0000005080)={0x30, r4, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000004fc0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fcntl$dupfd(r6, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
clock_gettime(0x0, &(0x7f0000004f40)={<r8=>0x0, <r9=>0x0})
recvmmsg(r7, &(0x7f0000004e00)=[{{&(0x7f0000000180)=@phonet, 0x80, &(0x7f0000000000)=[{&(0x7f0000000200)=""/120, 0x78}, {&(0x7f0000000380)=""/242, 0xf2}, {&(0x7f00000002c0)=""/74, 0x4a}], 0x3, &(0x7f0000000480)=""/196, 0xc4}, 0x7}, {{&(0x7f0000000580)=@tipc, 0x80, &(0x7f0000001840)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000080)=""/30, 0x1e}, {&(0x7f0000001600)=""/57, 0x39}, {&(0x7f0000001640)=""/249, 0xf9}, {&(0x7f0000001740)=""/53, 0x35}, {&(0x7f0000001780)=""/96, 0x60}, {&(0x7f0000001800)=""/15, 0xf}], 0x7, &(0x7f00000018c0)=""/173, 0xad}, 0x80}, {{&(0x7f0000001980)=@xdp, 0x80, &(0x7f0000002a40)=[{&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/44, 0x2c}], 0x2, &(0x7f0000002a80)=""/167, 0xa7}, 0x7f}, {{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000002b40)=""/4096, 0x1000}, {&(0x7f0000003b40)=""/100, 0x64}], 0x2, &(0x7f0000003c00)=""/51, 0x33}, 0x5cb60732}, {{&(0x7f0000003c40)=@isdn, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000003cc0)=""/4096, 0x1000}, {&(0x7f0000004cc0)=""/195, 0xc3}], 0x2}, 0x100}], 0x5, 0x40012040, &(0x7f0000004f80)={r8, r9+30000000})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  288.736274][   T22] audit: type=1400 audit(1580219454.637:18080): avc:  denied  { map } for  pid=15774 comm="syz-executor.3" path="socket:[40694]" dev="sockfs" ino=40694 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=unix_stream_socket permissive=1
[  288.765277][T15752] binder: 15751:15752 ioctl 40046205 0 returned -22
[  288.786613][T15786] binder: 15781:15786 unknown command 48
13:50:54 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0x80086601, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  288.805518][T15786] binder: 15781:15786 ioctl c0306201 200000c0 returned -22
[  288.810799][T15795] binder: 15793:15795 ioctl 40046205 0 returned -22
[  288.829268][T15798] binder: 15797:15798 ioctl 40046205 0 returned -22
13:50:54 executing program 2:
prlimit64(0x0, 0x4, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
sched_yield()
flock(r3, 0x2)
flock(r1, 0x1)
dup2(r1, r3)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r5, 0x2)
flock(r4, 0x1)
dup2(r4, r5)
r6 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r7 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r7, 0x2)
flock(r6, 0x1)
dup2(r6, r7)
r8 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0)
dup3(r8, r5, 0x0)

13:50:54 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
sendmsg$IPSET_CMD_RENAME(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, 0x5, 0x6, 0x582, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4004080)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x7)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r1, 0x2)
flock(r2, 0x2)
flock(r0, 0x1)
r3 = dup2(r0, r2)
dup3(r3, r1, 0x0)

[  288.881954][T15802] binder: 15797:15802 ioctl 80086601 200000c0 returned -22
13:50:54 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
socket$pptp(0x18, 0x1, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:55 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$dupfd(r5, 0x0, r4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fcntl$dupfd(r7, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$sock_SIOCOUTQNSD(r8, 0x894b, &(0x7f00000000c0))
flock(r2, 0x2)
r9 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
ioctl$TUNSETTXFILTER(r9, 0x400454d1, &(0x7f0000000140)={0x0, 0x2, [@local, @empty]})
flock(r3, 0x2)
flock(r1, 0x1)
r10 = dup2(r1, r3)
dup3(r10, r2, 0x0)

13:50:55 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$P9_RCLUNK(r0, &(0x7f0000000100)={0x7, 0x79, 0x1}, 0x7)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
io_setup(0x3, &(0x7f0000000140)=<r5=>0x0)
r6 = open(&(0x7f0000000040)='./file0\x00', 0x2402fc, 0x0)
r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r8 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r7, 0x2)
flock(r8, 0x2)
flock(r6, 0x1)
r9 = dup2(r6, r8)
dup3(r9, r7, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
io_submit(r5, 0x3, &(0x7f0000000500)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x3, r1, &(0x7f0000000180)="09a729d8bd9b0f0b6f8b45b3626d5d19a5a4e5065ee436749efad29a04a914806bcc29d2ae1b89149808d3f2bf59bd6b86882841dfbfd9841bd8a3b722e725c02b9eb6403889bfd5ba333b09ce065294e890b1a7adddf16d642a864b4656d37b9b0aba82296d1756eac54b2698493e7f30ea35a7d9340699dba3cec7cee1ff258d4e68fe0f622db11073f8f9d96f5b3552ceaee082594de958c5a942e17787dcc0c11c94246f03098bf11beaedc219a952372cc3432b8d5454f01333c55bfada648e9ba1e90a77178099743faef76a3ce14ae43a0ea02122291a27976e1a9344ada2", 0xe2, 0xd4, 0x0, 0x2, r9}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000300)="94d44445702e5a43661adb1490ec826af67743205a342de65dcaa5beadbdaa19f09772f97738574a87c9e5f146034b97fb32ec57d42771cbb2fa39dbdcf09c929c34001fe8a8b94d270a84f492db98c7e5c44b96cf74a1a9b6bb52e6e817095d1f945b26c1c9774a4cd3a5e0ba68fd079d380fd83984ab3072d3a2996f1a9608ec9e8d7bae3363d4c42aa53395554cfdd5b857f5c8411b90eb4ca447e3a5e638f32a89aa976101ffbef60505e8baaac92953ceb1d263114f6715f1709801f63f5309f22990ca74b8586abcfa04734db4dd087ae2326ca9e3e876", 0xda, 0x4, 0x0, 0x3, r1}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3, 0x2, 0xffffffffffffffff, &(0x7f0000000440)="9b3994df2168bbf1d4101fa83ea9c4ad1b643de583cd3ed033c32ca404474f33d2a70880b97caaffd1d352f41662e83bb434128852e10f75bb811f9df40b776f0942bf", 0x43, 0x400, 0x0, 0x3, r12}])
r13 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r4, 0x2)
flock(r13, 0x2)
flock(r3, 0x1)
r14 = getpid()
sched_setattr(r14, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x3}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r15=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=0x3, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x7, 0x1}, 0x0, 0x0, &(0x7f0000000600)={0x3, 0xd, 0x7fff, 0x9}, &(0x7f0000000640)=0x3, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=0xafbc}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r14, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000540)='!\x00', r15}, 0x30)
r16 = dup2(r3, r13)
dup3(r16, r4, 0x0)

13:50:55 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x0)
dup2(r1, r3)
dup3(0xffffffffffffffff, r2, 0x0)

13:50:55 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffff, 0x4}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b6300006d430feb2531ea23482baade810830ec9710cbf1e7711302680be49c68702d2b31f65853f0e0d51dac3461ac14c312eff589f8a2f01b6a1c8d6b9c8b1f69cfb37b4d7b90e6bf16b8d6bb89fc1626358e573a421a2fb9216ae9a1d18a61d569266041dd467fd37a54c0801cfecf16c8f9b46ae8bef28437996e3028c07162882dd3729894845a314418065c53723c856a0484d6e4fcf85a90e93ba218900966208289ed88"], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  289.516257][T15782] binder: 15781:15782 ioctl 40046205 0 returned -22
[  289.533729][T15837] binder: 15836:15837 ioctl 40046205 0 returned -22
13:50:55 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
epoll_wait(r4, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x3f000000)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:55 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0x80087601, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:55 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x1})
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r4 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x6, 0x0, 0x7f, 0x80, 0x0, 0x8, 0x81a08, 0xf, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x80000001, 0x2, @perf_config_ext={0x4, 0x100000001}, 0x211a, 0x1, 0x9, 0x0, 0x7, 0x4, 0x8}, 0x0, 0x6, r2, 0x6)
perf_event_open$cgroup(&(0x7f00000000c0)={0x1, 0x70, 0xff, 0x3f, 0xc7, 0x80, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x2, 0x25d5}, 0x4293, 0x280d, 0x336, 0x8, 0x1, 0xe9, 0x100}, r3, 0x0, r4, 0x1)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r5 = dup2(r1, r3)
dup3(r5, r2, 0x0)

[  289.622677][T15843] binder: 15842:15843 ioctl 40046205 0 returned -22
[  289.630062][T15798] binder: 15797:15798 ioctl 40046205 0 returned -22
[  289.660629][T15846] binder: 15845:15846 ioctl 40046205 0 returned -22
[  289.712762][T15851] binder: 15845:15851 ioctl 80087601 200000c0 returned -22
13:50:55 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x200102, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:55 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x202001, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:55 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0)
r5 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r6 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r7 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r6, 0x2)
flock(r7, 0x2)
flock(r5, 0x1)
r8 = dup2(r5, r7)
dup3(r8, r6, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self\x00', 0x14880, 0x0)
r9 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r10 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r10, 0x2)
flock(r9, 0x1)
dup2(r9, r10)
r11 = dup2(r9, r4)
dup3(r11, r2, 0x0)

13:50:55 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0xffffffffffffffff}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
r5 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r6 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r7 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r6, 0x2)
flock(r7, 0x2)
r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x8000, 0x0)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00')
sendmsg$NL80211_CMD_NEW_STATION(r8, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="610000de4500", @ANYRES16=r9, @ANYBLOB="00042dbd7000fcdbdf25130000001c008100050001000900000005000200f600000005000100440000000800a40001000000060012010000000005007400030000000600ab00f00000000600100065070000"], 0x58}, 0x1, 0x0, 0x0, 0x40040}, 0x4080)
flock(r5, 0x1)
r10 = dup2(r5, r7)
r11 = getpid()
sched_setattr(r11, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x3}, 0x0)
r12 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r13=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r13, 0x0)
r14 = getegid()
setsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000000c0)={r11, r13, r14}, 0xc)
dup3(r10, r6, 0x0)
r15 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$FS_IOC_FIEMAP(r15, 0xc020660b, &(0x7f0000000300)={0x200, 0xd, 0x3, 0x6, 0x4, [{0x2, 0x1, 0x1f, [], 0x1181}, {0xfffffffffffffc01, 0xdbeb, 0x1, [], 0x800}, {0x5, 0xf19, 0x100, [], 0x2008}, {0x7, 0x4, 0x1000}]})
dup3(r4, r6, 0x0)

13:50:56 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x0)
r4 = dup2(r1, r3)
dup3(r4, 0xffffffffffffffff, 0x0)

13:50:56 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x1802)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
pkey_alloc(0x0, 0x0)
pkey_alloc(0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:56 executing program 1:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  290.334706][T15837] binder: 15836:15837 ioctl 40046205 0 returned -22
[  290.354879][T15883] binder: 15882:15883 ioctl 40046205 0 returned -22
[  290.363379][T15883] binder: 15882:15883 ioctl c0306201 20000280 returned -11
[  290.371333][T15883] binder: 15882:15883 ioctl c0306201 200000c0 returned -11
13:50:56 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0)
ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000080)=""/44)
r2 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  290.389879][T15889] binder: 15888:15889 ioctl 40046205 0 returned -22
13:50:56 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  290.433031][T15892] binder: 15891:15892 ioctl 40046205 0 returned -22
[  290.453677][T15846] binder: 15845:15846 ioctl 40046205 0 returned -22
[  290.475695][T15896] binder: 15895:15896 ioctl 40046205 0 returned -22
13:50:56 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:56 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in, @in6=@dev}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f00000001c0)=0xe8)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:56 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
creat(&(0x7f00000000c0)='./file0\x00', 0x6)
flock(r3, 0x2)
flock(r1, 0x1)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000100)='l2tp\x00')
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:56 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x54, r4, 0x200, 0x70bd25, 0x25dfdc01, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:vmware_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x811)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2c00000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r4, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr="042184b847c2dbb15d0a2081c75248c9"}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004000}, 0x40800)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r5 = dup2(r1, r3)
dup3(r5, r2, 0x0)

13:50:56 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
pipe2(&(0x7f00000000c0)={<r1=>0xffffffffffffffff}, 0x4000)
write$FUSE_OPEN(r1, &(0x7f0000000100)={0x20, 0x0, 0x3, {0x0, 0x13}}, 0x20)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r3, 0x2)
flock(r4, 0x2)
flock(r2, 0x1)
r5 = dup2(r2, r4)
dup3(r5, r3, 0x0)

13:50:56 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:56 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x5, &(0x7f00000000c0)=[{0x6, 0x3a, 0x4b, 0xfff}, {0xcc8d, 0x0, 0x9, 0x7}, {0x800, 0x9, 0x4, 0x9}, {0x4, 0x3, 0x2, 0x8}, {0x1, 0x48, 0x9}]})
flock(r1, 0x1)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00')
sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xa082}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x10)
r5 = dup2(r1, r3)
dup3(r5, r2, 0x0)

13:50:57 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x0)
r4 = dup2(r1, r3)
dup3(r4, 0xffffffffffffffff, 0x0)

13:50:57 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:57 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r3, 0x2)
flock(r2, 0x1)
dup2(r2, r3)
write$P9_RWSTAT(r3, &(0x7f00000000c0)={0x7, 0x7f, 0x2}, 0x7)
r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r4, 0x2)
flock(r5, 0x2)
flock(r1, 0x1)
r6 = dup2(r1, r5)
dup3(r6, r4, 0x0)

13:50:57 executing program 1:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)
accept4(r2, &(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r5=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}}, &(0x7f00000002c0)=0x80, 0x800)
sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xc0, 0xb, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x80000000}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xfffffffd}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xfffffffd}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_SKBPRIO={0x8}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x10000}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_ADT={0x4}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40}, 0x4000841)
r6 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r6, 0x40046205, 0x0)
r7 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r8 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r9 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r8, 0x2)
flock(r9, 0x2)
flock(r7, 0x1)
r10 = dup2(r7, r9)
dup3(r10, r8, 0x0)
r11 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r12 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r12, 0x2)
flock(r11, 0x1)
dup2(r11, r12)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r11, 0x400c6615, &(0x7f0000000480)={0x0, @adiantum})
ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)='C'})
r13 = fsopen(&(0x7f0000000000)='cramfs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r13, 0x1, &(0x7f0000000080)='/dev/binder#\x00', &(0x7f0000000180)='/dev/binder#\x00', 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  291.189939][T15889] binder: 15888:15889 ioctl 40046205 0 returned -22
13:50:57 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:57 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x11c, r7, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff6d5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2000000}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xc0}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000000}]}]}, 0x11c}}, 0x40001)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r8 = dup2(r1, r3)
dup3(r8, r2, 0x0)

13:50:57 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
r2 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r3, 0x2)
flock(r2, 0x1)
dup2(r2, r3)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r5, 0x2)
flock(r4, 0x1)
dup2(r4, r5)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
fcntl$dupfd(r7, 0x0, r6)
r8 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r9 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r9, 0x2)
flock(r8, 0x1)
dup2(r8, r9)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4a, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="3c46e5643f76e9b6f80b3cc7aa0ce5feff86337a4c63f53fd8c04ffdbf8bda00cd5b7fe5432afd2832dbd716565e28fdc6d3ffa756fbdf23299388006fe6b8f19d23", @ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES64=r1, @ANYRES64=r1, @ANYBLOB="3b6296987e36b7e92d2c24662c7eaad0d21dd6aa401010a60eff15ead840d1d28cebcefec1f4f7e3387d45dc4ed796243dbbe956ab3fd3e412375a94a47b564288ddc5bfc0", @ANYPTR, @ANYRES16=r4, @ANYRESOCT=r6, @ANYRES16=r8]], 0x127, 0x0, &(0x7f0000000380)="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"})

[  291.276602][T15896] binder: 15895:15896 ioctl 40046205 0 returned -22
[  291.343703][T15958] binder: 15957:15958 ioctl 40046205 0 returned -22
[  291.345638][T15969] binder: 15966:15969 ioctl 40046205 0 returned -22
[  291.350881][T15968] binder: 15964:15968 ioctl 40046205 0 returned -22
13:50:57 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x19)
r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000000200)="3081", 0x3, r3)
keyctl$unlink(0x9, r3, 0xfffffffffffffff9)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r4, 0x2)
flock(r1, 0x1)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)='cgroup.subtree_control\x00', 0x2, 0x0)
inotify_init()
r6 = dup2(r5, r2)
prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f)
dup3(r6, r2, 0x0)

[  291.550694][T15983] binder: 15964:15983 unknown command 1692747324
[  291.558339][T15983] binder: 15964:15983 ioctl c0306201 200000c0 returned -22
13:50:57 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x0)
r4 = dup2(r1, r3)
dup3(r4, 0xffffffffffffffff, 0x0)

13:50:57 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
r2 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f0000000140)=0x65)
prctl$PR_GET_SECUREBITS(0x1b)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r6 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r8 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r7, 0x5)
flock(r8, 0x2)
flock(r6, 0x1)
r9 = dup2(r6, r8)
dup3(r9, r7, 0x0)
ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000380)=ANY=[@ANYBLOB="05000000000000003f0000000000000006000000020000000a0000000000000004000000000000000101000000000000ddf2ffffffffffff0000000000000000000000000000000081020000000000000000000000000000ff070000000000000300000000000000010000000000000000000000000000000000000000000000022800000000000000000000000000002d890000000080002f0000000000000000000000408001000000000000000000000000000000000000040000000000000000000000000000000000000000000006000000000000000500000000000000000000000000000000000800000000000408000000000000000000000000000000100000000000004f0000000000000003000000000000000000000000000000000000000000000001000000000000000000000000000000bdf3ffffffffffff4de4773900000000560c0000000000000000000000000000000000000000000009080000000000000000000000000000060000000000000003000000000000002000000000000000000000000000000000000000000000008001000000000000000000000000000007000000000000000200000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000007f0c0000000000006e0a000000000000020000000000000000000000000000000000000000000000802900000000000000000000000000000300000000000000080000000000000038ffffffffffffff000000000000000000000000000000000300"/592])
flock(r3, 0x2)
flock(r5, 0x2)
flock(r2, 0x1)
r10 = dup2(r2, r5)
dup3(r10, r3, 0x0)
ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, &(0x7f0000000180)})

13:50:57 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r5, 0x2)
flock(r4, 0x1)
dup2(r4, r5)
getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000140)=0x54)
flock(r2, 0x2)
flock(r3, 0x2)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x1, 0x70, 0xf2, 0x0, 0x6, 0x4, 0x0, 0x9, 0xc142d, 0x8, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_bp={&(0x7f0000000180), 0x2}, 0x19060, 0x3, 0xcb1, 0x6, 0x5, 0x7, 0xffff})
flock(r1, 0x1)
r6 = dup2(r1, r3)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, 0x1, 0x8, 0xa01, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x886c}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0xd0}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x2404c051}, 0xc0)
dup3(r6, r2, 0x0)

[  292.048450][T15958] binder: 15957:15958 ioctl 40046205 0 returned -22
[  292.083840][T15995] binder: 15994:15995 ioctl 40046205 0 returned -22
13:50:58 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="749e03d62d0d8af0c355f323358b8ac896370505e72b54436f7c9b1f8cd154f189024e540f1e762a6a2501a0e271885b6fdba2e42907c3ad5ddbc643e3e746cb631991b13d41a883a4ca8a82f0644825ec5c161532089f2a0aa6f6a6715359bb1b2b3545046b374ce3ecc027a277dff1bedec358"], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:58 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  292.145962][T15969] binder: 15966:15969 ioctl 40046205 0 returned -22
[  292.168840][T16003] binder: 16001:16003 ioctl 40046205 0 returned -22
[  292.176046][T16002] binder: 16000:16002 ioctl 40046205 0 returned -22
[  292.221729][T16006] binder: 16001:16006 unknown command -704405900
[  292.230224][T16006] binder: 16001:16006 ioctl c0306201 200000c0 returned -22
13:50:58 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r4, 0x2)
flock(r3, 0x1)
r5 = dup2(r3, r4)
r6 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r8 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r7, 0x2)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x3}, 0x0)
ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000015c0)=<r10=>0x0)
r11 = getegid()
r12 = getegid()
setregid(r11, r12)
r13 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r14 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r15 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r14, 0x2)
flock(r15, 0x2)
flock(r13, 0x1)
r16 = dup2(r13, r15)
dup3(r16, r14, 0x0)
r17 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r18 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r18, 0x2)
flock(r17, 0x1)
dup2(r17, r18)
r19 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r20 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r20, 0x2)
flock(r19, 0x1)
dup2(r19, r20)
getresuid(&(0x7f0000001600), &(0x7f0000001640), &(0x7f0000001680)=<r21=>0x0)
r22 = getegid()
r23 = getegid()
setregid(r22, r23)
r24 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r25 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r25, 0x2)
flock(r24, 0x1)
dup2(r24, r25)
r26 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r27=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r27, 0x0)
r28 = getgid()
r29 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r30 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r31 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r30, 0x2)
flock(r31, 0x2)
flock(r29, 0x1)
r32 = dup2(r29, r31)
dup3(r32, r30, 0x0)
r33 = socket$inet_udplite(0x2, 0x2, 0x88)
r34 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r35 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r35, 0x2)
flock(r34, 0x1)
dup2(r34, r35)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r36=>0xffffffffffffffff, <r37=>0xffffffffffffffff})
fcntl$dupfd(r37, 0x0, r36)
r38 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000002b40)='/selinux/validatetrans\x00', 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r39=>0xffffffffffffffff, <r40=>0xffffffffffffffff})
fcntl$dupfd(r40, 0x0, r39)
r41 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002b80)='/selinux/enforce\x00', 0x42000, 0x0)
r42 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r43 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r44 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r43, 0x2)
flock(r44, 0x2)
flock(r42, 0x1)
r45 = dup2(r42, r44)
dup3(r45, r43, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r46=>0xffffffffffffffff, <r47=>0xffffffffffffffff})
fcntl$dupfd(r47, 0x0, r46)
r48 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r49 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r50 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r49, 0x2)
flock(r50, 0x2)
flock(r48, 0x1)
r51 = dup2(r48, r50)
dup3(r51, r49, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r52=>0xffffffffffffffff, <r53=>0xffffffffffffffff})
r54 = fcntl$dupfd(r53, 0x0, r52)
ioctl$PERF_EVENT_IOC_ENABLE(r54, 0x8912, 0x400200)
r55 = getpid()
sched_setattr(r55, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x3}, 0x0)
lstat(&(0x7f0000002bc0)='./file0\x00', &(0x7f0000002c00)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
r57 = getpid()
sched_setattr(r57, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x3}, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002c80)={{{@in=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r58=>0x0}}, {{}, 0x0, @in=@multicast2}}, &(0x7f0000002d80)=0xe8)
r59 = getegid()
r60 = getegid()
setregid(r59, r60)
r61 = getpid()
sched_setattr(r61, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x3}, 0x0)
r62 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r62, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r63=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r63, 0x0)
r64 = getegid()
r65 = getegid()
setregid(r64, r65)
r66 = openat$dir(0xffffffffffffff9c, &(0x7f0000002dc0)='./file0\x00', 0x4000, 0x8)
r67 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r68 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r68, 0x2)
flock(r67, 0x1)
dup2(r67, r68)
r69 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r69, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r70=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r70, 0x0)
fstat(r5, &(0x7f0000002e00)={0x0, 0x0, 0x0, 0x0, 0x0, <r71=>0x0})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r72=>0xffffffffffffffff, <r73=>0xffffffffffffffff})
fcntl$dupfd(r73, 0x0, r72)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r74=>0xffffffffffffffff, <r75=>0xffffffffffffffff})
fcntl$dupfd(r75, 0x0, r74)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r76=>0xffffffffffffffff, <r77=>0xffffffffffffffff})
fcntl$dupfd(r77, 0x0, r76)
r78 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r79 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r79, 0x2)
flock(r78, 0x1)
dup2(r78, r79)
r80 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r81 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r81, 0x2)
flock(r80, 0x1)
dup2(r80, r81)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r82=>0xffffffffffffffff, <r83=>0xffffffffffffffff})
fcntl$dupfd(r83, 0x0, r82)
r84 = openat$null(0xffffffffffffff9c, &(0x7f0000003380)='/dev/null\x00', 0x10000, 0x0)
r85 = eventfd2(0x6, 0x80000)
r86 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r87 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r88 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r87, 0x2)
flock(r88, 0x2)
flock(r86, 0x1)
r89 = dup2(r86, r88)
dup3(r89, r87, 0x0)
r90 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r91 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r92 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r91, 0x2)
flock(r92, 0x2)
flock(r90, 0x1)
r93 = dup2(r90, r92)
dup3(r93, r91, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r94=>0xffffffffffffffff, <r95=>0xffffffffffffffff})
r96 = fcntl$dupfd(r95, 0x0, r94)
ioctl$PERF_EVENT_IOC_ENABLE(r96, 0x8912, 0x400200)
r97 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r98 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r99 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r98, 0x2)
flock(r99, 0x2)
flock(r97, 0x1)
r100 = dup2(r97, r99)
dup3(r100, r98, 0x0)
r101 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r102 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r102, 0x2)
flock(r101, 0x1)
dup2(r101, r102)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r103=>0xffffffffffffffff, <r104=>0xffffffffffffffff})
fcntl$dupfd(r104, 0x0, r103)
r105 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r106 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r107 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r106, 0x2)
flock(r107, 0x2)
flock(r105, 0x1)
r108 = dup2(r105, r107)
dup3(r108, r106, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000003680)='./file0\x00', &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, <r109=>0x0}, 0x2000)
lstat(&(0x7f0000003740)='./file0\x00', &(0x7f0000003780)={0x0, 0x0, 0x0, 0x0, 0x0, <r110=>0x0})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r111=>0xffffffffffffffff, <r112=>0xffffffffffffffff})
fcntl$dupfd(r112, 0x0, r111)
r113 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r114 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r115 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r114, 0x2)
flock(r115, 0x2)
flock(r113, 0x1)
r116 = dup2(r113, r115)
dup3(r116, r114, 0x0)
getsockopt$sock_cred(r116, 0x1, 0x11, &(0x7f0000003800)={<r117=>0x0}, &(0x7f0000003840)=0xc)
getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000003880)={{{@in6=@ipv4={[], [], @local}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r118=>0x0}}, {{@in6}, 0x0, @in6=@remote}}, &(0x7f0000003980)=0xe8)
r119 = getegid()
newfstatat(0xffffffffffffff9c, &(0x7f00000039c0)='./file0\x00', &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x0, <r120=>0x0}, 0x6000)
statx(r7, &(0x7f0000003a80)='./file0\x00', 0x1000, 0x2, &(0x7f0000003ac0)={0x0, 0x0, 0x0, 0x0, 0x0, <r121=>0x0})
r122 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r122, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r123=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r123, 0x0)
r124 = getgid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r125=>0xffffffffffffffff, <r126=>0xffffffffffffffff})
fcntl$dupfd(r126, 0x0, r125)
getsockopt$sock_cred(r126, 0x1, 0x11, &(0x7f00000077c0)={<r127=>0x0}, &(0x7f0000007800)=0xc)
r128 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r128, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r129=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r129, 0x0)
r130 = getegid()
r131 = getegid()
setregid(r130, r131)
r132 = syz_open_pts(r5, 0x10000)
r133 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r134 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r134, 0x2)
flock(r133, 0x1)
dup2(r133, r134)
r135 = fcntl$getown(r134, 0x9)
r136 = getuid()
r137 = getegid()
r138 = getegid()
setregid(r137, r138)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r139=>0xffffffffffffffff, <r140=>0xffffffffffffffff})
fcntl$dupfd(r140, 0x0, r139)
r141 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r142 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r142, 0x2)
flock(r141, 0x1)
dup2(r141, r142)
r143 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r144 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r144, 0x2)
flock(r143, 0x1)
dup2(r143, r144)
r145 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000007840)='/selinux/status\x00', 0x0, 0x0)
r146 = gettid()
r147 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r147, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r148=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r148, 0x0)
r149 = getegid()
r150 = getegid()
setregid(r149, r150)
r151 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000007880)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r152=>0xffffffffffffffff, <r153=>0xffffffffffffffff})
r154 = fcntl$dupfd(r153, 0x0, r152)
ioctl$PERF_EVENT_IOC_ENABLE(r154, 0x8912, 0x400200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r155=>0xffffffffffffffff, <r156=>0xffffffffffffffff})
r157 = fcntl$dupfd(r156, 0x0, r155)
ioctl$PERF_EVENT_IOC_ENABLE(r157, 0x8912, 0x400200)
r158 = openat$procfs(0xffffffffffffff9c, &(0x7f00000078c0)='/proc/asound/seq/clients\x00', 0x0, 0x0)
r159 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r160 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r160, 0x2)
flock(r159, 0x1)
dup2(r159, r160)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r161=>0xffffffffffffffff, <r162=>0xffffffffffffffff})
fcntl$dupfd(r162, 0x0, r161)
r163 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r164 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r164, 0x2)
flock(r163, 0x1)
dup2(r163, r164)
r165 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r166 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r166, 0x2)
flock(r165, 0x1)
dup2(r165, r166)
r167 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r168 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r169 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r168, 0x2)
flock(r169, 0x2)
flock(r167, 0x1)
r170 = dup2(r167, r169)
dup3(r170, r168, 0x0)
r171 = getegid()
r172 = getegid()
setregid(r171, r172)
sendmmsg$unix(r2, &(0x7f0000007d40)=[{&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001540)=[{&(0x7f00000002c0)="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", 0x1000}, {&(0x7f0000000140)="391bbc7355ea936122b7a38ce605893cb339e4cd32755c6f5a32e616a41848c7aa5bd4aac4060e29bfc3977318a280a294b6a43ea77ea9626c6c065cd3fd342b56e28c0787d8d2ecf467dbf23fdb2a8674bd72c670d214efe99a2d3a59455bd16bc1ec8389ccb4796fa1879100f805001d6b531cd32916fd1ff519cc25c29f53881c546fce8b33cefe65a1afbc83a0b905a5c2a1366b77078a2ab77c560640d582b8c1d508c3ef2ad2281948031a6e9debe5e643809dbae411c88c6887f278789cd3f05c585d7f71241d40a09fb140dbdc0279b1435383a50bdcec3cf511e6c3a905d4110cd5e22005d66296d93c3428b305071f1d", 0xf5}, {&(0x7f00000012c0)="1f1bc18d9e92b2455172e83302df68fb1b42bd8a4152c581575f7dc0da87075b0c7f708b432e6e4e4caf196f5666258f6a56120dc195cffa2b33ccbcfbdc016f7d20295e251799b1b21e2aabf2d5e257b4b031b1f3b29babbc11b3cf5011a57b320f5c49ec6f9277537b04b45cdb999677a77095df5e8159ef1b48efbcf36da515f63cf39ca62d7f7781cd25a422d2c9111e0f212465369a0b7d06b3e18f74bdf3b6f538327273fed438364e15b09bee4346e614f0aa1ed269bbba9f6b01ba553adc22fd8b1d30df5e4870a7092612914862021b08a0d666fd5e530fd322e48aea9e65b953fcc626da670a7725381b4d705a7e1efef1", 0xf6}, {&(0x7f00000013c0)="a00dcc19502225d1bffcacc83dbfaec91a6538c894e64629c9f5579c3db95b316e1dc63c37bfbcc24320eaa74536ed5f7c1fb8b6ef194d2bdea053db16690ca7eec69ff35c028c778b88fc151cfb9147cd843cc0a4fac54b313a9535af2759547be49e14be19151d62af06d8b3a7d5c6798409ba", 0x74}, {&(0x7f0000001440)="32d69b424e76ab45b13748362ab84bf4c95dbd15ae27252cb4c3c60cf6ca1c2c68ac6a54961d48c2361bbf75a34d843e35177ae21f59908d7c98858e8cb47b6824cfa934145cf8e8bb47fea720299f848970813f594c7b8994553f446c1f7b29f7c16d23f5901e4d4ab16543d120243286612f27dea7f45f8352cd229a07f0e3f08b4e213df4b5cbcc9c0940e29c3fa67728d6d5253fc7442136761590097af54dea08ffc736dbaa94b05de6d68378f70eb5327d4914b6562e22ca7623bca8e4d902e3c09ce82112", 0xc8}, {&(0x7f0000000240)="630b3994242a171b9664c2da13127cffd275d57c0863da2161384a44af974eeca2dfcf9b1ae00dbed828e8f578", 0x2d}], 0x6, &(0x7f00000016c0)=[@cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @rights={{0x18, 0x1, 0x1, [r14, r1]}}, @rights={{0x18, 0x1, 0x1, [r18, r19]}}, @cred={{0x1c, 0x1, 0x2, {r0, r21, r23}}}, @rights={{0x14, 0x1, 0x1, [r25]}}], 0x88, 0x1}, {&(0x7f0000001780)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000002ac0)=[{&(0x7f0000001800)="00c3e29cde92eff8392405f4c0de2ad06fa6b7e61066aa4d7ef85b4ba34d3942ddb3b9cc0fc5a6074e40a44b6fa9da637affd36d8cc89ab7b3a7597aa7ded8f176b6346d62aee36f54e6645da4ad659fafd7bf088ad9db1f9a86b073701674a8edf36df39646e679ef8bc7ad23dcc27b1cf6bc0958c0b970e944c7187a4b249991d18a221b44f64b3db8fe788f3da141f7da5db731d25a84895967676fc04a22fd12bbed491ab8d2dbc838b1f585446ef8b0174f3fc388bb51048c81", 0xbc}, {&(0x7f00000018c0)="39cd3cba9b41b1d08a5f118f7f33f01a1e554f96c4975f64425effde339578c057ae5a958fadea95eef99ed43cb852ccb907c8923dff37f78d02e54190720466f904e75c15b5c18e87116570b08b46f5bf611a4e089ec28fcff16f323e76a1d49aee06252e6e35ac7f2b2ae3b4673c4c77f4dac7473c0d2f094dd15048e3a6b533270a654196a9e738d7fd1c344abf20aad94581b5ae62feaf2694334a3a40d37b5395a5060c590917a1e74819a7b7b130c535db7841ea8af2d7b5db58493cf0abf76aafd9d20a979ba97af2e772fb1182aa94e8dee3bff2c3f1085141af97d08f9a20c2ed3e82a2224ad16e3075f7b2498e", 0xf2}, {&(0x7f00000019c0)="5e013a112c349e83f44a64e0c8fb33a5854b98671d00ee80a2608e7add3ded5ec799f1fa68c3bffc224e5eb1ad66c2453a1eaaebe4942e1ddd327775df84a7581b32ce682fb333cb8eba7ddf09c7e163f13e858c320fa2ce709e", 0x5a}, {&(0x7f0000001a40)="618846ead13feaa3689d3f1024f7719520ab8d5b51c704e15a4467b797ff3a31cd0f0bb614d68e7437921368fc39f2793511eef2563d8c53bc237c222cbe01fb36ac4402c82c3a1f1f23c8", 0x4b}, {&(0x7f0000001ac0)="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", 0x1000}], 0x5, &(0x7f0000002e80)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r27, r28}}}, @rights={{0x18, 0x1, 0x1, [r30, r33]}}, @rights={{0x20, 0x1, 0x1, [r35, r36, r1, r4]}}, @rights={{0x34, 0x1, 0x1, [r38, r39, r41, r45, r1, r3, r46, r51, r54]}}, @cred={{0x1c, 0x1, 0x2, {r55, 0x0, r56}}}, @cred={{0x1c, 0x1, 0x2, {r57, r58, r60}}}, @cred={{0x1c, 0x1, 0x2, {r61, r63, r64}}}, @rights={{0x1c, 0x1, 0x1, [r7, r66, r68]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r70, r71}}}, @rights={{0x28, 0x1, 0x1, [r73, r74, r76, r78, r81, r83]}}], 0x158, 0x4}, {&(0x7f0000003000)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000003340)=[{&(0x7f0000003080)="788fe18dcefde9b7bea9d9d10b09a743831eff076cc219482b0d427569a8cfd82ade7979c297f6b292917315e78bc8514cf4d471081832e342e3ddbd99ebc97b43958665041a815804cecef614f808778277718327f9e5ec6c77a4c153da2f16a246a053bd6210d2c2ac7cd4d38c204e6de4f657e82761064d053e413630b463d6ecb8d252f0e38fc7ca337c7d3db782a72ba3d65a420dd60d2f3e8b9a", 0x9d}, {&(0x7f0000003140)="852fa0be23f1dd2cb850727bab3a8ca7a3ea", 0x12}, {&(0x7f0000003180)="138cd48d52d0af35a1c9b8013c503a1cfe423476c8381438d850bcc04ecc05dc7d8ca632a466e1049139fa973cf9fae6309641f26706af7f4c9f7021e9891898217c5ae351f15b420393948f9036f776d5ca3558e841ae1cae939c3e7b99205b41e3994d8e98a0951ce61a93f2445e678bf920213123166802ca4b87742789b11c72fb6cdeb25e6e1c4c2513324e2bc1ad8d58f72c1759e0ed0f960054ee011ec293b26e82d9057bddffd7647657", 0xae}, {&(0x7f0000003240)="511c48b2819588dc772de80b28deac95d119d6e47a7c98ad35818efaeed6384101bd7c8aaaa0eae017a43e94156ccf341094b799d52c73b7915974f20677544291b20d777f096cf952b12ec903b807bcd50766cfa60a38e70109f818dcf004469352ef0c4584b0e6c52b53862b1a58e8ffbad9ffa68941ce086a1561a4e4b816943c6ad006c0dd467769868caf1f4bd778e66b0b0278db7d67c25147026f5f52f794f01f645dc05e687e7a89bc3a2777b6da9dd6f65cae4492621c86a11d3fd2519cf3b133020a37f671", 0xca}], 0x4, &(0x7f0000007f00)=ANY=[@ANYBLOB="2c00000002000000010000000100000008fe390d85d04d1892b35a9b175f41550af6f17427360887c9689c04362a45ef3db63cee2b0cf1d2590e704d8c60dca1d5b399fcc14ba11f8e3139cd03d0c3e38e859a0dfce136fd0efc8dd30850e20345b55df06c0eb931c038de38e7b8d3825dd3df600c89e4cb23705d38f09f", @ANYRES32=r84, @ANYRES32, @ANYRES32, @ANYRES32=r85, @ANYRES32=r89, @ANYRES32=r91, @ANYRES32=r6, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r96, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r98, @ANYRES32=r102, @ANYRES32=r103, @ANYRES32=r108], 0xd6, 0x4008080}, {&(0x7f0000003440)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000009100)=[{&(0x7f00000034c0)="1c3559b2b190bf9555975b88d81276bdd58ea114c1061d53c42c5a5a20c1ac98a902d024bed2541f2b6eea87fb16f959b694284c49290cfba3ac161e23ecd7", 0x3f}, {&(0x7f0000003500)="e77e8f3e1355f8bc2bf10f1e6497ec3f691437cf2962296281c3f8073690e7e64a11f23b39cf5d48e7b1d800c6f489c5deaf30f5f5b35544037620a3031f08428021d184f7eb6eb520eece340053f289974e2b2ad2503559baa283", 0x5b}, {&(0x7f0000003580)="801d0371d3", 0x5}, {&(0x7f00000035c0)="0482ae7a213f20bc1e3b689ee9f19427efb3ddfc100c75d1c0d3eece569c7569aa4bd4261ef1487e13ed3c68b8ec1a7a91f4117641609319b4a5279db35508105f9b2e9c99ba6f459ffd0eba946a1ac896c035b664b0422b8ed9113eb52f61a8837742d2", 0x64}, {&(0x7f0000008000)="07fb74a1c537b17834b74a14bd51285c50ae362548ce93e605a5aef09d94d1d90f6e030826ccc607a302d53ffe23a41fd767e775aeedbfbfc0838cff0d33a6812a98e04029c8cc149c699180d8973bc467bfbba23cb38829dd6d9a809164a333f98df0bddefed1a4c93bc861236029e8b5843d38d6cd1963f3905025cd17fc7760351c08c6ad9d104cb47ced7302e95dd5a1c3b773ba876d068ebf32cecd00e29047727cf76db688261373eba79d73aa058b029f63a048c6bfeed9265b3dfe90f0cc0d098f1964b68a73778baf78f553bece8bdd3a2abcb8aecb4f5dcdb1780cfa7bceba5e70ea14c67280e152fa455ab17236db375bb0a25e3e0610fcc043d2bdb624bfe8b410e9c0c35d839602f0dc8b30212d9bb2f9da769af9907f47592acc1b2f2dcafa895129b7a8fd3e1813504ed0704dc359e3f89529fa50856fe4e64794b35b03120569b3e75ab937c5819b7c35f777c13e9359162a55d5816af3cec8ca176c736b15254f429a620e27205f4b74ba14e1fbd7ee631d66f82e6e5e03d9e099cab8714cb2cd9b5de9248cc7969d9d6bcf590cdec293cc5f59968c872a9f01851d53cc668bd17ee72a0ec4b56ace053e522ee09d9187da8b544e0517f2e0cb18d6a4ea51fd0c4f8a00c0aa2f84add0f4098ceeb2b18d2cfc4c4f98e8e5c4c6cdc4ebc0fa0ad0417eaaf8e511b9610471c02e85a7f39b90db1de588248a49ef2972c96367a174b74d765e89202073936abebba9ffb1094ef497509ad3b4c01ab5bc3b97942fd88596876488973b2d11d18d1d37084282e9f0873625d1e6d2aca34faed0e3c7c4b8995788760f5ad9c56f334f598d84d7004001edcb908997f0d6bdaf73b6c811603f1327aac7437cffef5f3b06511bcafd3338f6e0002fcd4e7ce1e1a8027bf1395d641cd28d366ac15648b778300d36599b6b1cca0ef22e7edd949826207b2c254c38f0d151efea5ba3c2d0dcf544f96bfe788fb2f8aff7bfc21d50ff8467cd503cafb577edcd761e04efa4bd4d448e5c755718bd2290bac9d9bbb729fefe650a1a704f39f5be87887e407f722d019890734d77f9c7a100d380692de50ecd060e7b82ba59332a164b8e8c13122a26904edea8b45c1a11ec819cf9d81f60892581daa40f45ed91824bf7f0e7f84f43fa27e26439dc9492b7fccc30fd074bcfb403ca42827b7f82590987dbab5e724106cac99618cb48cc11fd8457e860434d483583d704dea71cb9b81e7170a94e2d620bf1be5a80d4945fac2cba5ac4587bd373fb71500a304fff3d9b403ac4a097a4eb89e2d300b9d4cb1d1c595bbde1e4f59013d2309e658a2726f59fd22b8036a582facea2e4a01ab901c7162de501448794ce0c9faf114323b2d4a41828eee88433486a1d147bc7ae10e8bc60f0701be0eb4699e4e053bf2d259933c895ec92cac564b0fcd66495bf0da5d20ce6feff7f7fba82112c6396a63f25ae49cb7695a89263ca87d24b14f52f223377640f37761a4f9e52e3e1c7e2e18b29e88ad1edb622cd293df82bb2584f10e3b0e202208479d1db494a95f59628bcfab5a5fbe7609021b0cba706c971837c513f12ffe7f95341282039ebbc607bbc4001e7124d9c3dccd371d79267366f75590904d826b2f8925547f2bc02a631394af16306db64c3fa319621f103fba38d49101d8c65503e431258e25b929a3a516cb3e842b9e43592019dc027fd7afde3a51289f49197e59522786a281d19a961021d7f01cc42baccc5eca0dfde92a093b54c1ba4e021e198643dab4ae5880459a03491fea7747b566263f2d2823e0bba3259e81018b717fd54824ec54ef063cf75ae022af86b7ef849340adc5a55685c76aece3243e5e541184175a0c232f91ec6f1c4a89e93eb72675c75749c91bc9c4252e78936f8d0921d6333b6b23ad7909055dee39bb0f7c649d411eb96c91792eadfc47301f5db12db0afed11c14000f8f6369398f36d7fcf5843a4ad83dfd759460617138ce76e2db195f6915b32e605c525848d34e945ccb31db8473fe726137523d32bbde2f067cad16a44b0d837e38a8835f92301ad55bdda1af6c901f9139cdf6368bef670c96e045dce1b6986f544e60b6569c88a4efa34dfe87c94663bcc675fad43f3d2b1dcf1defdf1c2ee0cd79edb348cbabc46b65f77f1503a55eb45e1675f337884e8601c97cfaa834aa8d5eda1fb69ab2e5a03923687f50b779fd5ab047b18c398b98f9454e000d290d759e9db6b7762e505f2cbc3c4ed31bb67eb761df8989d9845647b034a1c12bef64d73f7953fb5c818ff3c8c976bfdfa99c7654de631b6b7ad87637a792d6efc5dcb5565a1c9458a59aae5613c64b363386f373a0afaa85764fd966012db9c8265d1f314f285a9ca020d44511c265c411103e5479cc4d206fa616c7d11b9cbb6c17dc4d24924bffe0d224b3df16ce89d5bd4ba86b58e67142f594c95d10e84c5f9321df44d2c8bc3b7e6d73ad12502bf278592787684f2fddebe15f4fa4b90390551fcd505f983a6fc13fc021eb82a978f1eb065204870ebd1c4ec0891a4f5511119ca1d05928c98aec4628c6f7f88bd9bd16526bb69c2fd55e0a61408128b2ba967c5c7c896b59ff7839d924e0a0a0df5991427dd8980e938e0a77a2c5532cbceb0fb5095405e03ce7491a3272ac7c5d494de857316bf8b103ddb916b9d98f54589ea14d49e114b4aee25292fdfb336574aae7993f01d671e70f4e1945c069fd244b9c12349a1cecd2c44d0293e9550b7944a86747f8edb904538af74b99f65467ef22f02ac4136944b7025d9a322ea54cdb4f4f1a6e5edbebd1f5d0f416dd1939278438a12fe366c730dfa19b0d5ee1c0f493181249ab9754ddd7886041b18844d1a1fbd5fdacfb0fc665d34e161a3ae39251882f8f9eb71dd8e40b2f6e01e220744a99821e5c6a9abdfe2d1a39e18fdf08d22cbfc135606a3123097c9067e0271ecda8083f401f78ab08e90ac78b6e800b7730bcc79776ce9628b8410e816e5946448b48835d7af8858a8ca66ab1e11a0285a941dd53673db1c614daa75709bb236d9ff2e45098ea2645396771528daf08e553d9836dadaef430529f2708a80411609f106e52359ea44b9dec6177e8b4862b259c0e1f733382f9eec4bed9bae3b8befc63a4797dadcc1d00b72a4392cabbce850b953eebdf7b5f943489f80a5ba2356be37314f88a41e4bc1b2b49640cacc834e226a532402d320d5a6434bb01f144bb73afe9cb6b99ee99ee2452c2c6994a6e48f56d5211d697816f0983311631b7e4d42f6f70dbd0b7fad9b944be2dc8e0a380f36052fe641b0e15679975b1bf4ca5f57cfcb3ceddde365aa882e0394fa635f8371c2b00d8fbada20d58e18d4e5cd6c8f73759b68fb8133beb8772595f99481357407ac9b80fa4dcfc7cc27ebcd2dfd10a6740ae6677bd0d668015200e8f233b22b9aea24c67c7611a2be9090b856fbf3282e5e6871911f34006613a468e38381f01e040154711f0181d62f86a8f802b7c4b07bc4db46c9b401c2207cc10f0675b557d5a66e3d6da477f9b316c081767204aedce320d5c8f67ef6cb5433b756db9e4fb07d85a297c85286eafa9bffdcfff1278f78d30c5f7b06fad00a9598cb46068ed1ff6913a33e479b9b1e88974325c5fb10a133432b39eafcf0d6680d153320a5b41d0a1ac10b7d27de6b20181d2635a2782de05b71c7348596944d75feea0135091a5663f770b30c7b1da4a7b33a4322cf266ab49c4bd473b74dfd68b6667af54319a9be7823ccda7e7a4f81b666fc2db38c8e529debe8b5bca50e892a0076bd171d170f44d7446a834edb797637c42325aab35718eed88acf5813c423656a9517b0e405a2074ae60a87ed2d7bc959af965caa1ee7ba1fa38657d13d05d7fe489b882628f13f34ad746756b02d4b8f440a4a0a04a482dd42fa417bfe29bd4cdf8e1ff85ad839710f37e15e24ce4bfef82a05375468bf46eddf4dbcf5b0bee7246faf07cf484d06a5265bea6bc302ddd15ba3cf74865767743757f6e950a71483e2c69a768bbaba80a7142d26444672b959c258dbdd75a1bdf2aaee6e3a878969a54b4eb5f1b502f4a4bae004a0ed86c7fea803f5464c9cdf760fb489271a0f744028ae81a5347ee5e6d2bc4abbad6d78b25e99475a0c6fafa70c747780fc7c2c13f53d6fb9077333c1a17f6de0e9dbb39ae5007cb9dd0557ff7da23afcf80a7420a5559d87fe7ce16fa5158053a6eaf5fe134227b45a7e608bf41c7e52ffd0f63b1746f7eeaf86478f4375ce5dbc5bf92ef2f3f6ff593096be5d598a7258e67968c0b6701647416de3a2a867e151ebab380fa1078ed8af94a3a0c4e1a6ce59f2f97e865665fa8566648845bfad757f52e94af5c1835a0f3721e75af0e1886ab387c9d13d190e412a8b07e97d5b5545e16713ac537cfaa185d4eadb83f1d2963336df74f094200c8cb88e9abb6e2baf08d28847ae30f8afe30f4a43ab4aa77c68b767bba7339dd837fe0ea707befd051015837bc9bb80317fcc4edfd17ddc531195bc695a52c7244e0ad71491adc6aee449f450af36fd9d09d80f176e47f22ee4cde148f7ed7ce98065a4155565302ac9aa9b59f1d95c72343f6d1ddbe6de9c2e0f97c1ba5b7124eceacb85d2d55f1d8472c979e4d3c75532fc9dccafded4696316360248de43b3c3d599d6cfc2367c0c142c27df6eeed200c5f776dbdd4be6f36c2c05530ec9beaa2c80ce40baf06df05f939d6e0085ae0bbe45c54b97abbe0adb0f63e700c807839e78a7883c70cc64fd81de85bff6413b6bf6f6032aa834c4016f6e749cfdf9d967330fa9cfe0dab0386e33edafdb0ddbda65744b7a45501eb7da579feb37add63ef9a616be1888d80c76ec41fe9b121f9ff4e807aec370f7e6b009f7847610d893f9752427e085acd3ee9836c0048526e8f9355f192720543f98ba526449e231c4b813c84bceba2d8cd1e69f348a5c5f902a3d4c7f64b46af2491d0f2658426906fba7c97944474e7c98ef2bb6cb20dbf96f3316df517b3189b02922ec46fb26e46bfbbd99aa87f45816b2bc15e39bb33177c4c3c7ccbaacb179b9afddebd041b5eb77da72b831e516ae53b9ad7d3a4a9e38ff21408bf6a917a68b7c0d86cd2d4f34142307e394ed0ddf065340415eb5e0f80319d122ea3535a401e4dd015424ee046ed76516436cc3a266fd5d3c929d7a3c24b66829e3c43eceb4a9d835417254101521c0e9a83959bdabdae9ea7ecfbd99ea979f28dc0091ddb3f5404fc5ad177972436ce4b4d81b831376f225fbf5c36f7d6706be23bc8c48ef2c66dc913da573b4938ac83ff2ec8736eb4b042ce17c08635e7fb827619548791a3d0cc25a6e4731ec398484c9ee6e02d89f57c80eb7e6cd25a5cc55dd0ae5f331e2eb093ba31df0d0dd7e35c525da6f60107950c3360bca33afc89f55e5a10ea038ff63f16756dd3a03e28655481b6b92fc40101faed3b76ea91ee6418cd858af2ad26a2506241bd4706e006962818b6f3362c9b9bb1be3e2f77156ab130027e496f405244fb7c7c5505d3f0e515d8370d3af022a2c64d04c135c19bf88c90575c71be6bf2e487cefa6c61a4367cc2cc52f86410fb8296baccd8ee48348bda4bc92e16e0d48552217086b9dc992606373fb918b21a40d8caceb91b8b6377a07a074fc0f5338c3093d57d16e6c2ac0269f0774a86ba329cf2ee8dad6f7dd34272222f8da6beb222f2176f88033e8719a77b54f2c524f564ed0bfaa7c6b89e865874eb0306bf82d0ae5063b7939cb932cc3467", 0x1000}, {&(0x7f00000033c0)="4e86d0a07fdd2756de02cc3aa02bb157b49c4160259f61c27dc30432a855f041b949", 0x22}, {&(0x7f0000009000)="84d78ae551a91eb3ea9270b56ad30b2f06d52ea6c041f7a5bbe6384393aeb25fb9f9a299bb467a62e99ae25a6c98d9d8f65aeb1d5cc3dd822b736ac147b8f820af9e0881afd516cb3f0c805943f52f45531205ddc82a2f2f15684f82d69bd6b9d7f21e9f3483a5beca38043cc4c6390626bf2525f10e4fde1a74f054b7f0349f290c37d945530754fb6693602e4f1b33efe8c68ae6764ed0799898f6d7971674b95ad2aef6a0ec458f70c8bb85b8018811430b5890f010c91c89805c5b9be4a42f922019c76eab77aec33dbc1a9abc5648297fe9d6f67bd4aa5f3cb6584019339f7f582aacf839fd7b5c76", 0xeb}], 0x7, &(0x7f0000003bc0)=[@cred={{0x1c, 0x1, 0x2, {r0, r109, r110}}}, @rights={{0x14, 0x1, 0x1, [r112]}}, @cred={{0x1c, 0x1, 0x2, {r117, r118, r119}}}, @cred={{0x1c, 0x1, 0x2, {r0, r120, r121}}}, @rights={{0x1c, 0x1, 0x1, [r7, r8, r7]}}], 0x98, 0x24044094}, {&(0x7f0000003c80)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d00)="64f73b122cc3ae7a259a95844c55b64ba198e38eb466487b3828639c4696f58748cdca9d0e66d0438ffd0067351696e1d75ed36485abea8e0ccf3939dfcec1a209180ca8257aad157029b6ee6df80bccf9036869d3ed9775664c7309a03d7846e35ed1a0caae9105c9f2be2c6a119947d2d13ff8eb75e13cc391513272f4d1103cc72cd6d11af20440030a10f6ceae11d3b8fc791580891a64620430e9dc23e16a181bf14d1148ec148ef549a83aafcd221ddcc15e90b0b4546789d1c646aefd26ef631b8381065e1dbfc4068ece0ec9f74a9afc5c9056cee8f8f0dcd56ad8416f96205d765255a9f17ba58a56", 0xed}], 0x1, &(0x7f0000003e40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r6]}}], 0x18, 0xc000}, {&(0x7f0000003e80)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000007400)=[{&(0x7f0000003f00)="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", 0x1000}, {&(0x7f0000004f00)="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", 0x1000}, {&(0x7f0000005f00)="b601202a21d8479206eed3744da184c4968a3cf926488642f73770aa3106498dcb47c418e1370673f2134828757b86b3883000162f9e3681af7327b9c31dc887940bddda08a1daf4c3098e974e90cb3db8856d86925df34e1f672ed4e64ca8b54f5bdddec67012dde9c5f3263a5f4d70d0d0c7a16de8f1875fd32d3c1191eebcd3b2533371cadcdeca227496d35201023ec12d1a05da6022f9690bd280ce06cb44bf82f5cb7b45eefbef276dd6509303c4ecb7cfa84ea0e49a3ca7b4d034ef773be906f05b9ae5232739935164ea293ffff90b1c846daf52826edb2bc96ea88f751c0d6d049582ca9aa7628ea13bebe88d6ea9cc6b89871db79607587c05f39b6a299eeda03922c6754fe1b8647b7ee6c7267d70fe62b9d30e73a98bb98210be09c5e87b23e4a1c18eef65408091281bf9e018063893bf051cb3dfc742d1dedc931c440d7b726710acbd7cc220e2868b66314929212b5cd48c71b1b2493b9842e14c51c9a0abad703fbd1f23e0a807bd9501a75bb5c3ed8e1b2a9e327523e339af6b104b691c0e520b672c155de17cef1a289aad6806fdab19ee8f1dea2b67297569cb41969199831df8dce7f29f5f2436b3d16729b27c7c3ef65367f39aed36d00830034ae8c1c22893d419a3dee8d32a5d3981fd239677948dba686b55dfe9c6eb652a59387b736bf1ca21cef9abcb47ce5316c7422341951dfea6a3c0a46e6d173ba2ba8e31630ba27ea86a0dbb284f984e411c413ab6376bc55dee297e23149c383eb82d2dd76c23ca45a5a983952fdd811b78a2aa7056cb23bf4f31e976b0f6076f2192bd1af46b5b6e82f9688e9897736d0cf47414bb60fef1c885573d8c865b6a0269bd63c25fe5ff53cdff2fcd1e45771126eda4a8b06750292a36d3045a198893bc37dfa2635213aefbd66c6ab08240eaa09dbdc63320ef33256910fbf803a24f42fac0b5a885deadb6681faee3ef5e9f8adfb9ea4bcdc2339a55ae80149298d83c906641311c8dc6410abd0697aa9eeb3b6f209655cfe5aa919abc857e91aa4cd901619909238dbb6d571dabf3056b04ba5b75dc77c44aefd5c5f08acac31e910c301f31bc8bd4f636c3685b24e6e4f15b72cca0b3574fdc5984f6125589a9db026562f0cbbc2a4818687e1c1fb9bcac687faf46474f93b44e39f9b23d4b85b1fa6d4518b959c5fa3b1976e459c372f9a8b074b0fbc4d8737595d2b7378413a72fbaea649c19636d476c1f630af75acdbb3cccd66cea9e81638b09f4b699695cb3e77c940df0e8e2524530b31c60521b52c15493812b95e58dd86988aebdfeb351b0497a43f641d2bab1cf42442225cdac168631675ace1946f8496b00ac90094cfa1f760a6fad6b3b57ebaf276f485cc5caab91df6491b0aa7bba2917e314bbfa8e7b87c26b2cc72681b5e4202bf9b049851b4f29270eb82296cc8777359cfc9e3d786db85eb6ea4ff9fba35c31ecd10e886f1584247f6fe46d94708c2731ccb21e9a5f74cdfa2dc42daf544bd786cd727afaefaa33287f27012f69824a13f528dbeba110691d8d5f1981c7055412c7d53c0263165ffd859faa868d20fc7e002b0cbb172ea32ee52f9ee46b0578a155e1e6f1552afa088ceb6a81bc9b48af87fa93a9efa1b2904804f9bbe776d1120c06243e47b7cc401acbc9f527bb8c82e4d86cb6c0eef0ad8f4d1b7001fb1ccaf227666caa7934bec72af73d569eae248e8b0fd9e61766ad9b1975c668b177beb6f6f1a2cfde5b99d7a10f5c45c9af030494a56d0fe3f3128d8616e56bab57cdb458b754aea8b29f5231377caee8c27b3bab093bc3d407d4c4214245af77d5d427db5728c43a7b92513ffd7a0f35f409296175caa13112ebc07aa2732c1b2a136c3bd3b4f02f5a778cc880b32de5f62360cfd314031338ee95d645ad226fed4ecd509db863655b59f2524fa44b8a24e61ef8f46ebeeeeb5634490705ab7405eed973f7ac6f6f7d80876925b03af4af54a4ba43d6bc11544220f46a87a17558f51707a9d9f13e3466de82feabf933fb830d794c3cf7a17cc77b3341ae4feb2d852b954d1db284c66422241fd2a7860fc3faac12cb08c4dca10533495a474ef87ce0cb57e645d1b6e8102723697d021bd4729e7285b0c0c73dec1cd2c279a61bca55c6e838ee3b79d8a065f09f9428a90a1e65a23297a4e98459030179c1d00d902752313ba31ea2211bbd6aae455c07de2121facd3233e8e6cea92aada17f7e50cff30d06aa05c3c2953b34cb8b0f2fe50dfab65a775c5b229e0d7e65d359dfa76de5ea223e2a21f1112ca3cd24580beaec0bc90b70c11b45a8ec4df3007d77f5f4a76809f2e36d5a3ba1dd7891d3a5d2a1f70d56203c69ab44b5197afc127b7dc61fb43281f03ad46a2223d309eb894d1df3f34aea5a5cc2c6f703c6b14d45c3584a7caf53579e026726bacfce4c692eb03750654c56b3ab93c0098ad81f2764a4e09e67f502cd698d70b405f690fd807673744687f861ffed09e30bdf4f1527db96dcba3d7d00e108b512f97d062800a3c27ca826dfe80826bbd6f29ab0f39b3285d14dabcb62b1af514158176ff49c1b362b17530acb3e3a9083d360bd1bbed513c4caab8dccc088dd057077518282e474611de99d185149ac219f76e2dde43ec54f650229fbae53d58a2c4d96d51a527721aef746ffe51254715344f92c32c543348e46ec546d84a6675d29f487a1576972093b04ce2ed5dd150a93bce6120d74acfe857bb3f573c468475ff336db4c9a34b846badfcfabafcf4642f739569ebbab56af45b34f14159c4f51d63364bc4cb83b9e3eaed34c6e2b6543d43a43a1a7e3c0d4c9d63b15b971437f8874cc1fe8b65b794a45ee5df7f7557b4e861588204c6585bc5e3f81ebb5dc3edbd222a127d3d45bba457c154a6362e4ab8b5495f1e02e2ded430b2c458e7d78aa74ed484450da11886c68e4f8ac88a610ecd467721d71e809f2dc665efa01d57b918d5c4899758a73cbb8dd5a9f7f16921cd848cdad4f586276b8b73a4bb5c81fedfc49e1f7e609ecae54b2544f4bfc5b26fc6d84b3c4cc9a671ba27d02b6af4bd84e54c01166c12fd32216ae5409dda7455695646f1d0fffc7636a0aa8a01ac3a2f40dc4ce235ae19d5203f22a3ba03e9aa3c137bd72e367abf0fb4e7cf49e4ee1266268c71c18cb8a5b3c62099cccc8cc280c2556ab1e0c99e9742ae7bd39e9a6db3baffe04fc3e751af02f336d56fa053aebd41b384bb31faf1081ca0141049ca4087c6a37c0e17e243785b16729839f2a6d1dd7272cfabdaca2d01932af4dd93c8be6562c85e099d6cb35d0669da00f18cde7ac46dddff1fad999fda219a4916247dbb9a4694a09dfe64969da50eaa26c243902d6f28b54d36eef541d853f93c09bc576d42f406b9c748d2ce666bcbb1f811a2ea2b26c9d5da5f3ac66bbf1f74233989c06ce98d8a2ac26506374ca09ad61198bbdf48eef5c001c1fcb5a602a2acbf68159bb285110108baa1e83f7a7e1b95c29d04d558ff0288e1e78d17559ed1ae2e5b4b8e24dbd456da1c1eecb81a66a96f60e086c390f01a3c03291536923927e2f92afec3a6fc689347b7a20fbb44fe8ad847fb034e9df587692618cd551d41f8c61f22b83ca5fe0c70df87a5b3b5fb4d21a7c7330923ad3d5023d5de85c7725587666dacd091bce365d06e9917be46ea62bf65b1bae8f3c794fef116c2e018442269122cd4ff1d1ef79f19fb9198294413e60c8898bcb9c26a7b6220d4394f80e5e9137086a1dd15238c8119328b17bf3a3c1724b97e2020ba490daaa0364d2f4402b1fd58256517c5376a7c65eb4500a8510c1753f00a62726de055866f5fa8e1630bf47ccb7a09b355d773872f77945d9bc31e0084b5c40723e70f3f0c2b14333bdfcaa414577d91bd3f872c671cda7b24e20fef03b4824510dc61ad5677cfdb73ddc8f4fbe55ac9ddad7aaff87019b3e927750a4796e2a4e3e1c1409791e0c08651c0337db0a9417d1fc2f968992926fc99d1c7f18dcd4665bd9a1bda327d0ebe607cf6cf5446fa1cb0a85f482cdd0778200c34233028c6f46adc5cd2ae373a3696b760bddc3aacf4af44c58021cbc8edab0d1ddd0bbd2307d8d43c295edcb0120deecc0117c03502b564d7a616c1f3a584ee4aa3a37030186a24e1e0e08a779835a4917cdb369a944a0f377eb1119d11f1c19ae1b54f495f7070a0e3a6df573cf19a05b896981781081727ca0f8d180a18593b5bc0bbd2175f037d4376e4d751a27ce54957742a72ff990750bf054f69f5a5a5034f2dd940ccb3aa65f0dd3764b27c2aa178cab981c17737beef339f2462c388f6bdd2107fd040176f5095b5666e3886130238dad46e6fece66a2ef595ef50d2bc5fa82658d2be94a796f464a52165b61ecba9dc232dc800b549935d8572016d110b57601f5352d1873b1608064bc6f8acb677d068f426115b5d867f2549d54566454550c5c1f4621788f7dafb95d7b30be98c9cbabd8c9a3766808487550712794e67f41ad13b3c4a0bae285142657ff79709409eb171d328db5339dd49f09d954470358bbb1cef4fc2d37aaf4ec6b0a7f0bcde535b1218ca27bac553c58a46bf7af11389a1ec40674ae5662b8a9efb1860e4386320819e84f2b110ee766bfb057a11cd381d9fdf54800307f1674dcb0a2b145543cd229eff66992e437c067c2513fb28a9e747e69767c096ab18df9ef2f07127f7e3677f9ef3be2178847ebd3bd7096cb1e3ad7c07fa9d6ac56083752a29f15555efff15a172121956a500797a9100cab894cb2e887515172b4e76fd527bc5351d89f34b5190feff2f8b461e8f8f5b6bc23a44bda34c2e1cd0f57d53060f86b27088bb6cfb30aff474cd5dd940d93ff24a44c966cca4653ef5045bd676b04874a4b3307359271316485d8688b0105dfdab7b1e5481600589c094aaae79cff164d4d0709d110b9bb115bc5ca3cc6523c4a737873b77a6e7dcc342919b6e8fbff3c8ee898267293e8afb19c5429e88a10c928802728f0f7a49569307d8c63c04a61737451e80661d1509b2f23f80596463c5c46e1645debdd61fed81cf02cd2b7c30b10f11e6148fdaaf04543b5faed288770b50bae673cb0fd3f569c814b0018c5c4aeafe2b0d3a07506b0596c448034212098a55168eb976dbc2dfb1f2355a928c2fdc8a0dbc143989fec77dbb248c45155da1529be756656d58015910c85a3fda32172b17d231b3fc31c829a2ae25ef952f1d5303efa55515ea837ca4eaa5631012558ea06001fab0f6617ce1ce2057c80794b7be6f2f29520f56334f37f0b6e1d18c79b217ef2ad3a5ea10e3bf20b726d932981618e68756fd6f688d48f1de8233c1cea1f83b7f31da650ad9c673cac4f41ac39e05519fdd5089bcd997c94fce146b3b4dd24957934720ad1d36619051342694d163d0cc53c073aa303d27c7ced7ed383e0094119baa344149f3d0b52e1d01766ccb7aab654dff6cac43e735a90899e5ada794b9763fe06f32268d4999ec2a4f7e2e152b6eae261fb1d8ad570f44a879cbafacfce2e23f04c5ed5df479d40663f1de42bf52698dca7e3c5c84287ccd30464a18dee9dc153d202a251c1377ae1f25b53cf7248fa6f24393f38bcf8444ced51608fbfa2653fe0da5b56df7eb30de03b5873d3927f3b3f8a6f33de1cb52f658ad6e5ea4a82dd5b2aaa3c2f1268f3fb5d024c02040f8e0106a71913fe2363dc8c60d5b54a4d6b031cd3b4c234b9a9e73172720738db0dbcb223b288e057773faa11b99fd63e949dd279574b", 0x1000}, {&(0x7f0000006f00)="cab536c19ec4de5aa6d0eab3660c1c147a07d14f678b074301f6401deff461354ef25dd57642d4592c0f9e79993a7af68afab5665b52a909de54d5079cdbb7b18f527f0eb5c8e08b6ab46cc9470ef0abaa59b432eee60eda679164c631b7d5aee488985ccea74a131d1f1599ea578f5ec8871b8f1c3b694ed7940b4d38f8927b3b41159ecc453a439fd31a671670e6", 0x8f}, {&(0x7f0000006fc0)="fcc9d622a166b4a56e6158559e95b4d8e8ce4bed9d846236848318dc4654e8a17ff113c00a5aee884fc189b831dfeedaf02cbb6a5f13e9e1cda7df50851a701e79420f1e86aab9e364a06b04d454a2d6e1b2335e8117baae7205b5e78da3b0e7501d826e50a92a9fb7a033022cd25d319ca7da943972871ddee874637462b148a8e3fbfd65ed9598dc5d20fa359e76087046bf3e829018911328412c114c54d1aa51f31c9382f5944c4bc9dbe6b3d6df13b23c64ee76a35be8d1e8e38f6c8fb3e8f94227d2b2", 0xc6}, {&(0x7f00000070c0)="71dc8a783ec1e8657a6ff620b1de3a0de0b4b08a598feecab21671eb5eb35a2a677aba6ff52b8031d1e4fb313412150866ddc196ed56b48dad01cb4c2d6507a7b406d814de407418b2b4b9849c833e7ade56a3dc3b50aea8b7fc6fdde9e23815cb2159438571cdcd7517ac9db13db3509148568b36448f68dfca7cbe32158b338fde5a327775c4eeeb8a0a8eabe4f81b2199b050c1a50366a154999e62f21504528368f46ddf095b24b001aa8f3499d295bce831915c331786f15c72959d31590dfadc566fbfb494aae80b8c66", 0xcd}, {&(0x7f00000071c0)="ef5b445e122bd6de26910caa86aceb45d55dfbd6f87dc744b28ace2a50341847d42c2052255ee898b3897bf98c491cb2337faf725921c67486bd218279834a84337ef99ff2459338cd06763922a71e57fdd415e5d94cedc440f5ebca176e52d4c3a1f5b0f9efe0e68d248d041088e81ca54195732540d6c24275e257b6e1d2d1efc3f683bf37f4a60798c293eb2ee805ac962c52c1c3e90a765e4783fa08f8d10023b0b80b0c8d5de9b081fa74464901888a", 0xb2}, {&(0x7f0000007280)="78592e352405bf5d0530f349ffc5b8c43d718ec40e2b714250525a74763845059a8ed1b18ef21e009876991d2fcabddd0f5ffa6ee5bb5b9817835a5c4eeec71f6c4c60d2f1516f5b776bd9395d80f7c78e38f6a4c96eb5454a59de1ef4309800e90c881284132464351ff1fbbdea9e86e0cde5c620da7754efebb97ad758f2b057fa907247c2ee80a928042696f31224a1caa97084230f17125fa7a52eb49815fbb6d9f80c880651b3bb469929e6613aaaf73eb75d896dbfacba9e9d9f88a987d8039323f213", 0xc6}, {&(0x7f0000007380)="70b90588d10203d928cf056a4894b786ae43ae793b3445a89d6f15fdb97472253bc8b95c2185e1b08d9b21e749a5375532604cbb92a5e38b3e5e41e5e1b50d894fafde4a21c9287b0506300170322565ade4fa2114a4f8395624427d92c8f581ca31b018537395b34345cd", 0x6b}], 0x9, &(0x7f00000074c0)=[@cred={{0x1c, 0x1, 0x2, {r0, r123, r124}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38, 0x8800}, {&(0x7f0000007500)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000007780)=[{&(0x7f0000007580)="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", 0xfc}, {&(0x7f0000007680)="5d5cd9ae15adff74264899e0b59a7963289a8ac9665d4258386e188a560783396a0b7fcdf7631927bb3fbffd6355e03fc6f4517308a0f382ee77bb89bf288fe8ec3b9f7875e0ce3bc2103746d8b41933f7bb99e286bfd127d1ff10dd30736cfaa1a54658ddd79191838f67b6dfd1890251081c7cd21cc4fb67d1658e02964c4e0799d9eee1ab36018376db404641680608e964524db3d542a9aff9d1d4558445500811c101489ab596c2a19c469f432500a1f8a4c7b9c2011b421f3012408a1b4a3a02cf49164ecb448e349e1ef4d2b8d2c42498b91e5a72287bac", 0xdb}], 0x2, &(0x7f0000007900)=[@cred={{0x1c, 0x1, 0x2, {r127, r129, r130}}}, @rights={{0x14, 0x1, 0x1, [r132]}}, @cred={{0x1c, 0x1, 0x2, {r135, r136, r137}}}, @rights={{0x1c, 0x1, 0x1, [r6, r3, r140]}}, @rights={{0x24, 0x1, 0x1, [r141, r143, r8, r8, r3]}}, @rights={{0x20, 0x1, 0x1, [r145, r8, r4, r2]}}, @cred={{0x1c, 0x1, 0x2, {r146, r148, r150}}}, @rights={{0x28, 0x1, 0x1, [r151, r3, r154, r157, r158, r159]}}, @rights={{0x2c, 0x1, 0x1, [r162, r5, r164, r166, 0xffffffffffffffff, r168, 0xffffffffffffffff]}}], 0x138, 0x1}, {&(0x7f0000007a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000007cc0)=[{&(0x7f0000007ac0)="0ff92a4967027a5c460b01ced1bb696ee4fdc0e089f7e29836e62557d84806e0927541ef9a4be110ee17398a45379778e0e34deb282e47afe68f64f1e31259ee9109a9aa4994c401ccbbf3c8bc5138bda12bb6ef6e874f36b6fcf8f5aff1af8b6cfcb68455ebd19e0fe5867f56deee57590db6a9b1559c0db4c1009e764c84ea74c6418c675e10a4aa5f484230b22c417fc54bd6191e3e5fb5fe", 0x9a}, {&(0x7f0000007b80)="633172e0e2706dca99b87472c179edd5fd2c683674152fe2459af0", 0x1b}, {&(0x7f0000007bc0)="09d2e0ea3ecd97d8d88bbc9e3ef73da227bb4490bd9966bea13fa11c9be989eb868f0736718f18fd55d8ed9218525297c9532df9fd34935514eba4d9048a1b78c28fa469806edc332be4ad3340fe372b210245b5d784b796e3bbf6b5e216dbbea7e52cd598bfb0608f56db7f5d525f124c443f3ead227a3cd8ba7aac7c019b39e6e3400a335368db829b4c7574379eb0a0cc3c30d626b5e0722f1842ba1506b4df76dba6030d5ab1d9dc7496549cae235bf544a52183ff1f4d9a624d0318785f0311e91a545f85e53ec1afd3a13e235dd124b460223ac415721e99de1b053774fe3a3ce1dacfac166922dc5c2de33cfc", 0xf0}], 0x3, &(0x7f0000007d00)=[@rights={{0x14, 0x1, 0x1, [r5]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xee01, r171}}}], 0x38, 0x40}], 0x8, 0x4084)
flock(r8, 0x2)
flock(r6, 0x1)
r173 = dup2(r6, r8)
dup3(r173, r7, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r7)
r174 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r174, 0x2)
flock(r1, 0x1)
r175 = dup2(r1, r174)
dup3(r175, r2, 0x0)

13:50:58 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:58 executing program 4 (fault-call:7 fault-nth:0):
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x0)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:58 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x3}, 0x0)
setpriority(0x0, r0, 0xa4b)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x3}, 0x0)
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x400}, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x82fc, 0x4)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
flock(r3, 0x2)
flock(r4, 0x2)
flock(r2, 0x1)
r5 = dup2(r2, r4)
dup3(r5, r3, 0x0)
ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000000c0)={0x0, 0x4, 0x80000000, 0x4})

13:50:58 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000140)='./file0/file0\x00', 0x101000, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r4, 0x2)
flock(r5, 0x2)
flock(r3, 0x1)
r6 = dup2(r3, r5)
dup3(r6, r4, 0x0)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00')
sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r7, 0x400, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10048000}, 0x4000001)
r8 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r8, 0x2)
flock(r1, 0x1)
r9 = dup2(r1, r8)
dup3(r9, r2, 0x0)

[  292.910325][T16030] FAULT_INJECTION: forcing a failure.
[  292.910325][T16030] name failslab, interval 1, probability 0, space 0, times 0
[  292.924411][T16030] CPU: 0 PID: 16030 Comm: syz-executor.4 Not tainted 5.4.15-syzkaller-01128-gb2b96d09ef40 #0
[  292.934744][T16030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  292.945017][T16030] Call Trace:
[  292.948368][T16030]  dump_stack+0x1b0/0x228
[  292.953367][T16030]  ? devkmsg_release+0x127/0x127
[  292.958286][T16030]  ? show_regs_print_info+0x18/0x18
[  292.963487][T16030]  ? __rcu_read_lock+0x50/0x50
[  292.968258][T16030]  ? __fsnotify_parent+0x300/0x300
[  292.968938][T16002] binder: 16000:16002 ioctl 40046205 0 returned -22
[  292.973397][T16030]  should_fail+0x6fb/0x860
[  292.973408][T16030]  ? setup_fault_attr+0x2b0/0x2b0
[  292.973418][T16030]  __should_failslab+0x11a/0x160
[  292.973427][T16030]  ? __se_sys_flock+0x156/0x560
[  292.973435][T16030]  should_failslab+0x9/0x20
[  292.973444][T16030]  kmem_cache_alloc+0x37/0x2b0
[  292.973451][T16030]  __se_sys_flock+0x156/0x560
[  292.973457][T16030]  __x64_sys_flock+0x5b/0x70
[  292.973470][T16030]  do_syscall_64+0xc0/0x100
[  293.023683][T16030]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  293.029575][T16030] RIP: 0033:0x45b349
[  293.033482][T16030] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
13:50:58 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  293.053093][T16030] RSP: 002b:00007f3ea3c01c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000049
[  293.058463][T16043] binder: 16042:16043 ioctl 40046205 0 returned -22
[  293.061501][T16030] RAX: ffffffffffffffda RBX: 00007f3ea3c026d4 RCX: 000000000045b349
[  293.061507][T16030] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000005
[  293.061512][T16030] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  293.061516][T16030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[  293.061521][T16030] R13: 00000000000000c6 R14: 00000000004c201c R15: 0000000000000000
13:50:59 executing program 0:
lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000180)=@v2={0x2000000, [{0x3, 0x40}, {0xfffffffd, 0x7}]}, 0x14, 0x3)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:59 executing program 4 (fault-call:7 fault-nth:1):
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x0)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:59 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
r0 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r1, 0x2)
flock(r0, 0x1)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r3, 0x2)
flock(r2, 0x1)
dup2(r2, r3)
openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
r5 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r6 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r6, 0x2)
flock(r5, 0x1)
dup2(r5, r6)
dup2(r4, r5)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x6, 0x9, 0x0, 0x0, 0x800}, 0x0)
r7 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r7, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x80, 0x0, &(0x7f0000000180)="496272038f9d86a2c7e78261da57fbb461420e29b04843525d63b0ef17c538a783ac0bb53a2f9baa481f55d3ab170ad1d9aed98e096e5f05166823a613c8994b96fbb5564419aa804973f88b836ea197a045827bd0d94a9d29bb3e699f94ccaff01183c95bb5e8da6130d1aeece0ff74556c00"/128})
write$eventfd(r5, &(0x7f0000000240)=0xef, 0x8)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  293.062534][T16006] debugfs: File '16001' in directory 'proc' already present!
[  293.148018][T16053] binder: 16050:16053 ioctl 40046205 0 returned -22
[  293.152094][T16056] FAULT_INJECTION: forcing a failure.
[  293.152094][T16056] name failslab, interval 1, probability 0, space 0, times 0
[  293.168219][T16056] CPU: 1 PID: 16056 Comm: syz-executor.4 Not tainted 5.4.15-syzkaller-01128-gb2b96d09ef40 #0
[  293.178474][T16056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  293.188531][T16056] Call Trace:
[  293.191835][T16056]  dump_stack+0x1b0/0x228
[  293.196323][T16056]  ? devkmsg_release+0x127/0x127
[  293.201268][T16056]  ? arch_stack_walk+0x98/0xe0
[  293.206044][T16056]  ? show_regs_print_info+0x18/0x18
[  293.211277][T16056]  ? __rcu_read_lock+0x50/0x50
[  293.216836][T16056]  should_fail+0x6fb/0x860
[  293.221276][T16056]  ? setup_fault_attr+0x2b0/0x2b0
[  293.226318][T16056]  ? avc_has_perm_noaudit+0x2fc/0x3f0
[  293.231798][T16056]  __should_failslab+0x11a/0x160
[  293.236755][T16056]  ? flock_lock_inode+0x35b/0x1c60
[  293.241876][T16056]  should_failslab+0x9/0x20
[  293.246683][T16056]  kmem_cache_alloc+0x37/0x2b0
[  293.251456][T16056]  ? locks_get_lock_context+0xe6/0x380
[  293.256941][T16056]  ? kasan_slab_alloc+0xe/0x10
[  293.261798][T16056]  flock_lock_inode+0x35b/0x1c60
[  293.266838][T16056]  ? lease_setup+0x140/0x140
[  293.271444][T16056]  ? __fsnotify_parent+0x300/0x300
[  293.276674][T16056]  locks_lock_inode_wait+0x22d/0x3f0
[  293.282091][T16056]  ? fcntl_setlease+0x750/0x750
[  293.286966][T16056]  ? __should_failslab+0x11a/0x160
[  293.292129][T16056]  ? selinux_file_lock+0x4e/0x60
[  293.297348][T16056]  ? security_file_lock+0xab/0xc0
[  293.302482][T16056]  __se_sys_flock+0x45b/0x560
[  293.307320][T16056]  __x64_sys_flock+0x5b/0x70
[  293.311924][T16056]  do_syscall_64+0xc0/0x100
[  293.316562][T16056]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  293.322814][T16056] RIP: 0033:0x45b349
[  293.326839][T16056] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
13:50:59 executing program 4 (fault-call:7 fault-nth:2):
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x0)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

[  293.347723][T16056] RSP: 002b:00007f3ea3c01c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000049
[  293.356155][T16056] RAX: ffffffffffffffda RBX: 00007f3ea3c026d4 RCX: 000000000045b349
[  293.364127][T16056] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000005
[  293.372457][T16056] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  293.380433][T16056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[  293.388549][T16056] R13: 00000000000000c6 R14: 00000000004c201c R15: 0000000000000001
[  293.479821][T16063] FAULT_INJECTION: forcing a failure.
[  293.479821][T16063] name failslab, interval 1, probability 0, space 0, times 0
[  293.502670][T16063] CPU: 1 PID: 16063 Comm: syz-executor.4 Not tainted 5.4.15-syzkaller-01128-gb2b96d09ef40 #0
[  293.509548][T16066] binder: 16052:16066 ioctl 40046205 0 returned -22
[  293.512912][T16063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  293.512916][T16063] Call Trace:
[  293.512936][T16063]  dump_stack+0x1b0/0x228
[  293.512947][T16063]  ? devkmsg_release+0x127/0x127
[  293.512961][T16063]  ? show_regs_print_info+0x18/0x18
[  293.547857][T16063]  should_fail+0x6fb/0x860
[  293.552287][T16063]  ? setup_fault_attr+0x2b0/0x2b0
[  293.557323][T16063]  __should_failslab+0x11a/0x160
[  293.562358][T16063]  ? flock_lock_inode+0x35b/0x1c60
[  293.567572][T16063]  should_failslab+0x9/0x20
[  293.572091][T16063]  kmem_cache_alloc+0x37/0x2b0
[  293.576884][T16063]  ? locks_get_lock_context+0xe6/0x380
[  293.582489][T16063]  flock_lock_inode+0x35b/0x1c60
[  293.587457][T16063]  ? lease_setup+0x140/0x140
[  293.592055][T16063]  ? finish_wait+0x17d/0x190
[  293.597000][T16063]  locks_lock_inode_wait+0x22d/0x3f0
[  293.602299][T16063]  ? fcntl_setlease+0x750/0x750
[  293.607170][T16063]  ? init_wait_entry+0xe0/0xe0
[  293.612032][T16063]  ? __should_failslab+0x11a/0x160
[  293.617244][T16063]  ? selinux_file_lock+0x4e/0x60
[  293.622213][T16063]  ? security_file_lock+0xab/0xc0
[  293.627254][T16063]  __se_sys_flock+0x45b/0x560
[  293.631940][T16063]  __x64_sys_flock+0x5b/0x70
[  293.636673][T16063]  do_syscall_64+0xc0/0x100
[  293.641211][T16063]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  293.647110][T16063] RIP: 0033:0x45b349
[  293.651010][T16063] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  293.670618][T16063] RSP: 002b:00007f3ea3c01c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000049
[  293.679027][T16063] RAX: ffffffffffffffda RBX: 00007f3ea3c026d4 RCX: 000000000045b349
[  293.687266][T16063] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000005
[  293.695244][T16063] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  293.704211][T16063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[  293.712201][T16063] R13: 00000000000000c6 R14: 00000000004c201c R15: 0000000000000002
13:50:59 executing program 3:
r0 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r1, 0x2)
flock(r2, 0x2)
flock(r0, 0x1)
r3 = dup2(r0, r2)
dup3(r3, r1, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r4 = getpid()
sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r5 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r6 = fcntl$getown(r5, 0x9)
sched_getattr(r6, &(0x7f00000000c0)={0x38}, 0x38, 0x0)
r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r8 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r7, 0x2)
flock(r8, 0x2)
flock(r5, 0x1)
r9 = dup2(r5, r8)
dup3(r9, r7, 0x0)

[  293.858817][T16043] binder: 16042:16043 ioctl 40046205 0 returned -22
13:50:59 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:59 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, &(0x7f0000000080))
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:50:59 executing program 4 (fault-call:7 fault-nth:3):
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x0)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:50:59 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x210)
r3 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/context\x00', 0x2, 0x0)
vmsplice(r3, &(0x7f0000000480)=[{&(0x7f0000000080)="2c1d8decaf7099156f7d1f1e4868f92ba6c987cbff495962d5d52b", 0x1b}, {&(0x7f0000000180)="ef625eefcd0700fcb6f70e4ae84bb62090e62324955ca38484b280df084e7adb42cae2ce537923d92ee626f679ec042db9b43e4a44b97c28e7f028d4beb4e4e50f06edcce2e5997b4d01bbb8f9358d3782d9dfb27b80fa46cc6699b22c29daab48bebff14b753e453953b0f012bf58b04561eb67f6992e77942bab617280734e849c08dfe79936dea5bee55ef565d3ae3340ba37962f3866c224732278d1de1dbd8fd548867e14a39f91c75140", 0xad}, {&(0x7f0000000380)="4705705ce4ff34138eee78d65798c1bb794a1976229135b6cb9acdc4e027e87a082b16df5e99c379e6fe96b841f0d88d71a9b031b55192fbe58d25b4d8ce633ded372bd703471a75dfbb98f89bef6a49480e11ede9a47150f0c1bdb6f793e5af73a2f3989c936362e7313b65d8193dff0657241d7201bbb8edd16c44df92105f2d9580709f37f1a7d344ab63c22bbb71f6332148a399eb94dd2c7b3a8b44fa45dd8326c543654db085808e0baed51276b1641ed2851041106ed94999aa3bdb502514691a394f423fa664ab7de4ba1bb6790298539aa5c6d063287c2d14afef0af0fbc355e7c849f4f7b779981c1039abcae846", 0xf3}, {&(0x7f0000000240)="e53445a241e227fd02786c9f4edc18b23560908615e43b4bc912cd5baa316b08bb", 0x21}, {&(0x7f00000002c0)="1d2dba71217a8dcae8b62b80d8f5ae0d5f817eb65d6ee92dd51a1b28d44897cdcbda9646371055a945eef8bb50a0b10f", 0x30}, {&(0x7f0000000300)="72b5553f727c350b149835958120ca6b1ead0774bafc522cc1788bbf5f18f87730b45c7f530a0f1d8f5910", 0x2b}], 0x6, 0x4)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  293.940732][T16076] binder: 16075:16076 ioctl 40046205 0 returned -22
[  293.947824][T16053] binder: 16050:16053 ioctl 40046205 0 returned -22
13:50:59 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x0)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

[  293.997425][T16082] binder: 16075:16082 ioctl c018620c 200000c0 returned -22
[  294.005993][T16084] binder: 16080:16084 ioctl 40046205 0 returned -22
[  294.013881][T16083] binder: 16079:16083 ioctl 40046205 0 returned -22
13:51:00 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = pkey_alloc(0x0, 0x0)
pkey_free(r1)
pkey_free(r1)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r3, 0x2)
flock(r4, 0x2)
flock(r2, 0x1)
r5 = dup2(r2, r4)
dup3(r5, r3, 0x0)

13:51:00 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x8)
flock(r1, 0x0)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:51:00 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r4, 0x2)
flock(r5, 0x2)
flock(r3, 0x1)
r6 = dup2(r3, r5)
dup3(r6, r4, 0x0)
r7 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r8 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r9 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r8, 0x2)
flock(r9, 0x2)
flock(r7, 0x1)
r10 = dup2(r7, r9)
dup3(r10, r8, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[r4, r10, 0xffffffffffffffff, r2, r2]}, 0x5)
r11 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r11, 0x2)
flock(r1, 0x0)
r12 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$EXT4_IOC_GROUP_EXTEND(r12, 0x40086607, &(0x7f00000000c0)=0x6)
r13 = dup2(r1, r11)
dup3(r13, r2, 0x0)

13:51:00 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:51:00 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x12d)
ptrace$setregset(0x4205, 0x0, 0x1, &(0x7f0000000100)={&(0x7f00000000c0)="bbdab4bfca2d93dbf5b32baadfe99299a3", 0x11})
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x101002, 0xa3)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r5 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r6 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r5, 0x2)
flock(r6, 0x2)
flock(r4, 0x1)
r7 = dup2(r4, r6)
dup3(r7, r5, 0x0)
r8 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/relabel\x00', 0x2, 0x0)
flock(r8, 0x9)
ioctl$TCSBRK(r1, 0x5409, 0x8)
flock(r3, 0x2)
flock(r1, 0x1)
r9 = dup2(r1, r3)
dup3(r9, r2, 0x0)

13:51:00 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00')
r3 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}]}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0)
sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000096", @ANYRES16=r2, @ANYBLOB="02002bbd7000fcdbdf251600000008000300", @ANYRES32=r6, @ANYBLOB="08000100010000000c009900ff03000001000000"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x20000090)
r7 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r8 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r9 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r8, 0x2)
flock(r9, 0x2)
flock(r7, 0x1)
r10 = dup2(r7, r9)
dup3(r10, r8, 0x0)

[  294.642802][T16124] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
13:51:00 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0189436, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  294.741678][T16076] binder: 16075:16076 ioctl 40046205 0 returned -22
[  294.759242][T16129] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  294.761319][T16130] binder: 16128:16130 ioctl 40046205 0 returned -22
13:51:00 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x50, 0x0, &(0x7f0000000380)=[@exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/133, 0x85, 0x2, 0x3}, @flat=@weak_handle={0x77682a85, 0x4, 0x2}}, &(0x7f0000000000)={0x0, 0x18, 0x40}}, 0x40}], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:51:00 executing program 0:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b630000754ab30561899ee14179495c3f90629ab321c4d2b477ad61fd01a22519b66da6d502f1b8d2a94dfdcd14c674b505d29172c150a0ac4448e6f67932771fc7b9f93785e0069cbd34393499051b75c8addc1b0195e4a1e959e6d3eb7c43e6781ef5c74e94bdb7986befcedc8f1df1129473ad7f72fa6d120eb3fe29febba9096c0f0c191fc729342d619168287511ba2e407df522cb2c6f86c5b41c1acb693e005fa01199447409f564b19c289963882e8d7250bc0cabb92b8b43a26659f91260b9ec7fc5bb97ec40f939f51f769847844e93078f27f33b6dbf19892b755abf3ad6466be72a4aab58e7eaf06f34151c41c44d4a47dc563907ff424d7469"], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:51:00 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$dupfd(r5, 0x0, r4)
select(0x40, &(0x7f00000000c0)={0x8, 0x0, 0x4, 0x1, 0xa, 0x1, 0x1, 0x743}, &(0x7f0000000100)={0x4, 0x4, 0x0, 0x7ff, 0x3, 0x1000, 0x9, 0x9}, &(0x7f0000000140)={0x10001, 0xfffffffffffffffd, 0x0, 0x9, 0x1, 0x6, 0x8, 0x25}, &(0x7f0000000180)={0x0, 0x2710})
flock(r4, 0x2)
flock(r1, 0x1)
r6 = dup2(r1, r3)
dup3(r6, r2, 0x0)

[  294.797495][T16087] binder: 16079:16087 ioctl 40046205 0 returned -22
[  294.811397][T16135] binder: 16134:16135 ioctl 40046205 0 returned -22
[  294.862239][T16140] binder: 16138:16140 ioctl 40046205 0 returned -22
13:51:00 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
sched_getparam(r0, &(0x7f0000000100))
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
r4 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000000200)="3081", 0x3, r4)
r5 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000000200)="3081", 0x3, r5)
r6 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000000200)="3081", 0x3, r6)
keyctl$KEYCTL_MOVE(0x1e, r4, r5, r6, 0x1)
flock(r3, 0x2)
flock(r1, 0x1)
r7 = dup2(r1, r3)
dup3(r7, r2, 0x0)

13:51:00 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
r1 = accept(0xffffffffffffffff, 0x0, &(0x7f0000001500))
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000001540)=0xffffffffffffffff, 0x4)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r3, 0x2)
flock(r4, 0x2)
write$P9_RCREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x73, 0x2, {{0x2, 0x0, 0x8}, 0x2}}, 0x18)
flock(r2, 0x0)
r5 = dup2(r2, r4)
dup3(r5, r3, 0x0)

13:51:00 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)
r5 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x80, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x30, r5, 0xf1974000)
ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f0000000100))

13:51:01 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
prctl$PR_GET_SECCOMP(0x15)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x0)
r4 = dup2(r1, r3)
r5 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r6 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r6, 0x2)
flock(r5, 0x1)
dup2(r5, r6)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00')
sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x128, r7, 0x100, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x253e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff277c}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6b0}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x452}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb37}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x1}, 0x40010)
r8 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r9 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r9, 0x2)
flock(r8, 0x1)
dup2(r8, r9)
setsockopt$inet6_MRT6_DEL_MFC(r8, 0x29, 0xcd, &(0x7f0000000340)={{0xa, 0x4e24, 0x2687, @mcast1, 0x5}, {0xa, 0x4e23, 0x1, @remote, 0x1}, 0x9, [0x6000, 0x2, 0xf1, 0x2, 0x83, 0x0, 0x252, 0x1ff]}, 0x5c)
dup3(r4, r2, 0x0)

13:51:01 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r4 = getpid()
sched_setattr(r4, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r5, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
creat(&(0x7f0000000140)='./bus\x00', 0x0)
write(r7, &(0x7f0000000340), 0x41395527)
vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000100)="7042977152bebf05000000aa1a", 0xd}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x280000, 0x1100000000000000)
r8 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendmmsg$inet(r8, &(0x7f0000002bc0)=[{{&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x4}}, 0x10, 0x0}}, {{&(0x7f0000000540)={0x2, 0x4e21, @remote}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="10000000000000000000000002000000ebd42c1b9a636a22a9273dccb1dd7b6eda5f1c92321f40c8a2528dfe0637"], 0x10}}], 0x2, 0x0)
accept4$inet6(r8, &(0x7f0000000240)={0xa, 0x0, 0x0, @local}, &(0x7f0000001980)=0x1c, 0x80000)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r9 = dup2(r1, r3)
dup3(r9, r2, 0x0)

13:51:01 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
splice(r2, 0x0, r3, 0x0, 0x100000000, 0x0)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00')
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4041010}, 0x0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f00000012c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r4, 0x300, 0x7, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0xfffffff9, 0x6d, 0x80000000, 0x1}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4040001}, 0x8010)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f00000002c0)="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", &(0x7f00000000c0)=""/179, 0x4}, 0x20)
r5 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r6 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r5, 0x2)
flock(r6, 0x2)
flock(r1, 0x1)
r7 = dup2(r1, r6)
dup3(r7, r5, 0x0)

13:51:01 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)=0x420010)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:51:01 executing program 2:
syz_open_dev$char_usb(0xc, 0xb4, 0x3)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x22)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:51:01 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc020660b, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:51:01 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000100)={0x4, 0x1, 0x7, 0x7f46, 0x8}, 0xc)
flock(r1, 0x1)
r5 = dup2(r1, r3)
dup3(r5, r2, 0x0)

[  295.562468][T16130] binder: 16128:16130 ioctl 40046205 0 returned -22
[  295.590567][T16202] binder: 16201:16202 ioctl 40046205 0 returned -22
13:51:01 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x482000, 0x0)
ioctl$NS_GET_PARENT(r2, 0xb702, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
r3 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r4, 0x2)
flock(r5, 0x2)
flock(r3, 0x1)
r6 = dup2(r3, r5)
dup3(r6, r4, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x5c, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:51:01 executing program 0:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x3}, 0x0)
prlimit64(r0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r1, 0x1)
dup2(r1, r2)
ioctl$BLKFRASET(r1, 0x1264, &(0x7f00000001c0)=0xffff000000)
r3 = getpid()
sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r4 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r4, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)='K'})
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0xc2000, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000140)="f4"})
r6 = socket$inet(0x2, 0x4, 0x5)
dup3(r5, 0xffffffffffffffff, 0x0)
sendto$inet(r6, &(0x7f0000000180)="9a22a4f74abd9f93bfa682b045bf48ef34e59d944e756e31c9c8fc1cbeb7dc0704dffc91bd30079293fa4bf0013f6074b3b6609dda1e861faf3dda994b", 0x3d, 0x40084, 0x0, 0x0)

13:51:01 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@nat={'nat\x00', 0x1b, 0x5, 0x4d8, 0x320, 0x320, 0x138, 0x138, 0x228, 0x440, 0x440, 0x440, 0x440, 0x440, 0x5, &(0x7f00000000c0), {[{{@ip={@rand_addr, @multicast2, 0xffffffff, 0xffffff00, 'veth0\x00', 'vcan0\x00', {}, {0xff}, 0x88, 0x1, 0x28}, 0x0, 0x100, 0x138, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz0\x00', 0x0, 0x8, 0x2, 0x2}}, @common=@set={{0x40, 'set\x00'}, {{0x3, [0x5, 0x0, 0x4, 0x2, 0x1], 0x5, 0x1}}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0xa, @empty, @multicast1, @port=0x4e24, @gre_key=0x967}}}}, {{@ip={@empty, @loopback, 0x0, 0xffffffff, 'gretap0\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x45}, 0x0, 0xb8, 0xf0, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}, @common=@icmp={{0x28, 'icmp\x00'}, {0xd, "751e"}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x8, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @port=0x4e24, @port=0x4e24}}}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}, {0x2, 0x40}}, @common=@unspec=@cpu={{0x28, 'cpu\x00'}, {0x6, 0x1}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @dev={0xac, 0x14, 0x14, 0xa}, @empty, @icmp_id=0x64, @port=0x4e23}}}}, {{@uncond, 0x0, 0xe8, 0x120, 0x0, {}, [@common=@unspec=@connbytes={{0x38, 'connbytes\x00'}, {[{0x60}, {0x3}], 0x2}}, @common=@set={{0x40, 'set\x00'}, {{0x1, [0x1, 0x0, 0x4, 0x2, 0x5, 0x6], 0x3, 0x6}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x4, @multicast2, @multicast1, @gre_key=0x7fff, @port=0x4e23}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x538)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

[  295.663217][T16140] binder: 16138:16140 ioctl 40046205 0 returned -22
[  295.683982][T16210] binder: 16209:16210 ioctl 40046205 0 returned -22
[  295.739037][T16212] binder: 16211:16212 ioctl 40046205 0 returned -22
13:51:01 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x8040, 0x0)
r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x8)
sendfile(r4, 0xffffffffffffffff, &(0x7f0000000100)=0x8, 0x5)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r5 = dup2(r1, r3)
dup3(r5, r2, 0x0)

[  295.791806][T16218] binder: 16211:16218 unknown command 48
[  295.797525][T16218] binder: 16211:16218 ioctl c0306201 200000c0 returned -22
13:51:01 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00')
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$dupfd(r5, 0x0, r4)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0)
r6 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r8 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r7, 0x2)
flock(r8, 0x2)
flock(r6, 0x1)
dup3(0xffffffffffffffff, r7, 0x0)
openat$cgroup_procs(r7, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0)
r9 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r10 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r11 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r10, 0x2)
flock(r11, 0x2)
flock(r9, 0x1)
r12 = dup2(r9, r11)
dup3(r12, r10, 0x0)
flock(r1, 0x8)
r13 = dup2(r1, r3)
dup3(r13, r2, 0x0)

13:51:01 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f00000000c0)="fa8ebbadab16fd9a1e6209b0416f20c1b1c31c19fbcc6a3d98f440fbd486a3ffa406394145ef3b970aa5f89c13fc37e558c5c2c0fcb8df3d8b0888708a5c2101767161361d21b430557c56c2ea203cfd2ea60e766e5815d4c318661d42820707bb8e390a9b3067cd19cdc24c3bbcca3460bdd6e4", &(0x7f00000002c0)="c00c5149a97d73b00a26d53937ac99f125fbbb45415cee404ed21eca87c306d2497ba33f2a51da39cae0ac2a6e2b08eac510a19ddba06500524b375bbe537de2597c6755ef68c366fdd6e456e96d78787321d7f07c428aa07ccc18c3a8ac3ea53ab7f580bc182318b4094bedcf86940ee2727ca5d44208b0b04de90ababc4449294ea10e105aea021d31c5b14173f5b79de9f1902bb1e4d78b3d6ef629016d02c06ed0d2be6f5dfbbdaa35d7829f25cc57a7f2e2ecc97cde5154c02310fcdcb80e6538abdea8e869ac0e09649d0d9f78eedfe7982764fb0100eeed25540375d482a6be47bd55c9764266afc136ccca465092605a109566a4b6a88bcd8b32d170111f0685672bc64869adb0796fe38947eb85e827ec8fd11c3413763ed7cddac3d9b3d663c46b7a8f3d3d0d59c24d98e827219ed9c11f9212508e5cc332096a6d2f31c35243c11238dbfa497279d5ab209c70e10814d079e2bd4ccbb0c7ee5e3a2edcdd2c9d2bdb0d8d2f75f484b7aeaf163d33004d3eabd8c8b6333e493ade36d9f346f123b7739d08944a4efba0db1f420deebd6ac9092d28a4c9a2099e3b2ceeb0dd8732bc99fd47e40e64e9996a80fbcbdeb41658f17468814a156fa2b43695771992d0d96ea14b8f23858c1fc03e3df23d27fb354cc1b93eb0e2dfe1d44374c872d180044e70fb8eaa9ad16b0110f3e4af6f892d768b280683c8bd023608df45d25c2e96396648bce1cc127a6e697ab617a2986363aca02e6f707527c2c7d3f30e58b149b1d392a574ac5cf9820a18550a994de4a877bde44c83c71b636cac3f87bc1b44279acddec8675e62713786fcf3108dff8b469898d02eab2f306b2cedba8a85888184099385025d60df8436e9221f898c6b29dfabfafdb88a89f72bba7d5d52277875b874e0a16a5225a3467b91219189b7c5e93fef09a27883349ba962de262e2f06040cfbb20f8216ae4dc6a059cabc5c16ca5fa7b710283ea538f04c9acd3970a67db36e199c04b197a8111ceed4d9891eee349ade41d068e98cde014d81e53869f27eeff155d598722d66599d8364dbd9ae6a84d39b3e6dc17fc3b76edfe72834355edd0667e2cf8dafd127bf25aa748bba08e0f2c8ef327ccfb262f64b81cc0fbbaa930d7d159fb0a7ba8c35bdad4bb1c280cbc9b0d2cd04b1d79dc7ef175beade6ca582509261b3fe0c99975182e9dd4258ac539930d383578c815a3b5448f4f448123f1135771bf11514a71956a5b6977fd15dd03723b9380c4ce68b031ba967ed05bc4b5073b018ca933f7de43ac803153813abd5c054d50aced5e3a4c193c033b269df4d991fa57cb177af9f11ed53cfbdc2a16ebc448b2af23e85a5c9ea4540542c6ebed854e36bf099d97812395cb1f1b7537a3a8b8bee0340a5487792b23983957f1cf0aaf77b9c6b168b13600ebc20f98f900187230aed8b5a1c6223bebdce6e6c06bf688c5d78cdc7d15b91b57f744da81c186405c964f898944cc01bde8d6c11892e6f6f0cd95d2b9742854e6c8c72ee52591379198b0c390b1e463f6c1a9c34b1e2c0e9614626f565a284f062346285879a40f9d169c82d8be8319a2425becd089a4d3a6f2f1abe9f01e82364b98767d4fc4a0eff6dc6f1ca2a375c0b2c2d5652423c0e42a59acb337bd98db370ccd7aebd1ff0a086ae84a47e07a6cb7c96761d0c4651c81a5cd56eeb592c91615e980fb9c50d6007370030231a81d9d21a2381f2f22dad4a7ccaf0cfa9963f3e0db7f8b6030f60c942c051edcbae3d525c0a791e81061c1094c95d0e61d1a243260d02518c545a5ac29a4691176c096f307ba63f4e4dc364b848b7332c826674de97aaacf758d8f845073877d944239810515ab3c17622b739d122b23af5b5bccf3d7a72ba4e70595b43630135043e5ee14787c58679d2b70e7115e5cdb1c43fb6daa1736184a0d0260d1e99d8e2ce689c4555154a1221908f73a216a23a7b17edae008469ff9c657a9b8aafbd92b671379d0685a3049b342b743c7cecb827d5dcff2457f413ac0a94b2271e5a453336c05e3962bb2c8a37d8316d82c160531e15c749a064d3d32356b11d63dfa13ed173930f2aaada2207218ea5e6bb9a5236a352473a2afe7a94d580e69a36969bfc895e2aa9cfcda2a04627fa19f1e0e650fe31cacef38bd5f1f3388bf1ce94840b2274a621f70806d10962ab34e5e729cc109f37eaca794002e95d12a2796cd792e29c6fff8f634972d2be1971d48a36dbec8b8ce53eaf79635d8149b46573794a3cec2d256a36ebdc70e657c30ff12538ee72490ee891675e112bd338a38a7f33acbd990affbffc6e97f769af4e57561c11b85eba1a1377192923bf623181c8e82876dc70f375d9fa9112dd10fe2a1f296089f619febc90a76e369382bc59d3c40a8de2e540555ad2fffa55ab0fbd7996bc47f97a5b8d96526463199e1ce68511ec1d6296dad302eee1f6b30587445ac63847905a39aa48e9f9ecb8dd42c6c6808df59483496da4156009fcbf28ea0768d4371b4a996f535124eaa602c0bc5c7dc71b3e101fbca631c66224e41d60f6e2a4312d6c2f57103dd13986c6b5beb944f092912a1878c4bccdda2dbb38b9aae449db53720ef02c8b3223abe41f11dd92e565a90eec5abf0e2dbb8faa8608b69f583e3eb979c491ae77b6786e30196056b394b1985bacf520a6c95fffbb09fe5ecb57699163d8b84175d06e42f372f0666d6b6b1f313dcbb0eb4bd6f957e73e9725a2e997bf64cf343ef41313153c880071e74f7c93d1739f18831c60338199899fac014469e12580e01d932d8ede2616db115c438d7c1d26c5067abcd998fd73c0eca2cc9677397d8a6ca570983db591633ecd335fd5df735e3568a5956a9ca380b14d8997f57739c7872757055b20c8c70e9ad77723a62b82916c686313db724410bba2e4f3e0fde2e3c503855c326a76b45cd847515f31cb7720416008f55c9637ccbc28920c993db3746352d4b633437484223fb19073b32d3c9dc50562dbc4b0339d9ac14cb347b8ac5e3f0a14d913ff6035c280959a1022eb5d555ae670f5eb7f7c129baedf7db86bd96c929ce1fa3b57f9f5ac4b8a008f4142cd2a4edcf2fa50aacfaba1293134ff3c6dd0327a8453c853ceaa413f1b95b822043a757772baf5370dfb3085cbecbcbfebb3b4454739b60003654fbd7749cde285e4fa37ce3acb77570496474a8569ac3da18026ea9c5c96416f71ca8f687da39ab767151b5958ccefef7d4daaf1b724fe682ea63163968ddef1c877331c3337147ef1dc10c089f6640d760b8f9c30894ee925c790a7a79676e6e1c1f396e94c48e0226ab2060e9682903a581e83546308278982522aba1629cda86ca239739c4d5a3c8b6b5fbf1d919302b55d5930fd59218229f602c1535a40f212156b9cc9be35edb80a416c8f8dd3bd67d497e8a01b0f9ed603861597f4d6587cb9aa74a4921777e6bc4eae65e921387eadab746154aabc34429c083d048fb9cee4c0df8644246f8ab8c20c41175f58b8f59304e83c6490280b245251e4031bd74e2aeb77c9e911809db0ca19d9bca7c48de68bc155754b67a33a59fdb523b48193207fc0937c39a6c9d3331bfa11a3b0bea27b92e023b8d8fd6bd6ec9e638f95d1c752eba597f2cd5332a7ff6e0471a895c64ac1153a95cdee6c04167382343c12095809224c5ce5b432733d0daf646b2e9806828afe7285a97f396d6b6104988d8628e9cda5ca09349fb3520ca0066ff3ca9078f86e2203990636364138bf8547cac194113593c739b2a5a5463a3ed5f6db6f2225f0a0646c6719b3e0ec0489dff4d949a9116b340dcf423e2a0070952f2e0ec779494bba5b4070ee177a94ebabea493967b68581e47639a2fe51420186901f1e9058fd838919f8cfc1adf969dae1f15a4222d585148ba064ed93e3998fba03580966cb0cbbf4a9bfc62446a754cf2959eba3523d62f4e428a8564ce6b6935ced91c5f6bef9912702c63b50bf4677c57fcd559a2b92f2a3e4e7cee95a828d863d9f5adc39060933ab65bdc1e9f162a9cfa60f726307bae45c1b09c97ec17bb596aba272478211c8b5ac7f7af3d3ab3ca03af2148edf024b295de8afaf8a45ab2752fc4cfb6dcb2d9243d418398b2701a5f7ea4b32c422fc9a44b7434e217754107d36fc236fe1481c8c28fc316be028b703485b526a7bfd9c441b45230d3358e2703293be5fc8e66b0bd26c13cea3cb5c22b6d4b6191a5e01811930f244dce8a25aeadf7c84a5ca94e3f163586c235ade547e1108c4f5a885a27f15cd01c3810d69e1f9d80c2922943b460f9d44045f966f814c885a695a93e1fea3f453c8317d03a7d795da6b31e9b8612430a79519a1110050af8006d33f611ef346534a5f01e35d7ea650e54487e703a538856d045027b0da7aead1230d670c824fd07d23fe45f277159e61b7997fd08b5d9e403c4812e4493b1ab62dc3c6503039964e3e1cc4f3ca11f9b5eee98dec7e8076dc3150be45ca9f2e14ca9c96b57dadffd5e816e08cb7399fc9396f1c78f456577981765cda1cb056e21e56ccf0932aca7262b3b576ce05d2a4e869fe48b4d2a9361d25873a3cc75d131af20c114260dd5f1cc4ca44ba6ebc5050a039409f77bd0670f9d8eeb2192e294a10cf21c75934dc4680cef4e27e70dea98871a708f5c2da0c2a1ed51506a84e674d94abdb3fcc52ccd8e0ba3ba7c8ca57710e76e94edf9c0298348929bc0c140e2f3afa62abc1c6b4aaf90f84d9c879d695ed5a87ce2744a4a224b9e39231f049311acb9c35f289c60eb6f2bc966e9491e931aeb4d71ef9d60ea19730d909838a5fefccb641f0fb2dcd0e08a242cd42b8f3ff160f76b05bcd0b725e1e5d049c99d6b87647000dfd1ad0aa9b7ed1a961c03059589f6f10a8a58e2652f0bff483255478e6f6b5d20c102c19cf219fc21f98cad646e467d507139da5c904ad071dce4552adf73e18545d7022d336a9928aa55ec7244bcd87df0413ae16777e90b8ea94587d8ec0ef1116ed30d51221fa7645d639cb5333395c9449c82a474df96d7beda4b6ca15281abc7c5db19374cf8eba732001beaae297aeee8eb57055c127ccd98b3f692d2bc73f5d831405ad61d6a8f1209e53cfcf1ba408280b1748cf71fe781402288891a8510e831d92efbb538585772968e03a5120358f037a17ffc92873e7d4a3079f4f77dab6792d0a443a6d42c114fc5dd7099c3fce5eb82349a0811911f25c62c10f5db168f0046e42482481d95daecc6e124d4181851569a2cc6e283ddca76fec34a7ea819d678f20ab1da424044395f60e552210620b3c55efe25f1a067f7ab51424d7906fdbfe63f6075c32d02e6d1b49a51bb5ec7265be5d263c1444d24aa370f6e4a066501747c928070d4cd4e53a708873c84c85680418cd11c7ccf51da59c0f4ac0972f19f2e1d779365889744b464043b79979f087ea81c68562629c0aff5c793348232da512c806192ab626349bc1174c362d33d6ace77713e8f887ac159b73fd0b89882779f970201df7eb639ed36fe398233a3d23a1193053693433062900efcaaa43e2573a36e9d02383a3a2e8ab63e036391e526aa73d24bfbe238bb3964e5238819c1f356e7499c183a765b2816b4b82355f8c7a3e4c7693a155342004343e1c84fd34b6a0d7f1b3c568c3424982b1767112ab0b0c70da45339024dc642bb2a5d87e0ee2e2752a7d30d6831f9635afcddf9bfdccbfd379d13c6a351a50b633bd1cc67e8e8095b3b3e2f349ff1c379125449a6c1ea0ee", 0x2}, 0x20)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:51:01 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x10}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:51:01 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x581101, 0x6)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:51:02 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x2, 0x5, 0x0, 0x0, 0x1}, 0x0)
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000000c0)="a358ab33cb25b939b514c4443737c02729272d96a1c9a8b66217ee420c7b2d4848ebd030e97b0e130a8faac6b3e690a72083a8eba5384b89f1ec5e5828a91c832042661b32e3405f649d445882f6a2679e27ea3220061f1b3021770df3c9f897c11beefe4bcce2f5b8b560206c6bae30c67552fe4e4be3ff6cc0688d980fc6448b4690f38ed9c794dca1669b08f29b984a719d22522cf974359efd3a3e89e411f268b557cdf37569af08af551b4d25a79e757af85315e09ef9c3afbbbbac7feecc206d371d3d2d63aac2e3d6ee79ff28f3d4d28d3e40333587873a1d0f28bf7ea51d81", 0xe3)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r6 = creat(&(0x7f0000000200)='./file0\x00', 0x1b1)
flock(r6, 0x0)
flock(r4, 0x1)
dup2(r4, r5)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r4, 0x8982, &(0x7f00000001c0))
r7 = dup2(r1, r3)
ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0)
dup3(r7, r2, 0x0)

13:51:02 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x32, 0x0, 0x5, 0x4}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x400)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:51:02 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
futex(&(0x7f0000000200)=0x2, 0x85, 0x0, &(0x7f0000000240), &(0x7f00000002c0), 0x2)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$dupfd(r5, 0x0, r4)
r6 = open(&(0x7f0000000300)='./file0/file0\x00', 0x2fc, 0x0)
r7 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r7, 0x2)
mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='bpf\x00', 0xa0802, &(0x7f0000000140)=ANY=[@ANYBLOB="6d6f64653d30303030303030ff303043636170003b9061e30a7b6b92303030313030303030303070372c6f626a5f747970653d6370757365742d70726f63766d6e6574307d65"])
flock(r6, 0x1)
r8 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r9 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r9, 0x2)
flock(r8, 0x1)
dup2(r8, r9)
ioctl$TIOCSPGRP(r8, 0x5410, &(0x7f00000001c0)=r0)
dup2(r6, r7)
flock(r2, 0xa)
flock(r3, 0x2)
flock(r1, 0x1)
r10 = dup2(r1, r3)
dup3(r10, r2, 0x0)

13:51:02 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306202, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  296.390918][T16202] binder: 16201:16202 ioctl 40046205 0 returned -22
[  296.464148][T16271] binder: 16270:16271 ioctl 40046205 0 returned -22
13:51:02 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0xb, 0x0, 0x5}, 0x0)
socket$vsock_dgram(0x28, 0x2, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:51:02 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x400, 0x5, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffc}, 0x0)
ptrace$poke(0x4, r0, &(0x7f00000000c0), 0x5)
r1 = open(&(0x7f0000000040)='./file0\x00', 0xa5be, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
dup2(r1, r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r8 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r8, 0x2)
flock(r7, 0x1)
dup2(r7, r8)
fstat(r1, &(0x7f0000000180))
r9 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r10 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r11 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r10, 0x2)
flock(r11, 0x2)
flock(r9, 0x1)
r12 = dup2(r9, r11)
dup3(r12, r10, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/member\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
r15 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r16 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r17 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r16, 0x2)
flock(r17, 0x2)
flock(r15, 0x1)
r18 = dup2(r15, r17)
dup3(r18, r16, 0x0)
r19 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r20 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r20, 0x2)
flock(r19, 0x1)
dup2(r19, r20)
dup3(r6, r20, 0x80000)

13:51:02 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000000))
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="d0730000bdc29f211f1e592eec852ae48bdc492ada303e11624a9530c965be2bab04531b333fafd5de3bd6762b699bfae93eced33e8f577f3f8202e31353d7c8a53e7d83234685490d7bfcffffffffffffff5fd0fcb05b27476e0ee125168adeb846d4c51d256829b27b9a2e99a4c3d31034b0864ae8ed0189aee530ddd2a7e116236b14c27027dfd49326afb0de722c28b2a600"], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  296.517649][T16276] binder: 16270:16276 ioctl c0306202 200000c0 returned -22
[  296.544053][T16279] binder: 16278:16279 ioctl 40046205 0 returned -22
[  296.549730][T16281] binder: 16280:16281 ioctl 40046205 0 returned -22
[  296.596692][T16285] binder: 16278:16285 unknown command 29648
[  296.602697][T16285] binder: 16278:16285 ioctl c0306201 200000c0 returned -22
13:51:02 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
sched_setattr(r0, &(0x7f0000000100)={0x38, 0x3, 0x24, 0x7fff, 0x1f, 0x8, 0x4, 0x6, 0x6, 0x1}, 0x0)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x19b140, 0xcc)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r5, 0x2)
flock(r4, 0x1)
dup2(r4, r5)
ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000140)=0x20)
flock(r3, 0x2)
flock(r1, 0x0)
r6 = dup2(r1, r3)
dup3(r6, r2, 0x0)

13:51:03 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$dupfd(r5, 0x0, r4)
r6 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r8 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r7, 0x2)
flock(r8, 0x2)
flock(r6, 0x1)
r9 = dup2(r6, r8)
dup3(r9, r7, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x282a00, 0x0)
r10 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r11 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r12 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r11, 0x2)
flock(r12, 0x2)
flock(r10, 0x1)
r13 = dup2(r10, r12)
dup3(r13, r11, 0x0)
r14 = dup2(r1, r11)
dup3(r14, r2, 0x0)

[  297.264397][T16271] binder: 16270:16271 ioctl 40046205 0 returned -22
13:51:03 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x2, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:51:03 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0033db007fa0cb59976d53f6f286c78700ed7c7baeff0100002a0000009fe71d74deb9635eea843377145b4c618327c339b101bbd172e555539b6182a4d1803bc8876c00dcdd450902d7af8ab66f"], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:51:03 executing program 0:
r0 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r1, 0x2)
flock(r2, 0x2)
flock(r0, 0x1)
r3 = dup2(r0, r2)
dup3(r3, r1, 0x0)
fcntl$getown(r1, 0x9)
r4 = getpid()
sched_setattr(r4, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x3}, 0x0)
prlimit64(r4, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r5 = getpid()
r6 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r8 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r7, 0x2)
flock(r8, 0x2)
flock(r6, 0x1)
r9 = dup2(r6, r8)
dup3(r9, r7, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = dup(r11)
getsockname$packet(r12, &(0x7f00000000c0)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r13}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}]}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000016c0)={'vxcan0\x00', <r14=>r13})
r15 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = dup(r16)
getsockname$packet(r17, &(0x7f00000000c0)={0x11, 0x0, <r18=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r18}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}]}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0)
getsockopt$inet6_mreq(r2, 0x29, 0x1, &(0x7f0000001d00)={@initdev, <r19=>0x0}, &(0x7f0000001d40)=0x14)
r20 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r21=>0xffffffffffffffff})
r22 = dup(r21)
getsockname$packet(r22, &(0x7f00000000c0)={0x11, 0x0, <r23=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r20, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=r23, @ANYBLOB="00356892a9dad189f4001a8018000a001400070000000000000000000000000000000000080000", @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x0)
r24 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r25=>0xffffffffffffffff})
r26 = dup(r25)
getsockname$packet(r26, &(0x7f00000000c0)={0x11, 0x0, <r27=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r24, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r27}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}]}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0)
sendmmsg$inet(r7, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000180)="3e8b05a6b88a2f40a2e0e666d4bba072ae203d0a904789d0427a7f857364940d93853173f0bd18d018b83b2ba55c4d7570e80a0c39c44b1fe2ccf4d4a15c670fdcfff6c9d8cdf5873868e8", 0x4b}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="602244eb3ecf9c8528a65c5254cfef48df786fc30e76f2a9b2925b7ba255c04eca0b403efe28ec5d68346058b19afc2da81fdae8e1404e19ed4c771acd267eb63e321a9393ec7d633deb5069d42f3643161e2f7891f3536d708315ac3251ccb054354133a97a93d40a6d0bc50c6ef553fc6a970ebfdd81d7184abd5de020a83595f24309f256b3928ff1c28fa095cae5bdda743fe8fb54fd273d034932b3bd8eacb88c76c8caf0dc43da9d777bfa54b789bd0bb4f8", 0xb5}, {&(0x7f0000000200)="53221cff8510784be5aaef117a9e2c0b6aa9270bf3d56ba4d2301700df9a1de81735607c8c1eb60aac4c345bedd15bd5679ed356e27571cc94772829633462a1bda28191da04a8210a", 0x49}, {&(0x7f0000001440)="975a246df2457fcf1cc08ba9cc661fe2d1993853f94963947a52d2cc49011124f29ede102afb2e153f4810263f0b22b32fc6818b03faad5c8f72959f78adf456578161808c2916f756dd3d15d3f71ed472c097f255db4ca8be502c70004c5676799cbe905ba1785a2afd00ce214585c8c94c83bbd5e7c76ee17734a9bc85dd770e565e6651743faeab074b6abbe4338f7e264653bfdc09128625dcb71e68864b84983d68ea6efa848a332b176bae621cac9fdc5245da5b2626cf51670ea7a7f490d150ca507670ece195f52ec1ee52f402a96d88e883b7c49e199333eabed2637ea30840b7", 0xe5}, {&(0x7f0000001540)="c64e761a3f0cb3b90a25d747cf284b328a0c465222e57a1dd2e621b482812fc285b2a587ce21f3e6e0ca1ae8d40ddac433b6a27ba1b168ba6414e31494dc10d3b0689b388c5184515610d79aef66ddbf9dfe26e73fb28058369446889e19eb7cf476a40cae0ae3fb6c550cb2a55cf2dd1067929d3717e35da30e45bf98b12da177ad980be96f1065ed6c467123b61c1ab0ea4bcbd9618384f0b5aaecf0363f7808dda5ddc9966dbeb75d6f4cb3c88f0cd42abe8a9cd677c77cfb89833f0f46de42bd69f2d54ee0183fd806adecff1b2cd656e37f4dade10c964073e7c0519f68951b224ed2a5b667d212a868140dd4500d89ca8b20", 0xf5}, {&(0x7f00000002c0)="4ab53bfc79aa12575a68fe510e5ffeba5ed3a02f7ebbca13a984dd22d2cc827c83fa011b226d9fc72cdfc4cf102d99738a4c2f74d69f80b5d3fdfe8b32bd336e850dd58592", 0x45}], 0x7, &(0x7f0000001700)=[@ip_retopts={{0x38, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0x57, 0x0, 0xc, [0x0, 0x10000, 0x1]}, @timestamp={0x44, 0x14, 0x40, 0x0, 0xd, [0x6, 0x9, 0x6, 0x0]}, @noop]}}}, @ip_retopts={{0xdc, 0x0, 0x7, {[@cipso={0x86, 0x4e, 0xffffffffffffffff, [{0x2, 0xc, "7ae20cfb940204cb7c70"}, {0x6, 0x8, "8bd7fc14b34a"}, {0x6, 0xb, "ea9d7d1d8abeecc53f"}, {0x2, 0x5, "ea123f"}, {0x6, 0x6, "edde5f8c"}, {0x6, 0x7, "2cc45ab4fe"}, {0x0, 0xf, "d72405c4d275aa5919fb49ce88"}, {0x5, 0x8, "36201db995aa"}]}, @rr={0x7, 0x2b, 0xaf, [@remote, @multicast1, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x31}, @remote, @local, @multicast2, @dev={0xac, 0x14, 0x14, 0x29}, @dev={0xac, 0x14, 0x14, 0x18}]}, @ssrr={0x89, 0xf, 0x84, [@empty, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0x14, 0xcb, 0x0, 0xa, [0x5, 0x2, 0x5, 0x8]}, @noop, @timestamp_addr={0x44, 0xc, 0xba, 0x1, 0x5, [{@loopback, 0x400}]}, @timestamp={0x44, 0x20, 0xbe, 0x0, 0x5, [0x8, 0xff, 0x0, 0x9, 0x3, 0x701d, 0x4]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r14, @local, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r18, @rand_addr=0xfffff8ad, @loopback}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}], 0x1d0}}, {{&(0x7f0000001900)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000001b00)=[{&(0x7f0000001940)="495812999a7397fda4985c0dab0a5324ec06f1cdcef3112de554097f58c3c126513f184ee73bbb237f84b332d9a70c5ffe2ba6ee2cc7e060256ea463e67f2d8471bed09ad7da023ccaaa7ba9774affc8b9bc16a4c75c464c4d0c5886afa473f09704a430348b76af67cdfedf483fa6a063619a253debc5e7ad59d166ec3341300f495ef78bf4f5456413762bb020ddf66ad293db1dbcff4544397029760d30f47953df5816496afcf9010768aa7a1209", 0xb0}, {&(0x7f0000001a00)="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", 0xfb}], 0x2, &(0x7f0000001b40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x18}}, {{&(0x7f0000001b80)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001cc0)=[{&(0x7f0000001bc0)="87023ad26ed5982a446f481e7805ae299860605e71624230f99430d55dd7c5fe2084beefb2cb78edcbc098bfb71d72e05e9626c74e328cf80d0b97545f4189923cf99c21d523880e10ea6a624a001c7ef93c52e0eef5190505fb8bf54292d924bafbadf590883f3b694a0fa2a6798ca85e66505347154adefa1914f5157752a24652546d91fbd9e31cdc42c9fcbc764072cb4e04b4653c4888fb60c06e641b5c3b683cc7e55b801aa7ba56dbf98875f492a35dbaef6c389d0746e58346ff207f", 0xc0}, {&(0x7f0000001c80)="f2754b6362b081d725cc8d4244fa562232f096ddf4840ba3c5ed", 0x1a}], 0x2, &(0x7f0000002600)=ANY=[@ANYBLOB="1c000000010000000000000008000000810ecb6e4d45ccee063234ba82289d47af9c4cf8c0f9039280b63b13e0ee3e56373f5c30e2b93d9882f9c826a8c62a3399e4c6f600fa90892dc8ff0354510fa228e18d5e5a0b0114c0daf4", @ANYRES32=r19, @ANYBLOB="ac1e0001e00000010000000014000000000000000000000001000000790f0000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbffffffff0000000011000000000000000000000001000000d9000000000000001400000000000000000000000200000006000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="000000060000000000000000240000000000000000000000070000008313cd7f000001e0000002ac1414aa000000000000000000"], 0xd0}}, {{&(0x7f0000001e80)={0x2, 0x4e21, @rand_addr=0x6}, 0x10, &(0x7f0000002280)=[{&(0x7f0000001ec0)="1c9ce87d1a96a3cbdef85c067d6cc075baab04ad43b826d632026cbafc1a5c03dad2acf09e35cd2c5199b5c697b8cf5fdd6d35aa17444e8d7a61d2418a93170b0e404a5bb92443bac09979bdefbaeba201ee335cb415f7fbefe0115e6385b9dabfd91cfdfe7eb0cc455b28817630b1289d74fe153e5e8859250a21820b8c9b3a20f001f052cc4a43fa66721f670ce3d6dc112d4af1551bd9583f1e140a23aaf79af55489a4e918cad9c0f52efcc22864b21c404a27229ab2f5fc2064c72f5c2054172a9d97e4d66d3c0955a7e7c6c36391ae7c681b1aa8edca917c1a8af29d", 0xdf}, {&(0x7f0000001fc0)="03f17a7c879432a1ec549050ae2ef97dc0d96cf2d0fe3fc80cb94b3d015f3ff071cf8a63710f3b54fb7f85efa9797746e157c6390ea97a0791bd67dcde23b7eaa498dd1915fe9c3122f078eccc277bc89e6c885dedea9f31f74bed5f0601ecd57a40416ca490170d9dccddab693a941c5135c51b6f44d63e93b60fd0a9e1bb06f32fe8aa578ad4149b0c0b5816421afa43660da0242a59edba8fd1c977c6737b6e1729347300abc85174d6781e9614040ddd331cc807ba3ad8", 0xb9}, {&(0x7f0000002080)="c04913249928aab2c37ff5b47b8651d2090677b49c0fdf7fe2a140ce53988bb6b2949d4f248730aa6899d374edb77fb9a5a783b6c8ab75bcb063af8103acc91ab759418633880ce0077a7195e5e850567c6a3a394319d30e7904cd3f9ee28e3f19f502052efb73290fcab352", 0x6c}, {&(0x7f0000002100)="77d3cbee85910e88732c1be69a0b0e77b5077c62879bd6e7ec4ef181bc0c47dac78095bf6a44153a3ee4eb2941885abea1d778f5fc1d13a63326251a0d17862f162bbec235b84418c4a738049457ba07828a85d77d9a6bcc69e74d3d33441023d045638cbfb437e70f808a8c40ce9827675bf114c6ebe19cdacd75c40eb45247a0295533a826865c78c2ee627d09db08ee842cd75f5fc60277d788a033f8c7f9590ec23746814e3ea2adb3600612de0c0aacc8e093b29a8d904c27fd694fc9c83ddf50099b6463e5b8048ea3f5f6f8431af3c59885a71b77bf00abca22a06bb8acf1936b6ed025de27ba5fba8faaef0cfa", 0xf1}, {&(0x7f0000002200)="8fc2e702ecd953c4c26d9aa4b6a4cb12434f561d0ddb05c6d3b644564d9727e3182328f25ee069243c41f3d53a19992bdfefb7f08fda1883fed7973a780fc34ec25bbf91c1d3178d159518aa6ccfd0f5b5d68906773165ed27c663c330756a", 0x5f}], 0x5, &(0x7f0000002300)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7fff}}, @ip_retopts={{0x100, 0x0, 0x7, {[@lsrr={0x83, 0x1f, 0xe5, [@local, @multicast1, @empty, @remote, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @cipso={0x86, 0x42, 0x1, [{0x7, 0xb, "6ca7bb59a1b14ea215"}, {0x6, 0x10, "d9fbff4ae78771281848289425e2"}, {0x7, 0xe, "98a23acac82b766af8952c82"}, {0x0, 0xc, "c6c323fabf3bb1bba515"}, {0x5, 0x2}, {0x0, 0x5, "af56f4"}]}, @ssrr={0x89, 0x7, 0xdf, [@empty]}, @timestamp_prespec={0x44, 0x34, 0xb8, 0x3, 0xa, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@empty, 0x6157}, {@remote, 0x8}, {@loopback, 0xffffff95}, {@empty, 0x6}, {@multicast2, 0x67}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x1, [0x81, 0x6]}, @generic={0x82, 0x3, 'V'}, @cipso={0x86, 0x45, 0x1, [{0x0, 0x8, "41e5b76b4eb7"}, {0x0, 0x5, "8db5d5"}, {0x6, 0x9, "b22d5e896890bc"}, {0x7, 0xe, "cb736e97b368924692d035e9"}, {0x7, 0x4, "6c84"}, {0x1, 0xc, "4289b8dc0c644ae3f301"}, {0x7, 0x4, 'Qi'}, {0x0, 0x7, "8ec9bff9e1"}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xd}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r23, @rand_addr=0x1, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r27, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x219dab19}}, @ip_ttl={{0x14, 0x0, 0x2, 0x200}}], 0x1e8}}], 0x4, 0x8001)
sched_setattr(r5, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r28 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r28, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r28, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r28, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  297.316564][T16276] binder: 16270:16276 ioctl c0306202 200000c0 returned -22
[  297.337099][T16305] binder: 16304:16305 ioctl 40046205 0 returned -22
[  297.344151][T16285] debugfs: File '16278' in directory 'proc' already present!
[  297.353808][T16281] binder: 16280:16281 ioctl 40046205 0 returned -22
[  297.387693][T16312] binder: 16311:16312 ioctl 40046205 0 returned -22
[  297.396894][T16314] binder: 16304:16314 unknown command 131072
[  297.404926][T16314] binder: 16304:16314 ioctl c0306201 200000c0 returned -22
13:51:03 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flistxattr(0xffffffffffffffff, &(0x7f00000000c0)=""/37, 0x25)
flock(r3, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
write$P9_RSTAT(r6, &(0x7f0000000180)=ANY=[@ANYBLOB="520000007d010000004b0001000000000020040000734b94298dcabacd00000000006a090000080000000000000000000000080070726f63707070310300656d300b005c776c616e3070726f637d0200092d4d0cbc8b9b8eb5a7a808e1f9e57ff8768a3446fd"], 0x52)
flock(r1, 0x1)
r7 = dup2(r1, r3)
dup3(r7, r2, 0x0)

[  297.443700][T16317] binder: 16311:16317 unknown command 14365440
[  297.450143][T16317] binder: 16311:16317 ioctl c0306201 200000c0 returned -22
13:51:03 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_proto_private(r4, 0x89e6, &(0x7f00000000c0)="d25c8735fd434723227639e77ca85d356d38454f1f1dc67f4477c7f6a7848970013d701b56e6f024b6402a28735c7e04")
flock(r1, 0x1)
r5 = dup2(r1, r3)
dup3(r5, r2, 0x0)

[  297.594460][T16324] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'.
[  297.607422][T16324] binder: 16313:16324 ioctl 40046205 0 returned -22
13:51:03 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x80)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x0)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)
ioctl$KDDISABIO(r3, 0x4b37)

13:51:03 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
dup3(0xffffffffffffffff, r2, 0x0)

13:51:03 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x420200, 0x0)
flock(0xffffffffffffffff, 0x2)
flock(r2, 0x2)
flock(r1, 0x0)
sched_yield()
r3 = dup2(r1, r2)
dup3(r3, 0xffffffffffffffff, 0x0)

13:51:03 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
r4 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x8000, 0x0)
ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000100)={0x0, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e23, @local}, 0x35, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x5, 0x1d9e})
flock(r1, 0x0)
r5 = dup2(r1, r3)
dup3(r5, r2, 0x0)

13:51:03 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x453a09e9)
flock(r1, 0x0)
dup2(r1, r3)

[  298.138664][T16305] binder: 16304:16305 ioctl 40046205 0 returned -22
13:51:04 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x4000, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:51:04 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0xe42e7a2eec73a32f)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="13aee8a7672f36b2e969b2a70ae77aedc4825e123777f74e62195879af34f0a2a0fc83dcaa3e1938217c71573ca021cf481b319a1d4b9cc0798766b34388d608b14f753d1fa184fff61fd709991d610f227a2fb48d5a0f7bdcd8640c28fa2f3fce1348d8c3f96748d589ac8b516e7db17031dd98accf2817cc698e7ab913a90a9e5c87a5de62fca8d74ef1a9cff5fc13c996cecd21ce697b3ff4388d7dd26a16ff596c8bdf43b3223353472d7917457fb2a11666b33dc48f469caf121136aa7ee80a6987a82b294bc9"], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:51:04 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
r4 = ioctl$NS_GET_PARENT(r3, 0xb702, 0x0)
ioctl(r4, 0xffffffffffffffff, &(0x7f00000000c0))
r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r6 = getpid()
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000840)={0x2, 0x4, 0x4, 0x400, 0x4, [{0xb54, 0x8, 0x4, [], 0x200}, {0x0, 0x4, 0x8, [], 0x2000}, {0x7ff, 0x9, 0x1, [], 0x408}, {0x6, 0x1, 0x1000, [], 0x4}]})
sched_setattr(r6, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x3}, 0x0)
r7 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r8=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r8, 0x0)
r9 = getegid()
r10 = getegid()
setregid(r9, r10)
r11 = syz_genetlink_get_family_id$fou(&(0x7f0000000980)='fou\x00')
sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x2c, r11, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004001}, 0x2040080)
r12 = socket$vsock_dgram(0x28, 0x2, 0x0)
r13 = openat$random(0xffffffffffffff9c, &(0x7f0000000240)='/dev/urandom\x00', 0x109000, 0x0)
r14 = signalfd(r4, &(0x7f0000000740)={[0x8]}, 0x8)
sendmsg$unix(r5, &(0x7f0000000800)={&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000006c0)=[{&(0x7f00000001c0)="a12c79db606d92c0d43b0cdac5d64cd1ec0c07563247710fa796bf731a244e992f67bb", 0x23}, {&(0x7f00000002c0)="58b76029b9fd062dc57398098e634609c1caf49d3f7bf26c190319eeb036d6f313b3cd90f9618b93717005e5aaf218430676fc739c5378024c65dcfb16b1fe6b7c60844d141c12f5079e22c91717df7c5e9f6bb7e529992e43eb1873e21c56e135ee2dafddd401718b8676ad1ac2e420f0d7f555b681b0786b8862df507823472d0365726086e524d7671a6ce83f9019723e05316ec79644d8980e31027f7d0d839ccc13ac0ed5523ac9ee9bebbba43c6200aeac9a2e6168269258f7354ce875ee2e02cd92db3c0c23993a62e7d32a", 0xcf}, {&(0x7f0000000200)="8d5a65fc960bc4b1f8e1437cbf775115109843b4", 0x14}, {&(0x7f00000003c0)="3afcdfe0ed7c74c1d7ed832a01e4b54f94fa4e7182c795c94ecc7c2142a6b4ee09c3028d4c57785213bd60f52dc710e393b06d9aa0256e2dd7d5c0b55b294f8cd5738889ef28f89af2a79f88341c684378e40b1d2e5e36ce99b80090d6ddcf1fa69f778b561603584f588cce23e72d158f61687c87f3f3a3fab2a0f6da74c3bdee5f73f7e04dcb013e8a769a741953d525752af3f0e119dcb62f4e560d798cf5df2fc998ee7cd462162f5e9156d2ca21004c3adea35391211765a8113c4988456c14cc863643f284cc5cbb9d60c5336e1ef5b19faca0a1a2e752cd330623177094730ec2c89fcb597582adb3a5bb33343e2339a6b88fcb9efd71cfc81ec129", 0xff}, {&(0x7f00000004c0)="100640de1740865fa6b7172ccd0ac421bcf19f1770b937ce8fb3326e073972fc954e55e208eb491d84118361b553523dcaa967d1fb37b706a93a36ce7cabb9bc243f0581fb53fe6fb7a9610200722d01ec64ea5cbab96f2db4794e0a68392f84ec615075cf4576307874aafa2c694e0e5bc56f266fbab9791289d451ada0ad98f0cbc290b5be9798f21ce8478ec7d7dc0faacdd3607fcfce83d725078bc3da0a1f1d0b34e890d92acba2ce10c6f2d1db467b9759f834e664437aa34bda6843ca6352be1fb1308dce4bd1ab6b8c735e", 0xcf}, {&(0x7f00000005c0)="dc1778e0b17b398f9ed250bae5cb107383cc9179973d084ee47e8f9fd273c486e50fcdcfbee8e33398c9929b4eaa0c7936d1010aa42edf975e639ac2b0f0d190834d62b40c9a0cb58d6a6797f9600c7796db797067e468bd159a949a926a31e137cad036ed16af5f4e8f844e8eb4249ed3e2880fc5126ba5d042932ea39affa1ff7dd3116396b26b436a013a6f0de1d9e05e1e91a6f258b65d0459fd337ef66e28e63f1d11f252ba1a5ee8352c509ba71ce8788277196f3f51e43441501b3391f131be8c93584d4e4638d3643a5f66ffd2c56e52266e57b7f38e4a03a7e6284e7b41038248d9bba17f", 0xe9}], 0x6, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {r6, r8, r10}}}, @rights={{0x1c, 0x1, 0x1, [r12, r13, r14]}}, @rights={{0x14, 0x1, 0x1, [r4]}}], 0x58, 0x50}, 0x4004800)
flock(r1, 0x1)
r15 = dup2(r1, r3)
dup3(r15, r2, 0x0)
pipe(&(0x7f00000000c0))

[  298.188174][T16362] binder: 16311:16362 unknown command 14365440
[  298.194736][T16362] binder: 16311:16362 ioctl c0306201 200000c0 returned -22
13:51:04 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x3}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x7c, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})
r2 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r3, 0x2)
flock(r4, 0x2)
flock(r2, 0x1)
r5 = dup2(r2, r4)
dup3(r5, r3, 0x0)
getpeername$tipc(r5, &(0x7f0000000000)=@id, &(0x7f0000000080)=0x10)
r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0)
getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000001c0), &(0x7f0000000200)=0x4)

13:51:04 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x3}, 0x0)
r3 = getpid()
sched_setattr(r3, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x3}, 0x0)
r4 = getpid()
sched_setattr(r4, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x3}, 0x0)
r5 = getpgrp(0x0)
clone3(&(0x7f0000000440)={0xb0000000, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000180), {0x15}, &(0x7f00000001c0)=""/181, 0xb5, &(0x7f0000000380)=""/151, &(0x7f00000002c0)=[r0, r0, r2, r3, r4, r0, r5], 0x7}, 0x50)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  298.245281][T16370] binder: 16367:16370 ioctl 40046205 0 returned -22
[  298.253198][T16371] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'.
[  298.275938][T16377] binder: 16376:16377 ioctl 40046205 0 returned -22
[  298.283263][T16379] binder: 16378:16379 ioctl 40046205 0 returned -22
13:51:04 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

[  298.371985][T16375] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16375 comm=syz-executor.2
13:51:04 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r5 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r6 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r5, 0x2)
flock(r6, 0x2)
flock(r4, 0x1)
dup2(r4, r6)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$dupfd(r8, 0x0, r7)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x5, &(0x7f0000000100)=[{0x1, 0x3, 0x80, 0x5}, {0x1, 0x3, 0x6, 0x9}, {0x7f, 0xac, 0x9, 0x8}, {0x5, 0x8, 0x9}, {0x7, 0x7f, 0x20, 0x80000001}]})
dup3(r4, r5, 0x80000)
setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000b0200"/20], 0x14)
flock(r1, 0x1)
r9 = dup2(r1, r3)
dup3(r9, r2, 0x0)

13:51:04 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r3, 0x2)
dup2(r2, r3)
r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
ioctl$USBDEVFS_RESET(r4, 0x5514)
r5 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r6 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r5, 0x2)
flock(r6, 0x2)
flock(r1, 0x1)
r7 = dup2(r1, r6)
dup3(r7, r5, 0x0)

13:51:04 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000000c0)=0x4, 0x8)
flock(r1, 0x0)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:51:04 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ptrace$pokeuser(0x6, r0, 0x400, 0x3)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x0)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:51:04 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x4)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r5, 0x2)
flock(r4, 0x1)
dup2(r4, r5)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r5, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000002cf0c21d97f60b1d1b959fdd5363dbf7ac73af2be99491e343867753fd594d80a054407f346c817c435f01040000000000000264d43846748572fef2971e5535f30b6f93bed956bf3b36999537a64700787b9e750b0d61d8346ad41e8795d52aadff78cd0c015256f045090a6b114c3b789d3595a06218518ff23402d233c637c8aa08714bb9ab48cbd15bcb63eac46a8cceb44176c9b0699ffe70ac", @ANYRES16=0x0, @ANYBLOB="000027bd7000fcdbdf2505000000080002000500000008000400ffffffff08000800ffffffff14000600ff010000000000000000000000000001"], 0x40}, 0x1, 0x0, 0x0, 0x4008015}, 0x20040804)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x0)
r6 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r7 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r7, 0x2)
flock(r6, 0x1)
dup2(r6, r7)
r8 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r9 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r10 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r9, 0x2)
flock(r10, 0x2)
flock(r8, 0x1)
r11 = dup2(r8, r10)
dup3(r11, r9, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f00000001c0)={0x0, r11, 0x100000001, 0x24, 0x5, 0x10001})
r12 = dup2(r1, r3)
dup3(r12, r2, 0x0)

13:51:04 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0xfeffff, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  299.041908][T16370] binder: 16367:16370 ioctl 40046205 0 returned -22
[  299.061475][T16431] binder: 16430:16431 ioctl 40046205 0 returned -22
[  299.084510][T16433] binder: 16378:16433 unknown command 56
13:51:05 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\nc\x00\x00'], 0x1, 0x0, &(0x7f0000000140)="f4"})
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2000, 0x0)
ioctl$KDDELIO(r2, 0x4b35, 0x2)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r4, 0x2)
flock(r3, 0x1)
dup2(r3, r4)
ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f00000002c0)={0x4, 0x1ff, 0x10, 0x2, 0x1, 0x8, 0x0, 0xcf, 0x1})
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x10080, 0x0)
setsockopt$inet6_tcp_TLS_RX(r5, 0x6, 0x2, &(0x7f0000000180)=@ccm_128={{0x304}, "a6a525552f82d89b", "1fd3d913209f869776ef432bd4610525", '=EIx', "6514a9aa886e7ae3"}, 0x28)
ioctl$KDGKBDIACR(r5, 0x4b4a, &(0x7f00000001c0)=""/187)

13:51:05 executing program 1:
prlimit64(0x0, 0x9, &(0x7f0000000000)={0x5, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b620003"], 0x1, 0x0, &(0x7f0000000140)="f4"})
r2 = openat(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x101000, 0x5)
setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000680)=0x3b, 0x4)
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)="9b76acf804643bc2609ab928ea8dbd3874bfb352b2dcb6489fe3379f70ddbe61cf04aca36f2a7beb2e0aba58ddb58039ba4d1a37c40cd4e0d9ea0f91cda114acc994c70630dc75fd8bb4812371aa0d1b5787c0e49b2970d270a42daed63400731ff748cd7e52ce1af71a6a466216d8ac4545eb69dfc29078654630ce33a518595a697ec9466eedc50f83c5544f9a8ca843c3797f83ea0d0d8e9023d41ea2cfc6c872143a39", 0xa5}, {&(0x7f0000000380)="03539292b4504355b7e9e63c39db425fbc2e0b51cd09a423d9fdc7e0169d218df44db62974c40d98ce24cb15dfdf49661f337f8d338426bdea282b9053abd1f3181a0d45527f14d98f5d2709133cb824bacec421a8dddbf90372edf0997fd1a780298c4e22348148775ae45736c5b140c9cd28e791994d0b791dfd26a1245407919e0576469eccbf40eff0bd5deac5974904a59a9dd33f323b6ede839302b7239f24448235ee091b950bc84d03db799ffc343b485f49769e5940cdf9bfda4fdf5cb136c9c1655707bde58def5f74ca8d8d95f609c2d5c08143ee57e52f8d90f156e31d0a", 0xe4}, {&(0x7f0000000480)="ff11fc6828fddc8b742a601a6913544ff1accc5249b97e63aaf92c7e46b77723cc97d1fbcb598d17df9c2aa49d2b1af3e174bc09a0fe39261b92cd589ed1306ff6b5f625e5229c61c4366aaf33143e38c91e6f3182323b0190517912d3b5ecb504deed262498e8838a2c7235baaf8a23de8a261eea3c63c63d66836e6e46d6326060f39b2c364da2622721f9", 0x8c}, {&(0x7f0000000540)="fad897e111270dc536a32b5c3dfee26bfd057b34e5aa7dd791c847e5d28e09ef7ac25e990e2ee0f46df051157d103f5796c0b57ee6edb58144b94369960fd01893a4914203ccb13f9ed939b55c25d51c82ea5e0d9280d57623efc39350a7a77fc6270b6a89fc19da5ff89847edd4bf430e7bce5e251bf1046d69db6575ebab5e215694d903980572da1728ab848c13206fa7796db0ee732a51d44e27da547a", 0x9f}], 0x4)
r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f00000002c0)={{0xa, 0x4e22, 0x1f, @dev={0xfe, 0x80, [], 0x33}, 0x7}, {0xa, 0x4e20, 0x0, @remote, 0x6}, 0x1ee1, [0x5, 0x7ed1b258, 0xfffffffc, 0x0, 0xfffffffe, 0xcb420000, 0xb9, 0x7ff]}, 0x5c)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600))

[  299.090972][T16433] binder: 16378:16433 ioctl c0306201 200000c0 returned -22
[  299.109347][T16436] binder: 16435:16436 ioctl 40046205 0 returned -22
13:51:05 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@random={'osx.', '/dev/binder#\x00'}, &(0x7f0000000180)='vboxnet0cgroup)-[\x00', 0x12, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  299.132585][T16439] binder: 16438:16439 ioctl 40046205 0 returned -22
[  299.162723][T16440] binder: 16435:16440 unknown command 25354
[  299.169063][T16440] binder: 16435:16440 ioctl c0306201 200000c0 returned -22
[  299.176498][T16440] Unknown ioctl 19253
[  299.196746][T16442] binder: 16441:16442 ioctl 40046205 0 returned -22
13:51:05 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/208, 0xd0)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:51:05 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
r5 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r6 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r7 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r6, 0x2)
flock(r7, 0x2)
flock(r5, 0x1)
r8 = dup2(r5, r7)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = fcntl$dupfd(r10, 0x0, r9)
ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200)
write$eventfd(r11, &(0x7f00000000c0)=0x6, 0x8)
dup3(r8, r6, 0x0)
sendfile(r1, r6, 0x0, 0x2)
dup3(r4, r2, 0x0)

13:51:05 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:51:05 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
ioctl$sock_ifreq(r1, 0x0, &(0x7f00000000c0)={'virt_wifi0\x00', @ifru_names='dummy0\x00'})
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
eventfd(0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:51:05 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
sched_setparam(r0, &(0x7f00000000c0)=0x1)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x0)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:51:05 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x0)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x3, 0x8, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x40004)
getpid()

13:51:05 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
getpeername$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in=@broadcast, @in=@remote}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe8)
r5 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r6 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r5, 0x2)
flock(r6, 0x2)
flock(r4, 0x1)
r7 = dup2(r4, r6)
dup3(r7, r5, 0x0)

13:51:05 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x0)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

[  299.862274][T16431] binder: 16430:16431 ioctl 40046205 0 returned -22
13:51:05 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x2000000, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:51:05 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802)
r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x5)
ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000300)=0x1)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})
r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x54020018}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r4, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x7ff, 0x3f, 0x80000001, 0x7}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x800)

13:51:05 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f00000000c0)={0xffffff7f, 0x8, 0x4df1, 0x100, 0x1})
r4 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r5, 0x2)
flock(r4, 0x1)
dup2(r4, r5)
ioctl$TIOCGLCKTRMIOS(r5, 0x5456, &(0x7f0000000100)={0x10000, 0x0, 0x3, 0x7, 0xd, "4a434f9c0f694ad92850c3e247601749cc7359"})
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x0)
r6 = dup2(r1, r3)
dup3(r6, r2, 0x0)

[  299.910414][T16492] binder: 16435:16492 unknown command 25354
[  299.916386][T16492] binder: 16435:16492 ioctl c0306201 200000c0 returned -22
[  299.940676][T16497] binder: 16495:16497 ioctl 40046205 0 returned -22
[  299.947598][T16497] binder: 16495:16497 ioctl c0306201 20000280 returned -11
13:51:05 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x3}, 0x0)
getpgid(r1)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r3, 0x2)
flock(r2, 0x1)
dup2(r2, r3)
r4 = openat(r3, &(0x7f0000000000)='./file0\x00', 0x4400, 0x40)
ioctl$TIOCMIWAIT(r4, 0x545c, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r5 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r6 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r7 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r7, 0x2)
flock(r6, 0x1)
dup2(r6, r7)
r8 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r9 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r10 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r9, 0x2)
flock(r10, 0x2)
flock(r8, 0x1)
r11 = dup2(r8, r10)
dup3(r11, r9, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r11, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:51:05 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket(0x6, 0x80000, 0x6)
getsockopt$TIPC_IMPORTANCE(r6, 0x10f, 0x7f, &(0x7f0000000100), &(0x7f0000000140)=0x4)
r7 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
ioctl$PPPIOCATTACH(r7, 0x4004743d, &(0x7f00000000c0))
flock(r3, 0x2)
flock(r1, 0x1)
r8 = dup2(r1, r3)
dup3(r8, r2, 0x0)

[  299.951619][T16499] binder: 16498:16499 ioctl 40046205 0 returned -22
[  299.955324][T16497] binder: 16495:16497 ioctl c0306201 200000c0 returned -11
[  299.970894][T16500] binder: 16495:16500 ioctl 40046205 0 returned -22
[  299.977836][T16500] binder: 16495:16500 ioctl c0306201 200000c0 returned -11
13:51:06 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x126, 0x808000}, 0x1c)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
r3 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r4, 0x2)
flock(r5, 0x2)
flock(r3, 0x1)
r6 = dup2(r3, r5)
dup3(r6, r4, 0x0)
r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x200000, 0x0)
pidfd_send_signal(r7, 0x6, &(0x7f00000002c0)={0x9, 0x6, 0x7}, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="ef620440030000007f6c39d6ead5ebc76c1025e0bd5aeb78749d306c71b1d8ef99b85a4609eeda2178ab00d5345455057a6b8acdc41382460eb8a10cb5629bd0c6f29b51ef14e0ce915754df52054599d1dc0e66ea48e94bd29d0b6d40692f8a5dadea13141e42669fd21e33508232c058cf710565a4f7610b96d52aaf000000000000"], 0x1d, 0x0, &(0x7f0000000000)="4935defa997f5e65d1742d6d868bcfeea59663b7956c10dd153ced2d7b"})

13:51:06 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = gettid()
sched_setattr(r3, &(0x7f0000000380)={0x38, 0x6, 0x2, 0x800, 0x4, 0x0, 0x8, 0x8001, 0x9, 0x3d}, 0x0)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r4, 0x2)
flock(r1, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r5=>0x0})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xc0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, <r6=>0x0, 0x0, &(0x7f0000000100)={0x2000000, 0x3}, 0x0, 0x0, &(0x7f0000000440)={0x5, 0x9, 0x0, 0x2}, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=0xc}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340), 0x8, 0x10, &(0x7f0000000000), 0x10, r6}, 0x78)
r7 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r8 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r8, 0x2)
flock(r7, 0x1)
dup2(r7, r8)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0x7, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x800}, [@generic={0x7, 0xf, 0x1, 0x8000, 0x660100}, @jmp={0x5, 0x0, 0x5, 0x5, 0x9, 0x18, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x2, 0x3, 0x7, 0xfffffffffffffff8, 0x8}, @call={0x85, 0x0, 0x0, 0x19}]}, &(0x7f0000000100)='syzkaller\x00', 0x2, 0x14, &(0x7f0000000140)=""/20, 0x41000, 0x5, [], r5, 0x16, r2, 0x8, &(0x7f00000001c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x1, 0x0, 0x5c1f}, 0x10, r6, r7}, 0x78)
r9 = dup2(r1, r4)
dup3(r9, r2, 0x0)

13:51:06 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
prlimit64(r0, 0xf, &(0x7f0000000180)={0xca7b}, &(0x7f00000001c0))
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$TIOCGWINSZ(r4, 0x5413, &(0x7f0000000100))
r5 = dup2(r1, r3)
dup3(r5, r2, 0x0)
r6 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r7 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r7, 0x2)
flock(r6, 0x1)
dup2(r6, r7)
r8 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r9 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r10 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r9, 0x2)
flock(r10, 0x2)
flock(r8, 0x1)
r11 = dup2(r8, r10)
dup3(r11, r9, 0x0)
dup2(r7, r9)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/mls\x00', 0x0, 0x0)

[  300.293555][T16521] binder: 16519:16521 ioctl 40046205 0 returned -22
[  300.303821][   T22] audit: type=1400 audit(1580219466.207:18081): avc:  denied  { getrlimit } for  pid=16523 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=process permissive=1
13:51:06 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x40000000, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:51:06 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x0)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r5, 0x2)
flock(r4, 0x1)
dup2(r4, r5)
r6 = dup2(r2, r4)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r7, 0x28, &(0x7f0000000080)={0x0, <r8=>0x0}}, 0x10)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={r8, 0x0, 0xc}, 0xc)
r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r8, 0x7, 0x10}, 0xc)
dup2(r9, r3)
dup3(r6, r2, 0x0)

[  300.752302][T16499] binder: 16498:16499 ioctl 40046205 0 returned -22
[  300.773238][T16537] binder: 16536:16537 ioctl 40046205 0 returned -22
13:51:06 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r3, 0x2)
flock(r2, 0x1)
dup2(r2, r3)
r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x22000, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000180)=[@sack_perm, @timestamp, @sack_perm], 0x3)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000080)={0x0, r4, 0x3, 0x3f, 0x20, 0x1})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ptrace$poke(0x5, r0, &(0x7f00000001c0), 0x3ff)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:51:07 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x8b900, 0x0)
pipe(&(0x7f00000002c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0xb5bd7dc56a15c312})
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000080))
r4 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r5 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r6 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r5, 0x2)
flock(r6, 0x2)
flock(r4, 0x1)
r7 = dup2(r4, r6)
dup3(r7, r5, 0x0)
openat(r5, &(0x7f0000000140)='./file0\x00', 0x288000, 0x2)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000180))
r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/hwrng\x00', 0x20200, 0x0)
r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000500)='gtp\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r10=>0xffffffffffffffff})
r11 = dup(r10)
ioctl$TIOCOUTQ(r11, 0x5411, &(0x7f0000000000))
r12 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r13 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r14 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r13, 0x2)
flock(r14, 0x2)
flock(r12, 0x1)
r15 = dup2(r12, r14)
dup3(r15, r13, 0x0)
sendmsg$GTP_CMD_DELPDP(r8, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x5c, r9, 0x411, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_NET_NS_FD={0x8, 0x7, r13}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x5c}}, 0x4000090)
r16 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r17 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r17, 0x2)
flock(r16, 0x1)
dup2(r16, r17)
r18 = openat$cgroup_ro(r16, &(0x7f0000000100)='pids.events\x00', 0x0, 0x0)
ioctl$VT_WAITACTIVE(r18, 0x5607)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24004101", @ANYRES64=0x0, @ANYBLOB="580329bd7000fedbdf250200000008000500ac1414350800090002000000"], 0x3}, 0x1, 0x0, 0x0, 0x24000001}, 0x0)
r19 = getpid()
sched_setattr(r19, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r20 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r21 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r22 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r21, 0x2)
flock(r22, 0x2)
flock(r20, 0x1)
r23 = dup2(r20, r22)
dup3(r23, r21, 0x0)

13:51:07 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

[  301.139809][T16526] binder: 16519:16526 ioctl 40046205 0 returned -22
13:51:07 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/bsg\x00', 0x102, 0x0)
ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f0000000400))
r1 = getpid()
r2 = getegid()
r3 = getegid()
setregid(r2, r3)
r4 = getegid()
r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001580)='/selinux/enforce\x00', 0x8400, 0x0)
ioctl$RTC_IRQP_READ(r5, 0x8008700b, &(0x7f00000015c0))
r6 = getegid()
setregid(r4, r6)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r7, &(0x7f0000005400)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000580)={0xa, 0x4e25, 0x0, @mcast2={0x0}, 0x401}, 0x1c, 0x0}}], 0x2, 0x0)
getgroups(0x4, &(0x7f0000000000)=[r3, <r8=>r4, 0xee01, 0xee01])
r9 = getegid()
r10 = getegid()
setregid(r9, r10)
getresgid(&(0x7f0000000080)=<r11=>0x0, &(0x7f0000000180), &(0x7f00000001c0))
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000380)={0x0, 0x8}, 0xc)
newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0}, 0x800)
r13 = socket(0xa, 0x5, 0x2)
setsockopt$IPT_SO_SET_REPLACE(r13, 0x0, 0x40, &(0x7f0000001680)=@mangle={'mangle\x00', 0x1f, 0x6, 0x460, 0x0, 0xe8, 0x0, 0x180, 0xe8, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x6, &(0x7f0000001600), {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x2}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x40, 0x3f, 0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xff0000ff, 0xff, 'veth0_to_team\x00', 'batadv0\x00', {}, {0xff}, 0x2f, 0x0, 0x42}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xc0, 0xf0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0xe, "b079", 0x1}}, @common=@icmp={{0x28, 'icmp\x00'}, {0x10, "8e05"}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x2, 0x35, @remote, 0x4e24}}}, {{@uncond, 0x0, 0x90, 0xc0, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x81, 0x88f, @remote, 0x4e24}}}, {{@ip={@loopback, @rand_addr=0xb9, 0x0, 0xffffff00, 'gretap0\x00', 'batadv_slave_1\x00', {}, {0xff}, 0x62, 0x1, 0x2}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x4}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0)
r14 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r14, 0x0, 0x484, &(0x7f0000000580)=""/4096, &(0x7f0000000440)=0x1000)
setgroups(0x4, &(0x7f0000000240)=[r8, r10, r11, r12])
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r15 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r15, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r15, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})

13:51:07 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000580)=0x1, 0x4)
setsockopt$inet_tcp_int(r3, 0x6, 0x4000000000014, &(0x7f0000000040)=0x80000000001, 0x4)
connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10)
sendto$inet(r3, &(0x7f00000005c0)="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", 0x6c1, 0x0, 0x0, 0x0)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4)
io_setup(0x1, &(0x7f0000000140)=<r4=>0x0)
r5 = fcntl$dupfd(r3, 0x0, r3)
io_submit(r4, 0x1, &(0x7f0000000440)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000180)="df", 0x1}])
r6 = open_tree(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x800)
r7 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r8 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r9 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r8, 0x2)
flock(r9, 0x2)
flock(r7, 0x1)
r10 = dup2(r7, r9)
dup3(r10, r8, 0x0)
io_cancel(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x100, r6, &(0x7f00000002c0)="b8b0f77051adf71aea0bb451c0e97774ad07b59ddad1555c056f906a5a76051eb651318a33299e82f6526deeaa2a7a21c2c0d33f587e2d1c244458f335586dcd188262c996ca25939b8988fdc637596ad1c25a2a11", 0x55, 0x6c5bb9aa, 0x0, 0x3, r10}, &(0x7f0000000340))
r11 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
lgetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='trusted.overlay.opaque\x00', &(0x7f0000000140)=""/176, 0xb0)
flock(r2, 0x2)
flock(r11, 0x2)
flock(r1, 0x1)
r12 = dup2(r1, r11)
dup3(r12, r2, 0x0)

[  301.217909][T16556] binder: 16555:16556 ioctl 40046205 0 returned -22
13:51:07 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x2}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x4)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x0)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:51:07 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0xfdfdffff, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  301.573949][T16537] binder: 16536:16537 ioctl 40046205 0 returned -22
13:51:07 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x80002, 0x0)
rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00')
r3 = open(&(0x7f0000000080)='./file0\x00', 0x100, 0x0)
flock(r2, 0x2)
r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x60000, 0x0)
write$tun(r4, &(0x7f0000000180)={@void, @val={0x0, 0x4, 0x80, 0x6854, 0x2, 0x5}, @arp=@generic={0x4b31fd5d7b22bb02, 0x9200, 0x6, 0x3, 0x3, @empty, "ca1918", @empty, "cd0d15b5ae7d"}}, 0x27)
flock(r3, 0x2)
flock(r1, 0x0)
r5 = dup2(r1, r3)
dup3(r5, r2, 0x0)

13:51:07 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r3, 0x2)
flock(r4, 0x2)
flock(r2, 0x1)
r5 = dup2(r2, r4)
dup3(r5, r3, 0x0)
getdents64(r5, &(0x7f0000000180)=""/238, 0xee)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  301.639596][T16579] binder: 16578:16579 ioctl 40046205 0 returned -22
13:51:07 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x2008d}, 0x0)
r0 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r4, 0x2)
flock(r5, 0x2)
flock(r3, 0x1)
r6 = dup2(r3, r5)
dup3(r6, r4, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000100)={'vcan0\x00', {0x2, 0x4e22, @local}})
r7 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f00000000c0)={0x4, 0x8000, 0x0, 0x0, 0x3f})
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r8 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r9 = open(&(0x7f0000000000)='./file0\x00', 0x80000, 0x0)
r10 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
fcntl$dupfd(r12, 0x0, r11)
fcntl$setlease(r3, 0x400, 0x0)
flock(r9, 0x2)
flock(r10, 0x2)
flock(r8, 0x0)
r13 = dup2(r8, 0xffffffffffffffff)
r14 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r15 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r16 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r15, 0x2)
flock(r16, 0x2)
flock(r14, 0x1)
r17 = dup2(r14, r16)
dup3(r17, r15, 0x0)
fsetxattr$security_ima(r17, &(0x7f0000000140)='security.ima\x00', &(0x7f0000000180)=@sha1={0x1, "dffc3f18d0a2478b8e992d69de9987b24afa6901"}, 0x15, 0x3)
dup3(r13, r9, 0x0)

13:51:07 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x480b81, 0x40)
ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000080))
r2 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  301.787948][T16594] binder: 16588:16594 ioctl 40046205 0 returned -22
[  301.852200][T16599] binder: 16598:16599 ioctl 40046205 0 returned -22
[  301.904687][T16602] binder: 16598:16602 unknown command 2059783438
[  301.911229][T16602] binder: 16598:16602 ioctl c0306201 200000c0 returned -22
13:51:07 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
r5 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000100)={0x5, 0x18, 0x0, r4})
r6 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r7 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r6, 0x2)
flock(r7, 0x2)
flock(r5, 0x1)
r8 = dup2(r5, r7)
dup3(r8, r6, 0x0)
ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x6, 0x10001})
dup3(r4, r2, 0x0)

13:51:07 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6e, 0x0, &(0x7f00000002c0)="c6e2154090e059b6309e0efcee3c712416565c9d11e4fe48c570f38955fcd7c12c182d4b50f6659f97e6a076c78148ddfa39093516926b092c25dae8df88a17bb5120100010013e72e51871a1ae100176b7ebf1ad195c62ad92883e72f2bf687854ffcc45dac34e126e1c2ad6d10"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="11e27f69"], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  302.031132][T16614] binder: 16613:16614 ioctl 40046205 0 returned -22
[  302.083771][T16618] binder: 16613:16618 unknown command 1769988625
[  302.090248][T16618] binder: 16613:16618 ioctl c0306201 200000c0 returned -22
13:51:08 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
setrlimit(0x2, &(0x7f0000000240)={0x7, 0x63e})
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = getpid()
sched_setattr(r4, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x3}, 0x0)
r5 = getpid()
sched_setattr(r5, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x3}, 0x0)
sendto$inet6(r2, &(0x7f0000000180)="ab6d6135fdec05b44acbcfced67d1d684d6c8b7a74b7e7c8157b450ef71429e46c11287d2cf127ed4cf93eae1a98548bea4f80cb0d5b473a886acdf75d32b230a7a18828511301b73a1a016b4fa9ce9ea2ad642ff3079d7e3a038fa9931d2028860130864c0a2784b40c1dfecc1dea94eaeb2079f53f99e9a1a59c65375d41f6ab11d5c1eacf0caa73f65bf963dd42c77e6927", 0x93, 0x4000000, &(0x7f00000000c0)={0xa, 0x4e23, 0x7, @loopback, 0x10001}, 0x1c)
r6 = getpid()
sched_setattr(r6, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x3}, 0x0)
r7 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r8 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r9 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r8, 0x2)
flock(r9, 0x2)
flock(r7, 0x1)
r10 = dup2(r7, r9)
dup3(r10, r8, 0x0)
sendmsg$IPSET_CMD_TEST(r10, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0xb, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
r11 = syz_open_procfs(r6, &(0x7f0000000140)='net/netstat\x00')
setsockopt$inet_tcp_TCP_CONGESTION(r11, 0x6, 0xd, &(0x7f0000000100)='veno\x00', 0x4)
r12 = dup2(r1, r3)
dup3(r12, r2, 0x0)

13:51:08 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffff, 0x81, 0x5, 0x0, 0x7f, 0xffffffff, 0x6}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r5 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r6 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r5, 0x2)
flock(r6, 0x2)
flock(r4, 0x1)
r7 = dup2(r4, r6)
dup3(r7, r5, 0x0)
r8 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100)='NLBL_CALIPSO\x00')
syz_genetlink_get_family_id$gtp(&(0x7f0000000200)='gtp\x00')
sendmsg$NLBL_CALIPSO_C_REMOVE(r7, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r8, 0x203, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040014}, 0x24000010)
flock(r1, 0x1)
r9 = dup2(r1, r3)
dup3(r9, r2, 0x0)

[  302.297496][T16624] mmap: syz-executor.2 (16624): VmData 18632704 exceed data ulimit 7. Update limits or use boot option ignore_rlimit_data.
13:51:08 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0xfffffdfd, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  302.440712][T16579] binder: 16578:16579 ioctl 40046205 0 returned -22
[  302.506708][T16636] binder: 16635:16636 ioctl 40046205 0 returned -22
13:51:08 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
keyctl$join(0x1, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r3, 0x2)
flock(r2, 0x1)
dup2(r2, r3)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00')
sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="00012bbd7000fedbcf2509000000050030000000009b"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8880)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0x1e0, 0x1, 0x3, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFQA_EXP={0xe8, 0xf, 0x0, 0x1, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_NAT={0xdc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, {0x14, 0x4, @rand_addr="b9bf1fbf279c6c09b16ec8aa04e0fc1b"}}}]}, @CTA_EXPECT_NAT_TUPLE={0x6c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={[], [], @loopback}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1a}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}]}]}, @NFQA_PAYLOAD={0x23, 0xa, "a2f7760ff1063337efa1fda866f21c63cbdf072b015163955c297db4432c42"}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x8000000000000003, 0x1}}, @NFQA_PAYLOAD={0x76, 0xa, "0c9ea505ffece0974625419896e2a471246b6f4a13d9550222ffabfca843a2146a028f71a87b79e087fd6933076c78f99a3c14b6aec18d8d00c6705c301db62688e1f8e5de4c42969a105dd1277f519d187c76e8dab577695a796c90b0d76914bfe5e769b573109c8fe6d8b63cc837075e2e"}, @NFQA_VLAN={0x3c, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x558}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xfffd}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x5}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x3}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xfff9}, @NFQA_VLAN_PROTO={0x6}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8a8f7fcfb8149dc1}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x4000b}, 0x4000001)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0xbc, 0x0, &(0x7f0000000380)="3d0a70a96d216488d77a503534ba759f2f50d27208dd99a7ffb8329f0d03642aedfb4e1474c446731476264f714d242c457ad89115b85d5bc8b21e84a14f14d804e7dd6ae585cb6fa7a7641f421a160558e54a58f1d3659eac32e66f20ba92e5a3fe32728e1093b197498e88c2719fe609f9abc75446cefa31c7d2c57f08d9f048083918ea7092d2d31b82c3a4839ae37c87d78218821ce1350b067220fc46327c2ec43d456bcb4c759dd83f36a9db93c79ccbab8091a1a5075d3f37"})

[  302.652882][T16640] binder: 16598:16640 unknown command 2059783438
[  302.659321][T16640] binder: 16598:16640 ioctl c0306201 200000c0 returned -22
13:51:08 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x2082, 0x30)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000100)=0x1)
ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f00000000c0)=""/45)
flock(r1, 0x0)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

[  302.729302][T16642] binder: 16641:16642 ioctl 40046205 0 returned -22
13:51:08 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x3, 0x80)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x0)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:51:08 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r3, 0x2)
flock(r4, 0x2)
flock(r2, 0x1)
r5 = dup2(r2, r4)
dup3(r5, r3, 0x0)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @rand_addr="8329eb7b2e81bde761f423ca922a1a1f", 0x3}, 0x1c)
r6 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r7 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r6, 0x2)
flock(r7, 0x2)
flock(r1, 0x0)
r8 = dup2(r1, r7)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = fcntl$dupfd(r10, 0x0, r9)
ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r11, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x1, 0x8, 0x301, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88ca}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8d1}, 0x4004004)
dup3(r8, r6, 0x0)

13:51:08 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\v\t\x00\x00'], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:51:08 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00')
r8 = openat$cgroup_ro(r2, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$TIPC_NL_LINK_SET(r8, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x44, r7, 0x400, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x40000)
flock(r2, 0x2)
flock(r3, 0x2)
r9 = socket$tipc(0x1e, 0x5, 0x0)
flock(r9, 0x6)
r10 = dup2(r1, r3)
dup3(r10, r2, 0x0)

[  302.831596][T16618] debugfs: File '16613' in directory 'proc' already present!
[  302.839620][T16658] binder: 16613:16658 unknown command 1769988625
[  302.846025][T16658] binder: 16613:16658 ioctl c0306201 200000c0 returned -22
[  302.870640][T16663] binder: 16662:16663 ioctl 40046205 0 returned -22
13:51:08 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0)
openat$cgroup_ro(r4, &(0x7f0000000100)='memory.current\x00', 0x0, 0x0)
flock(r3, 0x2)
flock(r1, 0x1)
r5 = dup2(r1, r3)
dup3(r5, r2, 0x0)

[  302.923632][T16668] binder: 16662:16668 unknown command 2315
[  302.930801][T16668] binder: 16662:16668 ioctl c0306201 200000c0 returned -22
13:51:09 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x16, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:51:09 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
timer_create(0x7, &(0x7f00000000c0)={0x0, 0x13, 0x0, @tid=r0}, &(0x7f0000000100)=<r2=>0x0)
timer_getoverrun(r2)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r3, 0x2)
flock(r4, 0x2)
flock(r1, 0x1)
r5 = dup2(r1, r4)
dup3(r5, r3, 0x0)

13:51:09 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(0xffffffffffffffff, 0x2)
flock(r1, 0x1)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r4, 0x2)
flock(r5, 0x2)
flock(r3, 0x1)
r6 = dup2(r3, r5)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = fcntl$dupfd(r8, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
ioctl$EVIOCSABS2F(r9, 0x401845ef, &(0x7f00000001c0)={0x9, 0x8, 0x2, 0x6, 0x1f, 0x80000001})
dup3(r6, r4, 0x0)
r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00')
sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r10, 0x10, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
r11 = dup2(r1, 0xffffffffffffffff)
dup3(r11, r2, 0x0)

13:51:09 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

[  303.307257][T16636] binder: 16635:16636 ioctl 40046205 0 returned -22
13:51:09 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0xfffffe00, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  303.379484][T16704] binder: 16703:16704 ioctl 40046205 0 returned -22
13:51:09 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$dupfd(r3, 0x0, r2)
r4 = accept(r2, &(0x7f00000002c0)=@in={0x2, 0x0, @initdev}, &(0x7f0000000000)=0x80)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, &(0x7f0000000080)={0x6, 'virt_wifi0\x00', {0x10000}, 0xf48a})
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="d8a683f9b9b92f766099cca658c1d593860382ff7c4a186cc1ce7471ad3c26611290a59328822c77923facdb33e9c6002266b58d6be9b0ad35e4ced892363c2e784f941ff89001855c6bd97199cc601cbc7412adecb737863d0355489fded62783feff4ba62efe838b504cb91238325bfba3ad6e6d6f397aa895eccdcb5b1c88f4668fbafa83d82e882e43858d"], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:51:09 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x210080, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
r5 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r6 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r7 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r6, 0x2)
flock(r7, 0x2)
flock(r5, 0x1)
r8 = dup2(r5, r7)
dup3(r8, r6, 0x0)
r9 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r10 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r11 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r10, 0x2)
flock(r11, 0x2)
flock(r9, 0x1)
r12 = dup2(r9, r11)
dup3(r12, r10, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='syz0\x00', r10}, 0x10)
r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_RESET_STATS(r6, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xec, r13, 0x300, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xd8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x90}, 0x20000000)
dup3(r4, r2, 0x0)
getpid()

[  303.480315][T16708] binder: 16641:16708 ioctl 40046205 0 returned -22
[  303.504196][T16713] binder: 16712:16713 ioctl 40046205 0 returned -22
[  303.556651][T16715] binder: 16712:16715 unknown command -108812584
[  303.563207][T16715] binder: 16712:16715 ioctl c0306201 200000c0 returned -22
13:51:09 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$dupfd(r3, 0x0, r2)
fcntl$setpipe(r3, 0x407, 0x40)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:51:09 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x40, 0x82)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x0)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

[  303.671090][T16718] binder: 16662:16718 unknown command 2315
[  303.676976][T16718] binder: 16662:16718 ioctl c0306201 200000c0 returned -22
[  303.694536][T16721] binder: 16720:16721 ioctl 40046205 0 returned -22
13:51:09 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x0)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:51:09 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r5 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r6 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r5, 0x2)
flock(r6, 0x2)
flock(r4, 0x1)
r7 = dup2(r4, r6)
dup3(r7, r5, 0x0)
ioctl$USBDEVFS_DISCARDURB(r7, 0x550b, &(0x7f0000000240)=0x3ff)
flock(r1, 0x0)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$PPPIOCGFLAGS(r8, 0x8004745a, &(0x7f0000000300))
r9 = dup2(r1, r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
ioctl$USBDEVFS_SUBMITURB(r12, 0x8038550a, &(0x7f0000000200)=@urb_type_bulk={0x3, {0xe, 0x1}, 0x8, 0x40, &(0x7f0000000140)="2679cd1011615b2b564a243bd08b76e576ff79284670cea4126732e919e1096fb8c348b85a23427e9ca1811968c3bc3a8c44cffbbff85dd131c44f4ea42fa3cd30ed26", 0x43, 0x80000000, 0x7, 0x39, 0x100, 0x7f, &(0x7f00000001c0)="6e2b7060e10dd3b29cd03bc3c0272370d8e2006c04db6948f71067"})
bind(r1, &(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x2, 0x2, 0x4, 0x80, "22003b22bc2cb24ebf93818bbf8d011e6bf2ac57763b2e9a16025df8672f7154fb01a16a7b9e2579aeca8a0922c047085161dc6adecaf817812c5d650e984f", 0x3e}, 0x80)
dup3(r9, r2, 0x0)

13:51:09 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x10000006, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:51:10 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0xfeffff00000000, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:51:10 executing program 3:
prlimit64(0x0, 0x3, &(0x7f0000000280)={0x9, 0x8000}, 0x0)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x94, 0x94, 0x5, [@var={0xf, 0x0, 0x0, 0xe, 0x2, 0x1}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x2, 0x1}, {0x5, 0x2}]}, @fwd={0xb}, @restrict={0x9, 0x0, 0x0, 0xb, 0x4}, @union={0x3, 0x4, 0x0, 0x5, 0x0, 0x9, [{0xc, 0x2, 0x7}, {0xe, 0x3, 0x10000}, {0x6, 0x3, 0x6}, {0x8, 0x5, 0x40}]}, @volatile={0xf}]}, {0x0, [0x61, 0x2e, 0x61]}}, &(0x7f0000000200)=""/56, 0xb1, 0x38, 0x1}, 0x20)
signalfd(r0, &(0x7f00000002c0)={[0x6b]}, 0x8)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x10000000, 0x0, 0x5, 0x0, 0x2ff6}, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
sched_getattr(0x0, &(0x7f0000000300)={0x38}, 0x38, 0x0)
flock(r3, 0x2)
flock(r4, 0x2)
flock(r2, 0x1)
r5 = dup2(r2, r4)
dup3(r5, r3, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r1, r3, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30)
r6 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r7 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
r8 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r7, 0x2)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000004, 0x1010, 0xffffffffffffffff, 0x8000000)
flock(r8, 0x2)
flock(r6, 0x1)
r9 = dup2(r6, r8)
dup3(r9, r7, 0x0)

[  304.179951][T16704] binder: 16703:16704 ioctl 40046205 0 returned -22
[  304.203444][T16751] binder: 16750:16751 ioctl 40046205 0 returned -22
13:51:10 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
r2 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r3, 0x2)
flock(r2, 0x1)
dup2(r2, r3)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00634040030000000000000000000000000000000000000000000000000000000000000058000000000000001800000000000000", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="856164660000000003000000000000000200000000000000120000000000000085616466000000000a0000000000000002000000000000002a00200000000000852a646600000000", @ANYRES32=r3, @ANYBLOB="010001000000000000000000"], @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\n']], 0x129, 0x0, &(0x7f0000000380)="f4ebd580d6f46653eafef97a26cba3303fa51ff4bab0d37883465fdeaee0932031256cfa45f9d8e0fd0480f430b54f97e45924f5d1c49c0da480f6f6d0b908ea4d84b78087e878aa892188c5d50a66ecfd08e0632ee9b97e66f305673cd4b97956656ef9807729875e3a11960b8c420b1566bea496f82653527e99b835c36ab56313ea4a2aee3fbb76080823c81faf0285150ddc5d1146bacb578786e493381edaaf0d0fa4a5b3d11a8aaba4087cebdc988326c66229ad935e7ff1b90b975d17d05757797a20a73199a5f5dbfe53c1a1c5e8d3f43e7c610843369cf78b8ca2c089afdb3c225a5c38ca6b685d0cd49eb79a825d6d12c9c1baf5370ccd7368a325a1ee1ff4dd39ba6aa744362bb25d900df98a403de2910bff12c909c5ad5fb7405a1f0116e79c0251e6"})

[  304.304478][T16715] binder: 16712:16715 ioctl 40046205 0 returned -22
[  304.311542][T16715] binder: 16712:16715 unknown command -108812584
[  304.317931][T16715] binder: 16712:16715 ioctl c0306201 200000c0 returned -22
[  304.337904][T16760] binder: 16759:16760 ioctl 40046205 0 returned -22
[  304.393299][T16716] ==================================================================
[  304.401783][T16716] BUG: KASAN: use-after-free in __wake_up_common+0x6c/0x450
[  304.409061][T16716] Read of size 8 at addr ffff8881cd36c5e0 by task syz-executor.2/16716
[  304.417664][T16716] 
[  304.420014][T16716] CPU: 0 PID: 16716 Comm: syz-executor.2 Not tainted 5.4.15-syzkaller-01128-gb2b96d09ef40 #0
[  304.430323][T16716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  304.440457][T16716] Call Trace:
[  304.443750][T16716]  dump_stack+0x1b0/0x228
[  304.448162][T16716]  ? show_regs_print_info+0x18/0x18
[  304.453528][T16716]  ? vprintk_func+0x105/0x110
[  304.458210][T16716]  ? printk+0xc0/0x109
[  304.462290][T16716]  print_address_description+0x96/0x5d0
[  304.467926][T16716]  ? devkmsg_release+0x127/0x127
[  304.472950][T16716]  ? finish_task_switch+0x274/0x560
[  304.478328][T16716]  __kasan_report+0x14b/0x1c0
[  304.482997][T16716]  ? kasan_disable_current+0x20/0x20
[  304.488443][T16716]  ? __wake_up_common+0x6c/0x450
[  304.493788][T16716]  kasan_report+0x26/0x50
[  304.498118][T16716]  __asan_report_load8_noabort+0x14/0x20
[  304.504220][T16716]  __wake_up_common+0x6c/0x450
[  304.508976][T16716]  __wake_up+0x145/0x210
[  304.513248][T16716]  ? remove_wait_queue+0x130/0x130
[  304.518349][T16716]  ? _raw_spin_trylock_bh+0x190/0x190
[  304.523777][T16716]  ? __kasan_check_read+0x11/0x20
[  304.528833][T16716]  flock_lock_inode+0x1874/0x1c60
[  304.533958][T16716]  ? lease_setup+0x140/0x140
[  304.538643][T16716]  locks_remove_file+0x3b5/0x10e0
[  304.543740][T16716]  ? __read_once_size_nocheck+0x10/0x10
[  304.549275][T16716]  ? locks_remove_posix+0x620/0x620
[  304.554559][T16716]  ? memset+0x31/0x40
[  304.558533][T16716]  ? __kernel_text_address+0x9a/0x110
[  304.564161][T16716]  ? __kasan_check_write+0x14/0x20
[  304.569767][T16716]  __fput+0x1ea/0x710
[  304.573861][T16716]  ____fput+0x15/0x20
[  304.577824][T16716]  task_work_run+0x176/0x1a0
[  304.582456][T16716]  get_signal+0x1e66/0x1ef0
[  304.587104][T16716]  ? __se_sys_flock+0x478/0x560
[  304.592377][T16716]  ? __kasan_slab_free+0x1e2/0x220
[  304.597482][T16716]  ? __kasan_slab_free+0x168/0x220
[  304.602628][T16716]  ? kasan_slab_free+0xe/0x10
[  304.607576][T16716]  ? kmem_cache_free+0x181/0x7a0
[  304.612494][T16716]  ? __se_sys_flock+0x478/0x560
[  304.617377][T16716]  ? do_syscall_64+0xc0/0x100
[  304.622153][T16716]  ? entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  304.628218][T16716]  ? __kasan_check_read+0x11/0x20
[  304.633237][T16716]  ? flock_lock_inode+0x1341/0x1c60
[  304.638558][T16716]  ? ptrace_notify+0x340/0x340
[  304.643570][T16716]  ? lease_setup+0x140/0x140
[  304.648241][T16716]  ? locks_delete_block+0x54e/0x560
[  304.653571][T16716]  ? __kasan_check_read+0x11/0x20
[  304.658863][T16716]  ? schedule+0x14b/0x1d0
[  304.663176][T16716]  do_signal+0x83/0x5b0
[  304.667358][T16716]  ? signal_fault+0x1f0/0x1f0
[  304.672099][T16716]  ? init_wait_entry+0xe0/0xe0
[  304.676852][T16716]  ? task_work_add+0xee/0x120
[  304.681553][T16716]  prepare_exit_to_usermode+0x256/0x370
[  304.687275][T16716]  syscall_return_slowpath+0x6f/0x500
[  304.692628][T16716]  do_syscall_64+0xe8/0x100
[  304.697140][T16716]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  304.703017][T16716] RIP: 0033:0x45b349
[  304.707034][T16716] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  304.726807][T16716] RSP: 002b:00007f5fcd292c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000049
[  304.735552][T16716] RAX: 0000000000000000 RBX: 00007f5fcd2936d4 RCX: 000000000045b349
[  304.743553][T16716] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000006
[  304.751654][T16716] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000
[  304.759618][T16716] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[  304.767724][T16716] R13: 00000000000000c6 R14: 00000000004c201c R15: 000000000075c07c
[  304.775861][T16716] 
[  304.778189][T16716] Allocated by task 16711:
[  304.782608][T16716]  __kasan_kmalloc+0x117/0x1b0
[  304.787346][T16716]  kasan_slab_alloc+0xe/0x10
[  304.794091][T16716]  kmem_cache_alloc+0x120/0x2b0
[  304.798931][T16716]  __se_sys_flock+0x156/0x560
[  304.803642][T16716]  __x64_sys_flock+0x5b/0x70
[  304.808218][T16716]  do_syscall_64+0xc0/0x100
[  304.812748][T16716]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  304.818615][T16716] 
[  304.820945][T16716] Freed by task 16711:
[  304.825008][T16716]  __kasan_slab_free+0x168/0x220
[  304.829942][T16716]  kasan_slab_free+0xe/0x10
[  304.834437][T16716]  kmem_cache_free+0x181/0x7a0
[  304.839189][T16716]  __se_sys_flock+0x478/0x560
[  304.843847][T16716]  __x64_sys_flock+0x5b/0x70
[  304.848438][T16716]  do_syscall_64+0xc0/0x100
[  304.852937][T16716]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  304.858895][T16716] 
[  304.861216][T16716] The buggy address belongs to the object at ffff8881cd36c578
[  304.861216][T16716]  which belongs to the cache file_lock_cache of size 216
[  304.876124][T16716] The buggy address is located 104 bytes inside of
[  304.876124][T16716]  216-byte region [ffff8881cd36c578, ffff8881cd36c650)
[  304.889588][T16716] The buggy address belongs to the page:
[  304.895214][T16716] page:ffffea000734db00 refcount:1 mapcount:0 mapping:ffff8881da8ed200 index:0x0
[  304.904353][T16716] raw: 8000000000000200 dead000000000100 dead000000000122 ffff8881da8ed200
[  304.913106][T16716] raw: 0000000000000000 00000000000e000e 00000001ffffffff 0000000000000000
[  304.921945][T16716] page dumped because: kasan: bad access detected
[  304.928336][T16716] 
[  304.930645][T16716] Memory state around the buggy address:
[  304.937050][T16716]  ffff8881cd36c480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  304.945208][T16716]  ffff8881cd36c500: fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc fb
[  304.953248][T16716] >ffff8881cd36c580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  304.961290][T16716]                                                        ^
[  304.968459][T16716]  ffff8881cd36c600: fb fb fb fb fb fb fb fb fb fb fc fc fc fc fc fc
[  304.976506][T16716]  ffff8881cd36c680: fc fc fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  304.984661][T16716] ==================================================================
13:51:10 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00')
socket$nl_route(0x10, 0x3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000200)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r1}, @flat=@weak_binder={0x77622a85, 0xa, 0x3}, @flat=@weak_binder={0x77622a85, 0x1000, 0x1}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x17, 0x0, &(0x7f0000000080)="502b2d167fac2b9bb3d709000000a5a020c2000105b7e8"})

13:51:10 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$dupfd(r5, 0x0, r4)
flock(r4, 0x2)
r6 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r7 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r7, 0x2)
flock(r6, 0x1)
dup2(r6, r7)
ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82)
flock(r1, 0x1)
r8 = dup2(r1, r3)
dup3(r8, r2, 0x0)

13:51:10 executing program 4:
r0 = gettid()
prlimit64(r0, 0xd, &(0x7f0000000280)={0x2000000010010005, 0x23}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r3, 0x2)
flock(r4, 0x2)
flock(r2, 0x0)
r5 = dup2(r2, r4)
dup3(r5, r3, 0x0)

13:51:10 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x200000000000000, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  304.992706][T16716] Disabling lock debugging due to kernel taint
[  304.999692][T16764] debugfs: File '16720' in directory 'proc' already present!
[  305.009878][T16751] binder: 16750:16751 ioctl 40046205 0 returned -22
[  305.033984][T16769] binder: 16768:16769 ioctl 40046205 0 returned -22
13:51:11 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
sched_rr_get_interval(r0, &(0x7f00000000c0))
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

[  305.077208][T16780] binder: 16779:16780 ioctl 40046205 0 returned -22
13:51:11 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:51:11 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x10000000}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$dupfd(r5, 0x0, r4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r5, 0xc0506617, &(0x7f00000000c0)={{0x0, 0x0, @identifier="ba74e80c8ce105b8d7c4cb5f03343687"}, 0xbe, [], "9613d6678fe756cee820e30260a23e80945c0f2d9e6bda433f9b1ddefca0f47251692ad5b6c2cff7695d624aaee853e2dbdb1dd826533324a2262c40e241a7f70529a00987bc984d0cc6b667a484c874eae1adc695c726f90e1b2094bfa69045a8ff90a13d99e126f2a3617f5366b20658fc635b4431bef1483101ba56864ebf295aa187d29fb7feeaacbb60bd04c4fe363d8cf5f8641ace8f7db9bf974283b57580c1d1a04573ada707379aa9ff3c4c334583f25255c42cc32aa52799bc"})
flock(r1, 0x0)
r6 = dup2(r1, r3)
dup3(r6, r2, 0x0)

[  305.148587][T16792] binder: 16791:16792 ioctl 40046205 0 returned -22
13:51:11 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000140)='./file0\x00', 0x406fd, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000000c0)={0x7, 0x7, 0x3}, &(0x7f0000000100)=0x28)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x0)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

[  305.200671][T16798] binder: 16791:16798 unknown command 48
[  305.206377][T16798] binder: 16791:16798 ioctl c0306201 200000c0 returned -22
13:51:11 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, <r5=>0x0})
tgkill(r5, r0, 0x3c)
dup3(r4, r2, 0x0)

13:51:11 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x4)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
link(&(0x7f00000000c0)='\x00', &(0x7f0000000100)='./file0\x00')
flock(r3, 0x2)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x9)
flock(r1, 0x0)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000001c0)=0xe8)
quotactl(0x4f, &(0x7f0000000180)='./file0/file0\x00', r5, &(0x7f00000003c0)="5ced0de57c1c2dade922e4c3edb36aac22d84a06aa5d8e6fac71020b20dc469767474ad236493f095b8d40df8af832a3d26225ed88ec6478a408fa0a257b2c10c4f23085cbbc0e0858ffd9d1e775852b887fcfac13ea660e329f5671c6d4f6beae56aa2e9dbfcc69db242a8f083a3792f0e0199d69669f636542115d194458f9b90a7f548cd53d014b80ba11d7c8c0b99246aa1d18434f8e0c4b0af8f751bfce70b38b8e456d782e134ab8cac321342c099de0daf6a77656288afe6cc333b7c8778169e16f2c84205a7c74f85f00e93821470e79c3fd6350efd38662b876def56d92b144f0f35230f3234ae59a1bebb712e9fb296aa37f47")
r6 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r7 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r6, 0x2)
flock(r7, 0x2)
flock(r4, 0x1)
r8 = dup2(r4, r7)
dup3(r8, r6, 0x0)
ioctl$PPPIOCGUNIT(r6, 0x80047456, &(0x7f0000000140))
r9 = dup2(r1, r3)
dup3(r9, r2, 0x0)

13:51:11 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
r5 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r6 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r7 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r6, 0x2)
flock(r7, 0x2)
flock(r5, 0x1)
r8 = dup2(r5, r7)
dup3(r8, r6, 0x0)
ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f00000000c0)=0x2)
dup3(r4, r2, 0x0)

13:51:11 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x3}, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x30, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r3, 0x2)
flock(r2, 0x1)
dup2(r2, r3)
r4 = dup3(r2, 0xffffffffffffffff, 0x0)
r5 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x2)
r6 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r6, 0x2)
flock(r5, 0x1)
dup2(r5, r6)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="918293002b1767d44e314c7af0b6a0b2b3e9b51bd25e374b1c2ebabda3a4e14d13351eb0bd78e80ad2e7b5107390295bac1cb5776697cf6aad8da91d01b6f1fc11528a504083ed02409eba62bbfc007ad7632abc8a5043ce12e8d44ccef524d3b04d612174a3bd8870c8d65651470d822b7750a064c8264a46d83082f173f04546eca63f371cf7fc21e9f5"], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:51:11 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$dupfd(r5, 0x0, r4)
flock(r4, 0x1)
r6 = dup2(r1, r3)
dup3(r6, r2, 0x0)

[  305.877804][T16780] binder: 16779:16780 ioctl 40046205 0 returned -22
13:51:11 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x4000000000000000, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:51:11 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r1, 0x1)
dup2(r1, r2)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r4, 0x2)
flock(r5, 0x2)
flock(r3, 0x1)
r6 = dup2(r3, r5)
dup3(r6, r4, 0x0)
r7 = fcntl$dupfd(r1, 0x406, r6)
bind$pptp(r7, &(0x7f0000000240)={0x18, 0x2, {0x3, @dev={0xac, 0x14, 0x14, 0xb}}}, 0x1e)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r8 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r9 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r10 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r9, 0x2)
flock(r10, 0x2)
flock(r8, 0x1)
r11 = dup2(r8, r10)
dup3(r11, r9, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r10, 0xc0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=0x4429, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xffffffff, 0x7}, 0x0, 0x0, &(0x7f0000000140)={0x1, 0x8, 0x5, 0xfff}, &(0x7f0000000180)=0x7ff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=0x1}}, 0x10)

13:51:11 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x31501d11, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  305.949366][T16839] binder: 16791:16839 unknown command 48
[  305.955477][T16839] binder: 16791:16839 ioctl c0306201 200000c0 returned -22
[  305.962853][T16833] binder: 16829:16833 ioctl 40046205 0 returned -22
[  305.969909][T16842] binder: 16841:16842 ioctl 40046205 0 returned -22
[  305.982887][T16845] binder: 16844:16845 ioctl 40046205 0 returned -22
[  306.022631][T16848] binder: 16829:16848 unknown command 9667217
[  306.028766][T16848] binder: 16829:16848 ioctl c0306201 200000c0 returned -22
13:51:12 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$dupfd(r4, 0x0, r3)
accept(r3, &(0x7f00000000c0)=@tipc=@id, &(0x7f0000000140)=0x80)
inotify_init()
r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r5, 0x2)
flock(r1, 0x0)
r6 = dup2(r1, r5)
dup3(r6, r2, 0x0)

13:51:12 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x1, 0x0)
ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000240)={0x0, 0x14, 0xff, 0x1, 0xe8, 0xfffffffe, &(0x7f0000000140)="8167629c55ad35b62e0124b6edc261d8e38026be4321f629955183b4d8f6293b594e95354880f18c70cf71ddced65ace2a6604879d7c400f20582090d15a19507ca548f5c3a7cecbb52331fbdab4f9bf131a7258f0c013e5acc090d74ae94f06ae24301472fb5ab5c42af62f23a4032e689a7e3f82b9f6039971dd0a66e217f66832ef51369dda0c6985b29092677db93a256134bcdaba4df9987f88d0ff821d6e1e6e3bb2e7ecc62232ccb17e72e4366dc918a789fa5326272a72e3603a8073b6e4ae7c11398c2282b6f3c799c1738c2b11292f4ba79c0cdb5af6066b3284a4d5089eb300f8caef"})
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r4 = open(&(0x7f00000000c0)='./file0\x00', 0x6f10c0, 0x3c)
flock(r3, 0x2)
flock(r4, 0x2)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f0000000080)={'veth0\x00', {0x2, 0x4e20, @broadcast}})
flock(r2, 0x1)
r6 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r7 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r7, 0x2)
flock(r6, 0x1)
dup2(r6, r7)
ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f00000002c0)=r7)
r8 = dup2(r2, r4)
dup3(r8, r3, 0x0)

13:51:12 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r4, 0x2)
flock(r5, 0x2)
flock(r3, 0x1)
r6 = dup2(r3, r5)
dup3(r6, r4, 0x0)
ioctl$sock_netdev_private(r6, 0x89fa, &(0x7f00000000c0)="606036d7ae06b270ec5933f42b91f074418b684ef666368b3bdc70090a40224933946ed829ff3f704ff19512888aeeaa155bb42276101528b3b00906b2b5fd2cff197ca3c7fa937fbfb3a96598f92eb9a0159ff4bc743f20a8ed6edde9ac00dc98da")
r7 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r7, 0x2)
flock(r1, 0x0)
r8 = dup2(r1, r7)
dup3(r8, r2, 0x0)

13:51:12 executing program 0:
gettid()
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=<r0=>0x0)
prlimit64(r0, 0xe, &(0x7f0000000280)={0x1f, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x10001, 0x5}, 0x0)
r2 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="174a7e5227f8"], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  306.667880][T16833] binder: 16829:16833 ioctl 40046205 0 returned -22
[  306.674757][T16830] binder: 16829:16830 unknown command 9667217
[  306.680934][T16830] binder: 16829:16830 ioctl c0306201 200000c0 returned -22
[  306.697473][T16873] binder: 16872:16873 ioctl 40046205 0 returned -22
13:51:12 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0xfdfdffff00000000, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:51:12 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4000000000000000}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  306.749698][T16874] binder: 16872:16874 unknown command 1384008215
[  306.757059][T16874] binder: 16872:16874 ioctl c0306201 200000c0 returned -22
[  306.765889][T16842] binder: 16841:16842 ioctl 40046205 0 returned -22
[  306.786182][T16881] binder: 16880:16881 ioctl 40046205 0 returned -22
13:51:12 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a40)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001b40)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000000e0601ed37d04f000000000001000006050001000700000005e40000070000000500019ce61f5d00050001000700000005000100070000000900020073797a310000000006535c9739b1481c29a6e63266d05ecbff29b86e67699b88b868b9655c9f1973d2bc7710f4bfb901f4406fedd957d0aefbf59c538badfdc54191e39b2cb1ffa308f1d4dd6fcb283a9e8be342f3e87c6ebde4a0e7c487e2798adaf5cfa2cb0d0a174a2c501bf7686faba39ea838a105c174f8fb74049f44a77c63bb56aa5a38a73777dbc36eeacd365de3aa83a0d06c"], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x20040800)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r3, 0x2)
syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00')
flock(r4, 0x2)
flock(r2, 0x1)
ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000180)={0x6, 0x1, 0x8, 0x5e3})
r5 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r6 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r6, 0x2)
flock(r5, 0x1)
dup2(r5, r6)
fsetxattr$trusted_overlay_upper(r6, &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)={0x0, 0xfb, 0x36, 0x1, 0x6, "c3f081a68babcce2b1cd8e29f038e127", "94ac5080f35d049efe475a0375e503739f4ec300280ef1a13abed512d15c3b90fe"}, 0x36, 0x1)
r7 = dup2(r2, r4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
fcntl$dupfd(r9, 0x0, r8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
fcntl$dupfd(r11, 0x0, r10)
dup3(r7, r3, 0x80000)

[  306.798882][T16883] binder: 16882:16883 ioctl 40046205 0 returned -22
13:51:12 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x2108c0, 0x12)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$dupfd(r5, 0x0, r4)
flock(r5, 0x0)
flock(r1, 0x1)
r6 = dup2(r1, r3)
dup3(r6, r2, 0x0)

13:51:13 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x5, 0x5e, 0x0, 0x5, 0xf70f}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
mkdirat$cgroup(r1, &(0x7f0000000100)='syz1\x00', 0x1ff)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x0)
write$P9_RVERSION(r1, &(0x7f00000000c0)={0x15, 0x65, 0xffff, 0x5, 0x8, '9P2000.L'}, 0x15)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:51:13 executing program 3:
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000d80)="337cd3c18d4e4293a350424f01d0d53136458803f542d8343c49517f6b9c5c24dc8282a4238f5d63384db89f3e63da457b418f5e69a7", 0x36)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
r0 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$inet_opts(r3, 0x0, 0x0, &(0x7f00000000c0)="1b652342d01d968a1625ca62519aa64ede68c5d2317adc14ae5893c64a9a340709e3cf903cf342b21acc44204ee6f5851bb7b48544ee5da59f27055417b8c529624f38864de8c59bc45a87317a83503b588e44f0db1d5d01bba754b87af290e8836114", 0x63)
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x3}, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x7f, 0x0, 0x5, 0x2, 0xd867, 0xc25, 0x10}, 0x0)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x2bc, 0x13)
r5 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r6 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r5, 0x2)
flock(r6, 0x2)
fcntl$setpipe(r5, 0x407, 0x1f)
flock(r4, 0x1)
r7 = dup2(r4, r6)
dup3(r7, r5, 0x0)

13:51:13 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x200, 0x0)
ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000140)=0xbbc6)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r3, 0x2)
flock(r4, 0x2)
flock(r2, 0x1)
r5 = dup2(r2, r4)
dup3(r5, r3, 0x0)

13:51:13 executing program 4:
r0 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r1, 0x2)
flock(r0, 0x1)
dup2(r0, r1)
setsockopt$inet6_group_source_req(r0, 0x29, 0x4954879eaf997eb0, &(0x7f00000000c0)={0x7fff, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, [], 0xc}, 0x2}}, {{0xa, 0x4e21, 0x37c8, @rand_addr="79fd233ec0aa4c3c5d3b208ea60efcac", 0x2}}}, 0x108)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r4, 0x2)
flock(r5, 0x2)
flock(r3, 0x0)
r6 = dup2(r3, r5)
dup3(r6, r4, 0x0)

13:51:13 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
prlimit64(r0, 0x6, 0x0, &(0x7f00000000c0))
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)=0x20000)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:51:13 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)
r5 = getpid()
r6 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r7 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r7, 0x2)
flock(r6, 0x1)
dup2(r6, r7)
ioctl$sock_inet_SIOCGIFBRDADDR(r6, 0x8919, &(0x7f00000000c0)={'vcan0\x00', {0x2, 0x4e22, @multicast2}})
sched_setattr(r5, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x3}, 0x0)
setpgid(r0, r5)

13:51:13 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x2, 0x30dd, 0x7, 0x9, 0x3}, 0x0)
openat$random(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x1c3840, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b63a113"], 0x1, 0x0, &(0x7f0000000140)="f4"})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/4\x00')
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1, 0x4, 0x101}, 0x14}}, 0x0)
getsockopt$inet_mreq(r2, 0x0, 0x20, &(0x7f0000000080)={@rand_addr, @remote}, &(0x7f0000000180)=0x8)
getpid()
r4 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r5 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r6 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r5, 0x2)
flock(r6, 0x2)
flock(r4, 0x1)
r7 = dup2(r4, r6)
dup3(r7, r5, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0)='nl80211\x00')
r8 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r9 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r9, 0x2)
flock(r8, 0x1)
dup2(r8, r9)
getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000380)={{{@in=@loopback, @in=@multicast2}}, {{@in=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000480)=0xe8)
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))

[  307.498696][T16931] binder: 16872:16931 unknown command 1384008215
[  307.505173][T16931] binder: 16872:16931 ioctl c0306201 200000c0 returned -22
[  307.527341][T16933] binder: 16932:16933 ioctl 40046205 0 returned -22
[  307.534314][T16933] binder: 16932:16933 unknown command 329343755
[  307.540880][T16933] binder: 16932:16933 ioctl c0306201 200000c0 returned -22
[  307.550167][   T22] audit: type=1400 audit(1580219473.457:18082): avc:  denied  { write } for  pid=16932 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1
[  307.587058][T16881] binder: 16880:16881 ioctl 40046205 0 returned -22
13:51:13 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f0000000180)={{0x2, 0x0, @identifier="a8a2edaebfa9c818111f6a0c8c966f1a"}})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:51:13 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0xffffffff00000000, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:51:13 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
openat$cgroup_type(r1, &(0x7f00000000c0)='cgroup.type\x00', 0x2, 0x0)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

[  307.599550][T16936] binder: 16882:16936 ioctl 40046205 0 returned -22
[  307.617439][T16939] binder: 16938:16939 ioctl 40046205 0 returned -22
[  307.662218][T16947] binder: 16945:16947 ioctl 40046205 0 returned -22
[  307.669618][T16949] binder: 16938:16949 ioctl c080661a 20000180 returned -22
13:51:13 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = dup(r3)
ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000000c0))
r5 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r6 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r7 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r6, 0x2)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000100))
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r8=>0x0)
timer_settime(r8, 0x1, &(0x7f0000000880)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(r8, 0x0, &(0x7f0000000300)={{}, {0x0, 0x989680}}, &(0x7f0000000200))
timer_gettime(r8, &(0x7f0000000140))
flock(r7, 0x2)
flock(r5, 0x1)
r9 = dup2(r5, r7)
dup3(r9, r6, 0x0)

13:51:14 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x1dc, r5, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1d}]}, @TIPC_NLA_BEARER={0x16c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd31}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'ib', 0x3a, 'bridge_slave_1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xcb, @local, 0x80}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x800}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xf}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1}}, {0x14, 0x2, @in={0x2, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff5cd9}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x4000000}, 0x18004)
r6 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r7 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r6, 0x2)
flock(r7, 0x2)
r8 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r9 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$BLKROTATIONAL(r9, 0x127e, &(0x7f0000000140))
flock(r9, 0x2)
flock(r8, 0x1)
dup2(r8, r9)
r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
ftruncate(r10, 0x401)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="740000000203010100000000000000000729f281994eb3416594eb945200000809000200800000010100000009000200000000090200000008000340ffffffff0800054000000020080003400000000408000540000000020800034000000b8f080005402946e6517dba4afbf66a059c8d0803c9e50c286131df28544b54b4f184125b703c0e07b71b7814fdeabc65fae29221af01"], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x8004)
fcntl$setsig(r9, 0xa, 0x33)
flock(r1, 0x0)
r11 = dup2(r1, r7)
dup3(r11, r6, 0x0)

13:51:14 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0xc0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
dup2(r1, r3)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r5 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r6 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = fcntl$dupfd(r8, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
ioctl$SIOCGIFHWADDR(r9, 0x8927, &(0x7f0000000100))
flock(r6, 0x2)
flock(r5, 0x1)
dup2(r5, r6)
write$P9_RREADLINK(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000170100070012e0b43edec7220e0000000030a610d5bc4d36443b16b441e26ba7fee50100da86c53e364fe6c3e50b40517a8309d493ac502091a0e8505000f79075e6f428f407f9bbef0a4a5dfe01a7c34e548c9c8bf51fa35260620eaef8de8edff1cf664de2ebdef301e1"], 0x10)
r10 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r10, 0x2)
flock(r4, 0x1)
dup2(r4, r10)
r11 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r12 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r12, 0x2)
flock(r11, 0x1)
dup2(r11, r12)
accept4$packet(r11, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14, 0x0)
r13 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r14 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r15 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r14, 0x2)
flock(r15, 0x2)
flock(r13, 0x1)
r16 = dup2(r13, r15)
dup3(r16, r14, 0x0)
dup3(0xffffffffffffffff, r16, 0x80000)

13:51:14 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
setrlimit(0x6, &(0x7f00000000c0)={0x7fffffff, 0x7})
flock(r1, 0x0)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:51:14 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r5, 0x2)
flock(r4, 0x1)
dup2(r4, r5)
r6 = dup3(r5, 0xffffffffffffffff, 0x0)
getsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100), &(0x7f0000000140)=0x4)
flock(r3, 0x2)
flock(r1, 0x0)
r7 = dup2(r1, r3)
dup3(r7, r2, 0x0)
r8 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r9 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r9, 0x2)
flock(r8, 0x1)
dup2(r8, r9)
ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0)=0x1b)

13:51:14 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8000, 0x8f}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})
r2 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r3, 0x2)
flock(r2, 0x1)
dup2(r2, r3)
ioctl$TIOCL_GETSHIFTSTATE(r3, 0x541c, &(0x7f0000000000)={0x6, 0x5})

[  308.330386][T16933] binder: 16932:16933 ioctl 40046205 0 returned -22
[  308.337829][T16937] binder: 16932:16937 unknown command 329343755
[  308.345419][T16937] binder: 16932:16937 ioctl c0306201 200000c0 returned -22
[  308.364435][T16981] binder: 16980:16981 ioctl 40046205 0 returned -22
13:51:14 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})
r2 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r3, 0x2)
flock(r4, 0x2)
flock(r2, 0x1)
r5 = dup2(r2, r4)
dup3(r5, r3, 0x0)
write(r3, &(0x7f0000000180)="109f464dc14d0c24824d715909a59cfb3b10c584a66e279277c934cd348a6af89d897b20ee88026e1f6e76da3f03f0b225a04c7c9b3c18045532c086e396426eaee1b53e1bdb34fd47a2616aa6b30d598741f4a711e5c96d46f2c9e1de2fad6795a12f17", 0x64)

[  308.417927][T16984] debugfs: File '16938' in directory 'proc' already present!
[  308.425614][T16988] binder: 16938:16988 ioctl c080661a 20000180 returned -22
[  308.443134][T16990] binder: 16989:16990 ioctl 40046205 0 returned -22
13:51:14 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper={0x6307}], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  308.463052][T16947] binder: 16945:16947 ioctl 40046205 0 returned -22
[  308.482301][T16997] binder: 16996:16997 ioctl 40046205 0 returned -22
13:51:14 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x402fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
set_robust_list(&(0x7f00000001c0)={&(0x7f0000000180)={&(0x7f0000000140)}, 0x401}, 0x18)
r4 = dup2(r1, r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
fcntl$dupfd(r6, 0x0, r5)
setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x8}, 0x8)
dup3(r4, r2, 0x0)

[  308.534647][T17000] binder: 16996:17000 unknown command 25351
[  308.540713][T17000] binder: 16996:17000 ioctl c0306201 200000c0 returned -22
13:51:14 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0xfffffff7fffffffe}, 0x0)
prctl$PR_GET_SECCOMP(0x15)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x280340, 0x84)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r1, 0x2)
flock(r2, 0x2)
flock(r0, 0x1)
r3 = dup2(r0, r2)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
dup3(r3, r1, 0x0)

13:51:14 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x12)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:51:14 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
r5 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r6 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r7 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r6, 0x2)
flock(r7, 0x2)
flock(r5, 0x1)
r8 = dup2(r5, r7)
dup3(r8, r6, 0x0)
dup3(r4, r6, 0x0)
getrandom(&(0x7f00000000c0)=""/66, 0x42, 0x0)

[  309.165229][T16987] binder: 16980:16987 ioctl 40046205 0 returned -22
[  309.283297][T16997] binder: 16996:16997 ioctl 40046205 0 returned -22
13:51:16 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000000))
r2 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)='\x00'})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=')c6Y'], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:51:16 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f00000000c0)={'veth1_vlan\x00', {0x2, 0x4e21, @local}})
flock(r3, 0x2)
flock(r1, 0x0)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:51:16 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="01040000"], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:51:16 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper={0x630c}], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:51:16 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
lsetxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x2)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f0000000180)={0x0, 0x1})
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:51:16 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x8)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r4, 0x2)
flock(r5, 0x2)
flock(r3, 0x1)
r6 = dup2(r3, r5)
dup3(r6, r4, 0x0)
ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000100)={0x9, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]})
r7 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r7, 0x2)
flock(r1, 0x1)
r8 = dup2(r1, r7)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000140)={'system_u:object_r:auditd_var_run_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0x7}, 0x4a)
dup3(r8, r2, 0x0)

[  310.812166][T17037] binder: 17033:17037 ioctl 40046205 0 returned -22
[  310.815427][T17038] binder: 17031:17038 ioctl 40046205 0 returned -22
[  310.822862][T17035] binder: 17032:17035 ioctl 40046205 0 returned -22
13:51:16 executing program 4:
r0 = socket(0x1f, 0x6, 0x0)
sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680200000105010200000000000000000000000a54020100010000003f000000ba067f000400270073797a310000000000000000000000000000000000000000000000000000000084007f767b752a9af79a956f3a28194319114862a1e4a1f4e8e93c92815a7d6b6b6c6e5d93846ade35057e57c12d1c44bf9ca9fcdfbee8ea7c68428d2f5e67cf08000000020000001209000001000b0e55d9780d01000000000415000300000002000000001001fe02000000060000003f00c30700000000ffff00000700000403000000010000000500070002000000030000003c00ff0000000000000800000100080001000000ad6f00000900000003000000090000008000010402000000000000000080000000000000030000000400f30000000000010000000500d80000000000c20000000700040001000000ff0300000500000000000000090000008e000400030000000104000002001901020000001f00000009008a02030000000100000004000000020000000900000000006ec8020000000000000004007f0001000000510c000002005a08000000001d05000001010600030000001f0000003f008100030000001f0000000000fbff00000000070000000700070002000000080000000400000000000000000800000500010001000000000000000200060002000000f7ffffffeb000200afbfb068e13204298100070003000000400000003f00ff0300000000060000000900000002000000ffffff7f07000004000000000100000005007f0000000000690000000100010003000000010000000900ff7f0000000005000000060003000200000003000000050000000300000004000000"], 0x268}, 0x1, 0x0, 0x0, 0x4008084}, 0x40098c4)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r3, 0x2)
flock(r4, 0x2)
flock(r2, 0x0)
r5 = dup2(r2, r4)
dup3(r5, r3, 0x0)

[  310.871691][T17047] binder: 17031:17047 unknown command 1025
[  310.877638][T17047] binder: 17031:17047 ioctl c0306201 200000c0 returned -22
[  310.877855][T17048] binder: 17032:17048 unknown command 1496736553
[  310.891550][T17048] binder: 17032:17048 ioctl c0306201 200000c0 returned -22
13:51:16 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)
ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f00000000c0)=0x2)

13:51:16 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0xa)
flock(r1, 0x0)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:51:16 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x0)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)
setxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'U+', 0x80}, 0x16, 0x1)

13:51:16 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x5012fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r5, 0x2)
getsockname$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000140)=0x1c)
flock(r4, 0x1)
dup2(r4, r5)
ioctl$VT_RESIZE(r5, 0x5609, &(0x7f00000000c0)={0xfff, 0x1, 0x4})
flock(r3, 0x2)
flock(r1, 0x0)
r6 = dup2(r1, r3)
dup3(r6, r2, 0x0)

13:51:16 executing program 3:
setxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000140)=@v2={0x2000000, [{0x8, 0x800005}, {0x10001, 0x10000}]}, 0x14, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
membarrier(0x40, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:51:17 executing program 0:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x3}, 0x0)
prlimit64(r0, 0xa, &(0x7f0000000280)={0x3800000, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x80, 0xffffffffffffffe1, 0x1, 0x200})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"})
ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000180)="8f317cfd9578036df8b6c635da7ac72b1012a323f945e788bc498ef1d084ea85b828f22c2f39c2b490b0318c62bef603d421252535f1305b1353fedb87b0cea000db0482acd00dd3f64ac76ca33c806eafeb4fc390cebf585387dd62")

13:51:17 executing program 4:
openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x22402, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000100)=<r4=>0x0)
ptrace$peek(0x2, r4, &(0x7f0000000140))
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x0)
r5 = dup2(r1, r3)
dup3(r5, r2, 0x0)

13:51:17 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fstatfs(0xffffffffffffffff, &(0x7f00000000c0)=""/189)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r1, 0x2)
flock(r2, 0x2)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
setsockopt$sock_void(r3, 0x1, 0x0, 0x0, 0x0)
flock(r0, 0x1)
r4 = dup2(r0, r2)
dup3(r4, r1, 0x0)

[  311.608892][T17090] binder: 17032:17090 unknown command 1496736553
[  311.615484][T17090] binder: 17032:17090 ioctl c0306201 200000c0 returned -22
[  311.615885][T17091] binder: 17031:17091 ioctl 40046205 0 returned -22
[  311.623489][T17037] binder: 17033:17037 ioctl 40046205 0 returned -22
[  311.634100][T17091] binder: 17031:17091 unknown command 1025
[  311.641878][T17091] binder: 17031:17091 ioctl c0306201 200000c0 returned -22
13:51:17 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper={0x630d}], 0x1, 0x0, &(0x7f0000000140)="f4"})

13:51:17 executing program 1:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000240)=0xc)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006140)='/dev/vga_arbiter\x00', 0x101000, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x30, r1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r3 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
getsockopt$inet_mreqn(r6, 0x0, 0x20, &(0x7f00000002c0)={@broadcast, @broadcast}, &(0x7f0000000300)=0xc)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='K'})
r7 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r8 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r8, 0x2)
flock(r7, 0x1)
dup2(r7, r8)
recvmmsg(r8, &(0x7f0000006900)=[{{&(0x7f0000000380)=@isdn, 0x80, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1, &(0x7f0000001440)=""/114, 0x72}, 0x7}, {{&(0x7f00000014c0)=@sco, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001540)=""/228, 0xe4}, {&(0x7f0000001640)=""/92, 0x5c}], 0x2, &(0x7f0000001700)=""/4096, 0x1000}, 0x3}, {{&(0x7f0000002700)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002780)=""/209, 0xd1}, {&(0x7f0000002880)=""/170, 0xaa}, {&(0x7f0000002940)=""/171, 0xab}, {&(0x7f0000002a00)=""/43, 0x2b}], 0x4, &(0x7f0000002a80)=""/20, 0x14}, 0x6}, {{&(0x7f0000002ac0)=@ax25={{}, [@netrom, @null, @remote, @remote, @bcast, @bcast, @rose, @rose]}, 0x80, &(0x7f0000002d80)=[{&(0x7f0000002b40)=""/128, 0x80}, {&(0x7f0000002bc0)=""/98, 0x62}, {&(0x7f0000002c40)=""/14, 0xe}, {&(0x7f0000002c80)=""/229, 0xe5}], 0x4, &(0x7f0000002dc0)=""/17, 0x11}, 0x7}, {{&(0x7f0000002e00)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000002e80)=""/61, 0x3d}, {&(0x7f0000002ec0)=""/169, 0xa9}, {&(0x7f0000002f80)=""/45, 0x2d}], 0x3, &(0x7f0000003000)=""/80, 0x50}, 0x2}, {{&(0x7f0000003080)=@isdn, 0x80, &(0x7f00000031c0)=[{&(0x7f0000003100)=""/44, 0x2c}, {&(0x7f0000003140)=""/87, 0x57}], 0x2, &(0x7f0000003200)=""/98, 0x62}, 0x7f}, {{&(0x7f0000003280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000004480)=[{&(0x7f0000003300)=""/133, 0x85}, {&(0x7f00000033c0)=""/163, 0xa3}, {&(0x7f0000003480)=""/4096, 0x1000}], 0x3, &(0x7f00000044c0)=""/171, 0xab}, 0x9}, {{&(0x7f0000004580)=@isdn, 0x80, &(0x7f0000005800)=[{&(0x7f0000004600)=""/38, 0x26}, {&(0x7f0000004640)=""/140, 0x8c}, {&(0x7f0000004700)=""/4096, 0x1000}, {&(0x7f0000005700)=""/193, 0xc1}], 0x4}, 0x8}, {{&(0x7f0000005840)=@tipc=@name, 0x80, &(0x7f0000005f40)=[{&(0x7f00000058c0)=""/251, 0xfb}, {&(0x7f00000059c0)=""/241, 0xf1}, {&(0x7f0000005ac0)=""/113, 0x71}, {&(0x7f0000005b40)=""/148, 0x94}, {&(0x7f0000005c00)=""/148, 0x94}, {&(0x7f0000005cc0)=""/233, 0xe9}, {&(0x7f0000005dc0)=""/69, 0x45}, {&(0x7f0000005e40)=""/239, 0xef}], 0x8, &(0x7f0000005fc0)=""/225, 0xe1}, 0x7}, {{&(0x7f00000060c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000006780)=[{&(0x7f0000006140)}, {&(0x7f0000006180)=""/252, 0xfc}, {&(0x7f0000006280)=""/216, 0xd8}, {&(0x7f0000006380)=""/195, 0xc3}, {&(0x7f0000006480)=""/192, 0xc0}, {&(0x7f0000006540)=""/110, 0x6e}, {&(0x7f00000065c0)=""/212, 0xd4}, {&(0x7f00000066c0)=""/27, 0x1b}, {&(0x7f0000006700)=""/121, 0x79}], 0x1, &(0x7f0000006840)=""/191, 0xbf}, 0x3}], 0xa, 0x40000060, &(0x7f0000006b80)={0x77359400})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0d30bf5537ece2c19acfd96dbd93a3fd72fe1189433754829cb83bcd4ab163f8d8811d9b8231b0ea108add49c67641c5b31157acf7475e1af88683988032cfca134a89c2cb0f4cde91f0072acee54d571455782be70ca38c2d233b1a4cb5b838bfea43067d361419f4c596edea1c7e1b3adc00340ddc95243f318bbc1bc53135f6fb34e392c993f3be0cfa5efc7aa57c3cbc2354a249d5db78e99364717a5d1d75f715959b4ac2c069b7e7563bdd"], 0x1, 0x0, &(0x7f0000000140)="f4"})

[  311.659818][T17095] binder: 17094:17095 ioctl 40046205 0 returned -22
13:51:17 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x33d480, 0x102)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x1)
r4 = dup2(r1, r3)
r5 = dup3(r4, r2, 0x0)
recvfrom$unix(r5, &(0x7f0000000100)=""/242, 0xf2, 0x10, 0x0, 0x0)

13:51:17 executing program 4:
prlimit64(0x0, 0xd, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x0)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

[  311.713096][T17104] binder: 17100:17104 ioctl 40046205 0 returned -22
[  311.724257][T17107] binder: 17106:17107 ioctl 40046205 0 returned -22
13:51:17 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r3, 0x2)
flock(r1, 0x0)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

13:51:17 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x9028}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, 0x0, 0x2, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASTER={0x38, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3b}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @remote}}}]}, @CTA_EXPECT_NAT={0x68, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x29}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x800}, 0x801)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r4, 0x2)
flock(r1, 0x1)
r5 = dup2(r1, r4)
dup3(r5, r2, 0x0)

[  311.814845][T17113] binder: 17100:17113 unknown command 1438593037
[  311.821299][T17113] binder: 17100:17113 ioctl c0306201 200000c0 returned -22
13:51:17 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2bc, 0x8)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r3, 0x2)
flock(r1, 0x0)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)
r5 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r6 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r7 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r8 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r9 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r8, 0x2)
flock(r9, 0x2)
flock(r7, 0x1)
r10 = dup2(r7, r9)
dup3(r10, r8, 0x0)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00')
r12 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r13=>0xffffffffffffffff})
r14 = dup(r13)
getsockname$packet(r14, &(0x7f00000000c0)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r15}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}]}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r10, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="000829bd7000ffdbdf254c0000000a00f500ffffffffffff00000600f700fd090000080077000700000008000300", @ANYRES32=r15, @ANYBLOB='\x00'/12], 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x800)
r16 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r6, 0x2)
flock(r16, 0x2)
flock(r5, 0x1)
r17 = dup2(r5, r16)
dup3(r17, r6, 0x0)
pwritev(r6, &(0x7f0000000540)=[{&(0x7f00000000c0)="6a672248fbfdc951e5009e08f8c4d0fe7326d709aa0d5caa8d2984f6d66dc0732cb91bbdaa7b5d879373111ab896d4e6b4d93e2aff0fecd0ba4228553924f17321bef2b4", 0x44}, {&(0x7f0000000140)="b19323a3ba8c1a0e3a101914dfb500badcd15a88b79f929d2972445451c0bf051a6486468c4ad238b7a98cfbb6a01f645cc8f352", 0x34}, {&(0x7f0000000180)="0754426215476a54fb78d962716b52795193508caaeac090d559ad515e0c484eb63a8aa1a2caca809423e4e3a3c286e3deaeaa834b09afc61a2a2c01da7796a65cf22664dd68fb6495bdd9d4ea7c95745f08690750a7256828628f893ec7d226649ed027ccc3bb82ecca319cbceb3116b092efb53e78de4fbdb33ce3ee2e8fe4d420b815fef0781c0bf871f6a32c26f4", 0x90}, {&(0x7f00000002c0)="e99edd00c8c0ebdd8a23f0260a1beb1e54787f01de9130979d9d1ebefb7b0886fc4fb7755681313e26c56e2ebe34429c01c76a3a6a2004dfc8d28119fa5db463f9f6c0baf0905ad895c15fea1402bfecd892840d0f01328365d83c2a1473e8b5a1ecdfbcd8f1d9b1ab67cb9a0319e2aa3ac6197a92ec95de4d207dd002ef643db42779079e65717b4ebe37ecda80445346655f4e386f7334f1e4bee8181dbcdd31481c4ec72c1f116dd4d05d08d4125e1766897d390d367530", 0xb9}, {&(0x7f0000000380)="5a534eeae42f5b62132306207cb20897d6e9dc174fc1d341f36d3128f21fc5012fbdd65f57794397cf6d84a5cf76f839a3ae7e1f2810251088b4415256c7291bbcf511c0d5f3c5dd9f9c13d8a87f71a9ff020c3e7aa7fd1f5d2b17f63eb0da370e8fca55dd344af50a775209c5a56a9e921c5aa49e5c30be7ce17247c5c39f86deb272fc05", 0x85}, {&(0x7f0000000440)="2cf85bcc90c67d0e1d3fc71c8541f2bd8342755b779eba24ba1376e5c4e13c916aba8e5c085baeaaea87a0a1d15f965b1a5f854dc3c520616ee9cebce865c6296663a6d806a35aa2c27611222f68e9523c4ff8951e084a51fa15905d68251b5f091540cdbda8845185428f01328308db54e190a657f91fa296bf7d9f5acd06a8e196d529c851918f8dae95b0ff2b9ab05d8cfc6991e70481e96a3968c1398164164c1b8287ff6814b76a4777022244c42cf251684892fcdc175259016a31c0eb2bb3e1432dce5ecf77ae1c759d3def2a725d76e8c32415e509086c138e22cd6647bfbba1340583009bad5ff221a0f0cde2", 0xf1}], 0x6, 0xffffffff80000000)

13:51:17 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
waitid(0x2, r0, &(0x7f0000000180), 0x2, &(0x7f00000002c0))
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r1, 0x1)
ioctl$KDMKTONE(r2, 0x4b30, 0x7)
dup2(r1, r2)
setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f00000000c0)=0x1, 0x4)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r4, 0x2)
flock(r5, 0x2)
flock(r3, 0x1)
r6 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = dup(r7)
getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}]}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0)
ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000100)={@remote, @dev={0xfe, 0x80, [], 0x24}, @empty, 0x7ff, 0x6, 0x1, 0x900, 0x2, 0x890091, r9})
r10 = dup2(r3, r5)
dup3(r10, r4, 0x0)

13:51:17 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
r7 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r7, 0x2)
flock(0xffffffffffffffff, 0x1)
dup2(0xffffffffffffffff, r7)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = fcntl$dupfd(r9, 0x0, r8)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
getsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8)
r12 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r13=>0xffffffffffffffff})
r14 = dup(r13)
getsockname$packet(r14, &(0x7f00000000c0)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r15}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}]}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0)
r16 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r17=>0xffffffffffffffff})
r18 = dup(r17)
getsockname$packet(r18, &(0x7f00000000c0)={0x11, 0x0, <r19=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r16, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r19}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}]}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0)
r20 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r21=>0xffffffffffffffff})
r22 = dup(r21)
getsockname$packet(r22, &(0x7f00000000c0)={0x11, 0x0, <r23=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r20, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r23}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}]}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0)
r24 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r25=>0xffffffffffffffff})
r26 = dup(r25)
getsockname$packet(r26, &(0x7f00000000c0)={0x11, 0x0, <r27=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r24, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=r27, @ANYBLOB="00000000000000001c001a8018000a80140007000000000000000000000000000000000008000a00", @ANYRES32=0x0, @ANYBLOB="35095edfeb1ffe6d35ef3bd3f73acb7e7214b18b221954ae4b5b52"], 0x44}}, 0x0)
recvmsg$can_raw(r3, &(0x7f0000001600)={&(0x7f00000003c0)=@xdp={0x2c, 0x0, <r28=>0x0}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000000440)=""/97, 0x61}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000240)=""/16, 0x10}], 0x3, &(0x7f0000001500)=""/238, 0xee}, 0x60006102)
r29 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r30=>0xffffffffffffffff})
r31 = dup(r30)
getsockname$packet(r31, &(0x7f00000000c0)={0x11, 0x0, <r32=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r29, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r32}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}]}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001640)={'batadv0\x00', <r33=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000009180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000009140)={&(0x7f0000001680)=@newtaction={0x7abc, 0x30, 0x200, 0x70bd28, 0x25dfdbfe, {}, [{0x1124, 0x1, [@m_csum={0x1050, 0x6, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x7, 0x3, 0xfffffffb, 0x10001}, 0x3a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x71, 0x2, 0x0, 0x2, 0x4}, 0x1f}}]}, {0x1004, 0x6, "c05427758973c6793f659d7401a64869ee486ecf1b10e1ff353df12734a387749bd45a41237df805d1f0067e2f0bce2145165e7fea3b323be69000773a4f4a534fad794628fc0e16ef54453db592f7c23cbea50fc911630d848c14d831c2dca86b6e75c0090376a82da3e9d5358653719483c0c40258ec88f36056fdf82438517c1d3eb6564fb1bd935a6e5e886dffa25a8a81709c6bca341d6cfd703e07538a03ffbf34cae54e50bee9dca3eb98ca3c2fa42a46609b7ff882dc1f69cf254e55a55c43f27617775608efda58b0562a35e6a5337e49842814b7c4f78c395ded02cf04c294c46afb0867fa2f5151b26c7f7a9f108a4b43f7b6a4ceddcff4292e491027ce1c89861f88fcb73eea7c41353a6049a5668534d26ad8ff2de5bbdc681500a37ca18fd2bf6677c4b8e13e934fffbadef48991a11c4389d37fe93dc05fc49b12cea805f8f9c691c737a8e24521899d6d593bf4be65435bcf93ae13481525a8aeb2bf82c9967180b4f88c3699b9985f60079078340afe8e285f8ce3d99f2b5af4c260b8b357a414dd41cc32affe49cfe0a7573acad4a030cd19ec0aa5f159a0807908da5f8ccd5db3ee5c8b97bf465126243043e1489dbec435d0daa646121a81a486f153e60362b3a22733eda1dc5e6fd80f205bf6dd573c0b0a2f45b36bf89589c8c03ccb4d096e1918d3e87bc1586b8d5961ad676ecf3cec671a0d400a6d6c0eae6ebc82c62eaf5be23c674977c77723a858ffc2067263cc635586eb90d69d166c26384f6761725822680e29f20c08d6e4f52527313dfe2787d96d8e13b57e6543c2b327ae73734eaeb0226f0f2176fb126346e1cfff551b88dd95e4e2dec4e2e2aeba37a4a8f84395555bb2046d177eced064c8cbae72db2c2fbd0d546cbaa12b0e703adcef94a78e97b2fae542b973ac9beaef3d3415557c1b7c034ef74827d05448e1c4f5750acf7e01682d17459043193d6c1059728c201e67402ab4c6e62d33ba897541a89a6a562e17da95db45a7dfdddbd964b8b09b4b6b3e1efa9c262f5fd1188a37c59a94772ee70df67a0626338b71e9ba07df572027727ec017a0583eb0fe2657abe0d700e44970ae98b26e49eeb504a34e192a088abceed40a699abfcf55cbf54dbc7dba7fbbd236091b5ff14f4d072c59fe927f5510f9f6cf9c9a4ff12d8f2b6c4f793a46ec09b2c608b187b96acc7d504343d7de6b7f37ef93849983cede873d3f97ca12d0442c832a6817812510a4d5defe71bd71b2a8eab90da08fca3f9067531ac07ebdc833604433cc2bb4c3af6e7ee44ef77696f8106278a494b080046bbd38c13d06a0bb51841c8eb98c3d9389241d17942711dbca05130cb0afedc451fec2b9d7009f8bbc575e623eb8179ea0347d44f65972cf573bfe5a3682efb7a585e24b49b50effa1f460f93471485750b2a53a6887888e7082e086c058cf9da8636aefdf6ec3a5e548e339874dbdea8c7bbb7e46f664f2531fa3c230f117b845754d17aa671a5ead1a89f5b6acad070057ebc26debb467c0d2dc9cbc9d57764572d27afb1768658428fe48b75ffccb17d469877a505975c174776d0980987bd8337faa205632f75a97eb835b89404154a1951eb5a3a7e243ef51a166e98783fcf8470c9baf7dba7ecfaf33c7c1073eb8ee2d874e91724699a406e6f4d92736fe1d2f07be07980cf323c5be8564b0d620f49bcea520e4649d3332d6c65e3436d71e7a79c99994285998d677d57c5e5fa07e2d80c72c6c5a2de765ce9c1ba8ac462ecb2f3fdc9c2b4203d6e84974b6050d22a15f4e98ac56267249a9dbf867be611f31a6a2969fce1eb39c1ef3d1b14129c881d22f0a238a8b127c9ec3fc8f6585f7d2e996218b3f38fafe819d0a55d068e1c0b856c862b784dc795b0d40e472a295ce1aaa7be22e6de606670da6575e559c92faed7ad78005dc67ae47ddb6a7acefd44dd0ebfff2282fbd65220e23e695033b0a660f2b3d60f557bbd9267f8dfed15c14d987d9b0fea2e0a0ee6e16e0818e779d1d94a64c57191ea06157ec748d312874735744384e4a2bc050c057787a41f40e733e3e879f78bc498c63ebee16b8bead9fea4c678f064bb4fcd7020a14d68f37ea7b417fe267386641150cc5b3ba3eac3d8f60cd9e60b4918260ca172b2b7dc3a6d5d4ad8ebaa76b99ca7922c245e3de65ef53fdda43010235188cf0e27f37c5cdb37269d332c04ccee1960340eb8259d2cf96dfe1e975bb56da9b2f99033cc94208f0e37a365535038dc2fb554a2c0a6e64c704ace5d6aecd5597352447cf37a2320952b14e6dc6bfdc4300c1c08c7268b01fbcc9e916eefc04c84323676d1b4334dd5311ccf1ee573ac6695ce21be671816ed857eaea0d68862e80e5ea93c9ff8eef9982da3f9d3e45e45b53540972b486fa2b755661d5ff5d220348f6b8a3c5cdcd05adc6b83440e93c30acf9eb1565a635991f8bfb18d2cda53f90abd6735146cd8f57e0a7b19e835aff035ce32be76836bf4f919b00274953c5b4e1428c3eafd6f971a447a86aaa97c8345a333cca3ee2c8d053792dd04aa099175e1489fe4a54f1310d1ac7616a4e640e5cf8005f62dccc01aaa996c82c4137816d6c49853f29c3c647b812d6ff87e25e65337ba5df3433e6511f9fa9ba92cf1ef6a97ba21abbee76f58eb1a63413f95556ee71ce410028064d6d6097711e6cc94292bb7d8b3baacf4587d9eb8b6a4d3bf550033ccf74164d0f4e8ff8ad0a2e4a1d9b71aed438f3b4d146f84d4cf9d015b3053d44e2bc5d8088424d4396a339f8e54ef6ec8c07ff07dc05a8b3b605cef31c44898ec4c0f6356b2bda4263d0d233e803522590e3968e7647d53f525ba311ecbfb0fb2af6cb323881951fb464dc8e7af900c08eb48ed86e32fc5713bde0f6dc55b6e483e825449d659869c22311092968a67a09c682408d9d0690bb38b752d50bb3744bb2e3f77cc2169f6474633a9e94e37ca0e2be333a11ebabd5f2f4f1bf1aa9d9e60dc7247bd83b72a116b20edb28d9507a8cc2ed8ebdb86922dd551501d50f6af618963177f8c4c93324f6788c1cbc2440abd45ac7993b412e745e584b9c658a136a1d934501deb487bb045077be930b2db2ee4ca344511dbaa96079762809d576d8e5d88b7f134ee4821e17e4eba7704e346dabed4f0229879765fa8458b6a70c49d0e91eca01ad7bfa2936603888be6c18d1c22659831508cd2db44fce75d493693b807983b05c6dd2408ea4b5bf3eeac379a671d6c0db0310b73097edad87bab929e43a4432597a1705d7af7f1b84b18895ebfcd1a582a6f3cf0af53fcd4dafa2e60d3ca56fd336fbc86229495df941da09c49e2e609afa6377bf1dc97c4bb35f3150ce3b3835fe9aa6d6344c5959b0e07f6c6b2343e50a694b0c4117f31832435c1666bb8d020abcf4b3298bd359bfe74aa34b3f592e17973253718d7b1e000cad7f045d62688265f5ccc59522a4b3d731654b57d7de3c69196a84f264724060993f6b42ee0cb089c75623f1ca2490654eda673c264762ded7740656b9e970763bba184ee77448f460a78c40d641e2b6191671f7b58d18c8361e86637457328266e010b651311f36174a4fc07c490c871e0dc771d1fd553de7f393e2faa1fb474302e8be19567e3d099d7e8dda3a8ebac105e9e3f7e95f490a221b390ee044a7bd0017d71309527826b80e48645d3146315c5511e5c22ed90cb422d94487f00c0d4246334e15fed6f2f2b81e890b0041389f82ca934cf2df91832cea30dc41d5241cd1038d06091c737475e892fcdfb483eab36c4c493bc10fcabfdcff1f0ba3dec66662debea27ad2d0e854091b01bf40e890f009385a7757b5e76e6f08b17bfbac3d86ca79f4ee77f5935d43dffe024e27fc24ac11e9059fc92b325cc03c2696c5d22b055a6c58566390c27af99545d00254549015e8a64dac44f2caeaacff495e174fac3c481d19addd196fa20a21cf092562d30cda7faf8e725995f321f25fa98ddabfb67f7355ccdf3b5348d669f33151ebe8a1ede3388ef63535e6835fa3dfd0eb9172e4887f6b5aa4f87bf8156ae4599aec1cd6802d7686831cf8c76dc7abe0056d52946e67b16ae2182f4a69b37f18060f5225b50689df66a544c5292572e3b5240e64f7b64103476fe264d7c020ed778533f9d92669b34235429fc5c2c08f23408245032438131cd641f915677cf5c7fcd9221a39ef9a64a0bc7a320f0e24c82508d2014e8b0140c71fe830e866d0816cd4e33ffbb90d867676225b19b5e38a26b7cddeb9c854ff8c1ca886cae2052c591df19fabc7f00be17b0642c4d560b7bc137ade73124166967dc1de6495b5ef2de8a662879da0428caf03a3603a4c136e8396a1d6d37f3d7d26586fccc7e5b422229456e75b229824c3be11240c80395f31964e8bc4cecc77179c9c7514d78678a93b1aa706cecffb2bfe5ef67a9aabcb0c53edca7d3603cc297fe57a8e1db202c3907c62fb94648313778e6c9b3e325c8d902e538517b9a034fe872f0f55db9e84586f1ad27b1127b38a22d8d7f80181d8ac209135b118a06688d02217d174e56e5c51b8471158a4c64e0757aeb043dcfaaf140df20e2470a0feb3d292d9b71517e764847a76321c09f40d4cba6a5d8876f157b470a19f83562aa545cc212fd36179dda879a5531e98bf864d3145e3eafc97c370941bfa26e23b462a54c569ef178bd1935a81b06e48f9bd8ba21c806922d61d571afbe3218ab251cb5d5ef8245889356b0205dcfeba4def359ef3ea0e8f7aeab9781e9d92ba098f147860104e48d7e3facfb798b62417e6fa8d6483c2c1c655c785203d71064ccd671bdd6db7a68c027b3dd6ccf6ed1bdf8e0868dc688137e5484236e7ad5a7c6ac0be8726d34a71c8bc49ba4c9f2393a26700fae64d820dd8da7476738d20c9f4063272e41d5759d99617b8cd1167d34f7c031d3fc77addc40322292987ef3001866fb4bf9501b0b69dec58b46835ca2325b647fec67a0f9ea587c2e51481e1b52d3a31f091814f18c067b3d6e2221bed65d4f062b118659d15bb967c9518ad270242f841bd0c17d1b30af9bcb7a1144b544e1deb72c218d95c959b49d05778e1245b2489554c62d2d664a1725943e5cb06aee885aff23643febf0292f8a64117d23aca4c07ff2e26b1aa83ff1998fccd6575301c23c9264bf63b364d1678027c7cb07d926b69234df267c8aced75aaad07b42f4bf14d4862d6fb7b53f24e5de7a773bc8bfefcd81e416ada5bab6c6ca07640f7e6576998fd8d8a1632643cc009b73e86738f899cb4dea943729e8b7ebf6fa1dd3ef170452356cd1b84f6904c4edd99b51f0357f640bf9887ad3dfe7d9c9dc4a1104d2530043bb5a6f9e867bdfa337a91e6821ee929702199e9989fa4b98d263bb2c93da2e14d7280543d6af33e053749d5d10d6a1ee527133a42e32005d5b386d43c6c2024c4c12f695cb554e7dd2e06330359279c53d3c7b852c464c59b8eb9ac0046a31643780424c884e92a9828debbe728cfdebca313212ab82c8e48171eb5489fc39ebacda4aae154de27222bdf1f33af9abaa677eca4960f368e1f9830e6b442867b68ee4be9369fc6760a66ac53a47a82b365dbd8790e403d92869a5eca1a79e7919760086d15b4fc8119d650462f2f4d92cd4423cd567c22bb961cc1483556de643afee7b579eb58e6db4c0e95e57d73c1612c9911711270da5646761da13a3d3e82f5803507ba693e5b24eb755bbeeded4df602461c7c0a24fa2d61df688ff6c39ee794260a6293ab"}}}, @m_mpls={0xd0, 0x10, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x88b1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x101, 0x0, 0x10000000, 0x3ff, 0x101}, 0x2}}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x8e, 0x6, "90d44dc6e5995220a839d7e02fd14159dbc1607176a9b3895b4bf69f33763f1651e24c88f74f41c0bcfc0ff05aea4422863216155ddf0961a42d1c6bcc24f2eb5c46dabd8172676dd1204f570fcd50e665ca48a0993c1a5f2105118261f649f3740f567b43ce0391394558f99e6c13ae2db159a4d1cc02abd42a2398609a0a98ffe32de049bddc808c60"}}}]}, {0x80, 0x1, [@m_tunnel_key={0x7c, 0x10, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast2}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x8001}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast1}]}, {0x18, 0x6, "89362108609708f6427a6846ef9106c8bb8e9aa7"}}}]}, {0x17f8, 0x1, [@m_ct={0x6c, 0x1c, 0x0, 0x0, {{0x7, 0x1, 'ct\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x2, 0xfffffffc, 0x3, 0x80}}]}, {0x43, 0x6, "6bab0dad8d628b59dcb6e357159647e1843638d81de6109fdd7d617c731aaa09e8dcca17f9138160d48be9a3f022ccd52d58d6e42e2929164604f503aed385"}}}, @m_ctinfo={0xe8, 0x20, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x7c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffffffff}, @TCA_CTINFO_ACT={0x18, 0x3, {0x3, 0x8001, 0x4, 0xffffffe0, 0x1}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x1}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x9}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x400}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x5}, @TCA_CTINFO_ACT={0x18, 0x3, {0xffffffc0, 0x2, 0x8, 0x1, 0x5}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x7}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x4, 0x20000000, 0x4, 0x3}}]}, {0x5a, 0x6, "8cf67e2ef33e5575fd33da09801a3a550d743ee25adb5082e409b30f89da07c394896c9e092bb0168f079e0ba96399fd5aae0a70adacba5e48b6d56f0051405573ec836a9f9453ae70bc0dea197aa28d49202da3d60d"}}}, @m_mpls={0x10c, 0x5, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x7}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x5, 0x8, 0x3, 0x6, 0x8}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x884c}, @TCA_MPLS_TC={0x5, 0x6, 0x2}]}, {0xc2, 0x6, "be96b2a4a41737e753ad936677de24ad2ed09912a8348e9b470a3ed3d07863ffebbeaa43a890ed71558c50d476d7dc44052f8b517a30ec1736817f29c3f6b76a0a07e95a42515a86ce841b2b85ca42aa31caaff32e5d0d242ecfd8b39f37a3e363bdb1996be93ba96ba27ddc801060cbe39bdb47757a83b7c7bdaab69692d512d5a545c05ed9b20c0f3f3a4db10ffea2b159db78c2f4f901b47576ede25de6f16b68da15b4f275c9124c690d70192ef60ea9ae3c35b66a0bc4cbf1d47011"}}}, @m_ife={0xec, 0xc, 0x0, 0x0, {{0x8, 0x1, 'ife\x00'}, {0xa0, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x7}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x3f}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x5d, 0x6, 0x10000000, 0xa3d, 0x3}}}, @TCA_IFE_DMAC={0xa, 0x3, @dev={[], 0x28}}, @TCA_IFE_METALST={0x28, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x40}, @IFE_META_PRIO={0x8, 0x3, @val=0x6}, @IFE_META_PRIO={0x8, 0x3, @val=0xfffffff7}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xffff}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x7ff}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xffffffe1, 0x6a43, 0x4, 0x1, 0x200}, 0x1}}]}, {0x40, 0x6, "733936e5435197c1f4d094e3e6b41e88499ce8799a493063b6237b1711455c47affb887f9a11096fa4611e15f9cf872638a151265893abeae99be5a1"}}}, @m_gact={0xe4, 0xc, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x101, 0x2, 0x81, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x562c, 0x20000000, 0xfffffff7, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x3dd, 0x20000000}}]}, {0x94, 0x6, "51d6c555684649b90ff909885f7e724ff1e2f60b3d0c90864d3fca52881dd15a92f6f050cf70ccb00942b46ab7f73c19d54376fe7dfa0ac651b9dc49d49c6baeab3459dee27ad41a840a4519738c0a0cda4c8a47bb9521b9dfc1daeb01d8ee257f30229c1c3a8da83a61ef1371dac8a60e495b60bad08d52569c64caac48447ee40caa2c9dfeced90306fd458e5d926f"}}}, @m_mirred={0x7c, 0x0, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x2, 0x7, 0x0, 0x3}, 0x4, r11}}]}, {0x46, 0x6, "179d1f16ebf893d2a75c6fd1212d843f8c9b22b3e10a40793a5f3dcaf06bd03078848fc7313b8d33711f5783570221c665e4e0ea0eba97d7c0d1989af2f87d2427e4"}}}, @m_bpf={0x48, 0x11, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x8}]}, {0x2d, 0x6, "30fbc4c3728609cdfc8c87ba14a6cfc8fbe1f31698352b452a1c13818b3a07d0a764cafdeb5ce5ffcc"}}}, @m_sample={0x160, 0xe, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x1f}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x84, 0x1f, 0x0, 0x80, 0x4ce57614}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1000}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3f, 0x49fa, 0x1, 0x6, 0x10001}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x6}]}, {0xf3, 0x6, "46ce6a1a4dcbb934de412025c4e5b4ae854fa894c227d6181aedbe126294ecc71944ac74823876442e38c62eaf74b15c276804820078d9799ba82030ddf94f98c03c7d800032b07f5524228e583ad9135dbe406ea81cf35028c4fd830b81f7574b8291e198b8eda03049d5959940ecec3f3fd97fb69e0a2b6e6e273ae1661082ef1793efa0c15316bac37005640aeb191a4b9a3f7c88d35ff1bb772fe4c0904a379defd9892fc2490693f8b4b361473c970ea7baf882c04a1addae8a4bfb855b147b189fc6e2686f275bb5b6d9b4aa49aab372c351ea0f9d21db0dd6c389fb52171e5d42017da0b759811f6795cc07"}}}, @m_ipt={0x11a0, 0x2, 0x0, 0x0, {{0x8, 0x1, 'ipt\x00'}, {0x1140, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0x102a, 0x6, {0x101, 'filter\x00', 0x80, 0x400, "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"}}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0xf6, 0x6, {0xba2b, 'nat\x00', 0x7, 0x7ff, "c5577473d9817670bb7235e86b7ab3d023c0d6dcf203ebe3b2808fb4cf259b0360473c382089961dbdc9adf82e43389deba1b227a0e851ec9ed934bee39c5a74aafaefdc5c6a6b2b6e6d6118cab16da5a1a505462be64d25869a741f99a2cb5eae1587ae41056d34a986cddac260da4857a92292dffd5ed07412f1bad81cd324f3a758f3dde60023c9a6c9782107ff8726c6d0c71b053f83ddeead002c668b7365b21d4838c5532c4fa36e95a0689adce56f38d8e44f56e9edd7844f30bfadac68d18ad434af6da964a423d4"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0x53, 0x6, "ccf06b1ef93a73837be6de67af874030ac6bff14a7aefc3fb0ecaa9ba7e3f5d4d63664859e934f41a9dd6e22529d10f08583daa885c72bbb14492d2bc88eee2a460da3370bf88df5ef7860f68425d4"}}}]}, {0x53c, 0x1, [@m_ife={0xd0, 0x1e, 0x0, 0x0, {{0x8, 0x1, 'ife\x00'}, {0x8c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x14, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x5}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x1000}, @TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x20}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x7}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x80000000, 0xc74, 0x1ea3c585ec98764e, 0x6f07, 0x3}}}, @TCA_IFE_SMAC={0xa, 0x4, @random="211f96bc8a6b"}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8000, 0x0, 0x10000000, 0x0, 0x1ff}, 0x1}}]}, {0x36, 0x6, "dd53ef6ece67a9d22d9f2a6fb9ad9d72fc2ea08bf2dd3fb89db7355c1526d71e0fd96fefadd6e57afb536ab7ef21eb3da904"}}}, @m_vlan={0x3c, 0x16, 0x0, 0x0, {{0x9, 0x1, 'vlan\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xec2}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x6, 0x3, 0x6, 0x2cef, 0x3}, 0x2}}]}, {0x4}}}, @m_mirred={0xb4, 0xa, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x6, 0x10000000, 0x2}, 0x3, r15}}]}, {0x80, 0x6, "e8565232e3b78cb9aa5b13d9eac4b47a5426e7c0adff09643394cd98cea58c8d0ffec4199db0fdb03ab9d902f4e44a1fe47181baef44a655fe462f583b8588c1b07b0b7fdfc04d3a97752de3ae1f1e3261ea6b38ac81c58547eaa2f5d63f316f6d0505f3e52c86edcdcbbcd7a6e9ce85187035e16a04d6044cbb674d"}}}, @m_mirred={0x124, 0x18, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffff2656, 0x7fff, 0x0, 0xffff, 0x401}, 0x4, r19}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xea, 0x7ff, 0xffffffffffffffff, 0x2, 0x4}, 0x1, r23}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x16e1, 0x4, 0x40, 0x80000001}, 0x3, r27}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xcf9, 0x7, 0x8, 0x100, 0x3f}, 0x3, r28}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x59a, 0x1, 0x200, 0x7ff}, 0x1, r32}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x30b, 0x5, 0xffffffffffffffff, 0x4, 0x2}, 0x1, r33}}]}, {0x4f, 0x6, "72be05023abb2fd983bb84b34593b62fad06a9644737b198ba9682ed582b59384bc605624e37353d26cd2f1b2f1691f83f1ec447f6165df1f99201a7ac83a286e9080f12db4ed74c655d35"}}}, @m_connmark={0xa8, 0x1f, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7fffffff, 0x7a513cb4, 0x10000000, 0x9, 0xe1}, 0xfffc}}]}, {0x71, 0x6, "8cdf8453ce036085246954d213f22f03ebeb04d32e629ecd57ba5c90b7c546f0854acddebf46e9d99614824759130ef63555e9eea29439c56a0bc378c726e6dbdb0289d9acaea7adab2997178df1057a46d5472406c74e337a96e70cffa8c4cc8906b0318f6a3383e37126f096"}}}, @m_nat={0x1ac, 0x15, 0x0, 0x0, {{0x8, 0x1, 'nat\x00'}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3ff, 0x3f, 0x3, 0xfffffffa, 0x6}, @rand_addr=0xcdd0, @dev={0xac, 0x14, 0x14, 0x1e}, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x7, 0x0, 0x0, 0x4}, @loopback, @multicast2, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x88, 0x4, 0x3, 0x6, 0x6}, @local, @empty, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x4, 0x2, 0x10000, 0x3d9}, @empty, @broadcast, 0xffffff00, 0x1}}]}, {0xfb, 0x6, "59ca3bcc4ab17deee424287bb12a5424ca2b39795f56d6e436516ad309d6498ac5b1b94cb61f62f0147afede6d243c85205cc22ffb625d06bf39481070f85b31c6e3e784159596e94ff106b4b97dfaf9b72a2e3756a350511dec06f64804eb218dead41c55a9a097e5ee8dd1ef37d45e7f892e5d4e991481304d79033f1030169ffac7fb6cd1feb2942c5831516696a1d4dccce856f8d3b8907185d51f2f9cdfd98475ae92b804895ff5d2ebf588853b4179bda73cfa5bc3a2a9247ae61d4f30c1c0af1804bbc291191f36fab82e02e69ffcaacd3eccd25ea6e867a479e2f83207bae1d36a5e1bfc4338d39bf54aa40fbdf2dae52ce516"}}}]}, {0x5a0, 0x1, [@m_police={0x558, 0x1f, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x4bc, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x1f}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xff}, @TCA_POLICE_RESULT={0x8, 0x5, 0xff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x2, 0xf8c7, 0x6, 0x40, {0x7, 0x2, 0x88e, 0x3, 0xfff}, {0x3f, 0x0, 0x8000, 0x3f, 0x6, 0x1}, 0xc16, 0xf8c, 0x8}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x3, 0x7, 0x0, 0x3, {0xf0, 0x2, 0x8, 0x400, 0x1, 0x1}, {0x87, 0x2, 0x7ff, 0x6, 0x9bb0, 0x7}, 0x40, 0x3af0, 0xa6f}}, @TCA_POLICE_RATE={0x404, 0x2, [0xa9c, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x80000001, 0x7fff, 0x0, 0xda, 0x7, 0x8000, 0x0, 0x7, 0x6, 0x10000, 0x1, 0x400, 0x440, 0x100, 0x5, 0x4, 0x8, 0x9, 0x5, 0xfffffffa, 0xffffffff, 0x6, 0x1f, 0x20, 0x417, 0x7, 0x20000000, 0x2, 0x400000, 0x6, 0x4, 0x80, 0x7, 0xfffffffb, 0x8, 0xfff, 0x7, 0x1, 0xfff, 0x6, 0x81, 0x700f, 0x7, 0x4, 0xf00, 0x20, 0x4, 0xf8a, 0x1f, 0x100, 0x81, 0x40, 0xf3de, 0x10000, 0x3e9b, 0xcc72, 0x0, 0x2, 0x6, 0x6, 0x20, 0x1, 0xffff0000, 0xf2e4, 0x3, 0x5, 0x8, 0x1f, 0x7, 0x24, 0x0, 0x2e0, 0xfffffff7, 0x2, 0x8000, 0xffffffff, 0x2, 0x4, 0x5, 0x6, 0x0, 0x6, 0xfffffffb, 0xfffff6e6, 0x6, 0x10001, 0x1000, 0x7ff, 0xff, 0xee3, 0x0, 0x2, 0x1, 0xb04a, 0x6, 0x9, 0x1f, 0x4, 0x3, 0xf3, 0x8, 0xffffffff, 0x2b, 0x5, 0x800, 0x8000, 0x83b, 0x0, 0x3, 0x7, 0x10000, 0x0, 0x6, 0x1000, 0x6, 0x40, 0x4, 0x2, 0x1, 0x5, 0x9, 0x2, 0x7ff, 0x2, 0x6, 0x1f9, 0x401, 0x20, 0x9, 0xaeda, 0x3, 0x4, 0x5, 0x8, 0x100, 0x5, 0x7ece, 0x62309be0, 0x8, 0x2, 0x7, 0x81a, 0xa5, 0x7, 0x6, 0x0, 0x9, 0x1, 0xe10, 0x9, 0x261, 0x9, 0x80, 0x10000, 0x6, 0x403e49e0, 0x80, 0x7ff, 0xffffff0c, 0x2, 0x6, 0x40, 0xdd, 0x200, 0x8d95, 0x5, 0x4, 0x6, 0x81, 0x0, 0x9, 0x1000, 0x8, 0x8, 0xe6c, 0x0, 0x7fff, 0x4, 0x1, 0x2, 0x4b55, 0x6, 0x5, 0x2, 0x2, 0x6070, 0x8, 0x5e, 0x3, 0xacf, 0x800, 0x7, 0x3, 0x3, 0x0, 0x1, 0x101, 0x9, 0x5, 0x35b, 0x0, 0x7, 0x1, 0x7ff, 0x7, 0x3, 0xfffffff7, 0x9, 0x6, 0x70, 0xa1, 0x7fffffff, 0x5, 0xfffffeff, 0x6, 0x5, 0x2, 0xfffeffff, 0x80, 0xdbd, 0x0, 0x9, 0x2, 0xffffff32, 0x200, 0x101, 0x0, 0x7ff, 0xbf, 0x40, 0x1, 0xd9, 0x3, 0x5, 0x9, 0x20, 0x1, 0x1, 0x7f, 0x3, 0x16, 0x0, 0x2, 0x401, 0x0, 0x101]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xc24}]]}, {0x8b, 0x6, "3a25220fe7dd3d5d7239a02ad8d71fecee8b5d3496598321c387264f7fd1a80c62c269f7fe014c3c74d4e5fd47db309a388e799bd089e925ff9ca5a655b7aa11b062aafb8add810d56ed45fa469927436dfc390e803e5d2775b4cd8b741cc23e2ac5e9e2ec2a505de29ab1c7e2dfd5a884245aa9b61175b19780c6f403ddc56191ebcf501ec070"}}}, @m_mpls={0x44, 0x1f, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x4}, {0x2d, 0x6, "977e791e5a241b5e959fadc8d926d4f1d7d42c5a66a7af10a5bf38d1357265c8a6d1b6f9e9fc4d65f5"}}}]}, {0x338, 0x1, [@m_ct={0xb8, 0x19, 0x0, 0x0, {{0x7, 0x1, 'ct\x00'}, {0x4}, {0xa8, 0x6, "84c5c06f079738f265f1578f47c3c1283ef30db95b70514959f0eb24c233f362daaf1d96b990a82a3689e952a8e33855a9f70bede65f04d85aa4a7ab60b5d516e1bb65cbfd246121edbd77c32af5642d947c8581e6eea9b43716367f37cdc811b167d3851a654b919b8be9294b6bd1094454c5c481f0383962afed92b597f4d38fdac589f86894cbb1bbde25af4f53550b87ea69ad4476c4cf8b1cffb35fd885c41e2a87"}}}, @m_csum={0x164, 0x8, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x6, 0x0, 0x2, 0x3}, 0x73}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x4, 0x20000000, 0x9c2, 0x1}, 0x1c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0xffff, 0x20000005, 0x7f, 0x3}, 0x53}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7ff, 0xd59d, 0x4, 0x6, 0xa4e8}, 0x47}}]}, {0xde, 0x6, "4e6e8919ba673238ffa37bd253c50160e218a7db469315af8d53acfae229a80021c2689cc2ca13234f6d7bb8e782b238fe221b1011829cdb1e13cc8b2d13fc88101fb7139d59c841e71846515758c35e3e9242bd9fff26548e2cfaa90fad432a2400012993a981d682416c040c76f02347d9dcf02c48f98769fdd61f9f3be989e0a6b5242a01975de518f8ec93e2aef70a936c0c5ada75b4d5aa5aded80b06453e5c45ccfc1ecfb971525b5ed1151ee974bcf98f8d40da53ea844b1be62b43955bdf9982440fa6ff05e4bee9aafd9e99ba15c521cf70b2fcfd8f"}}}, @m_nat={0x118, 0x5, 0x0, 0x0, {{0x8, 0x1, 'nat\x00'}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0xfffff2a1, 0xffffffffffffffff, 0x1000, 0x9}, @local, @empty, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x645, 0x4, 0x20000000, 0x7, 0x9}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x558, 0x7, 0x1, 0x7, 0x9b84}, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xe69c, 0x7, 0x14b725e28b70e716, 0x1, 0x8}, @multicast1, @multicast1, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x6, 0x5, 0x89f0, 0x76}, @empty, @empty, 0xff000000, 0x1}}]}, {0x3f, 0x6, "be6c813de590caed002101ad2556663ebb219362276f8d3873f67196ddc810f1dc233988fd773605cef96d9f150541c9e7e763789c264b6a30aa93"}}}]}, {0x124, 0x1, [@m_skbmod={0xb8, 0x1d, 0x0, 0x0, {{0xb, 0x1, 'skbmod\x00'}, {0x68, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xc}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x800, 0x20000000, 0x380, 0x6}, 0x6}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xff, 0xec, 0x0, 0x1a, 0x7fffffff}, 0x7}}]}, {0x40, 0x6, "f4f9c2ebe9fe78f6eed501a8890fbfa84a0f5ff48ac55c37dd8aee7e3ef73bbeca68550e573fcc402db762a13cccedbdf9c0a795f08cc832c2b68ba7"}}}, @m_ct={0x68, 0xd, 0x0, 0x0, {{0x7, 0x1, 'ct\x00'}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x3ff}, @TCA_CT_ACTION={0x6, 0x3, 0x8}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_LABELS={0x14, 0x7, "c3f13c9a260fc697f5828c0576e021e3"}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast2}]}, {0x15, 0x6, "2fb078e9d31d2a5a5e12f0ccdf356a7dd6"}}}]}, {0x41d4, 0x1, [@m_tunnel_key={0xdc, 0xf, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x68, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2, 0x1ff, 0x8, 0x6, 0x3}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x86}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x1f}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}]}, {0x5e, 0x6, "24dd9b815ba5cf59a236e22a7235f813cdba1cecc093ba6822009ebc26f33df249c0893b14f1464a5e03a4d6359ee5ad943eee4d746c56a2ea28aa75ae35da0e2201b9834d5c11665f8046f1f96ce58a607f8bc9a5db26003105"}}}, @m_tunnel_key={0x10c, 0xc, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x18, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @rand_addr="3c6cd8140ee6c4293c4d31ebfbe389e6"}]}, {0xdf, 0x6, "9cf78197cd358b7f83d706da60860b89157559e03b74937ec25204c3e91bd28f347bfe8f485acb50a5b2f03b00c69e3a52e184438c8fca63623a1a1142a38b59159c19c4f16fc22420829ce96584e8b94a47a652142f974b08ae399ef8514d4973c959650d48a4fc44410e31f6271df5c881f1e96ced126c574ff3ba77d8fd8359d2d23e595e72f93133793e7028e0f2a51f35c306fd52c7cdba12b48f200556bfb43347a5baeae2c4f820237855683d3806c5c2a5e98937b0385e6acf98d8fdac1e37459ab76c101877d8226d9e3c0a3570386320492ae8e0d7fc"}}}, @m_police={0x2bd0, 0xa, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x2b14, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x10000, 0x4, 0x7ff, 0xff, 0x200, 0x5, 0x40, 0x9b, 0x2, 0x0, 0x2, 0x9, 0x9, 0x0, 0x7, 0x800, 0x0, 0x0, 0x3f, 0x8000, 0xe0, 0xffffffff, 0x3, 0x5, 0x5, 0x5, 0x8001, 0xd8, 0x8, 0xfffffffd, 0x652, 0x9, 0xb47f, 0x2, 0x1ff, 0x7b9e, 0x7, 0x6, 0x6, 0x8, 0x3, 0x115e, 0x2, 0x6, 0x6, 0x5, 0x7, 0x80, 0x200, 0x401, 0x8, 0x7fff, 0x7ee1, 0x3, 0x2, 0x401, 0x6, 0x9, 0x7, 0x3ff, 0x7fff, 0x78, 0x4, 0x8, 0x5, 0x9, 0xbec, 0x80, 0x7, 0x8000, 0x7, 0x6, 0x400, 0x1, 0x800, 0x6, 0x5, 0x8, 0x6, 0x15c1, 0x0, 0x400, 0x65097e0a, 0x6, 0x7, 0x6, 0x7f, 0xfffffff9, 0xf, 0x2, 0xffffffb1, 0x1, 0x1f, 0x0, 0x20, 0x4, 0x5, 0x4, 0x1, 0x7fff, 0x7fffffff, 0x3, 0x4, 0x2, 0x4, 0x3, 0x800, 0x0, 0x81, 0x3, 0xfffffffc, 0x8, 0x7421, 0x0, 0xb1, 0xc12b, 0x0, 0x5, 0xffffff19, 0x8001, 0x1, 0x2, 0x1, 0x20, 0x7, 0x9, 0xd0, 0xe62, 0x1, 0x9, 0x80000001, 0x3ff, 0x4, 0x9, 0x10, 0x45, 0x80000001, 0x400, 0x4, 0x0, 0x8, 0x9, 0x2, 0x9c, 0x9c68, 0xec, 0xc4, 0x0, 0x0, 0xd394, 0x8, 0x401, 0x101, 0x10001, 0xc5, 0x6, 0x0, 0x0, 0x4, 0x2, 0x8000, 0x8, 0x4, 0x0, 0x1, 0xffffffff, 0x7fff, 0x2a, 0xff, 0x8, 0x0, 0x80000, 0x9, 0x401, 0x3, 0x10000, 0x3, 0x0, 0x8, 0x9, 0x0, 0xffff7fff, 0x7f, 0x50, 0x5, 0x81, 0x1f, 0x2, 0x8, 0x4bf, 0x8, 0xc3, 0xa6, 0xca, 0x4, 0x0, 0x9e40, 0x9, 0x9, 0x6, 0x3, 0x800, 0xff, 0x1, 0xfffffffb, 0x3, 0x4, 0x2, 0x80000001, 0x4, 0x200, 0x3b, 0x94, 0x4, 0x80000001, 0x9, 0x20, 0x80, 0xfff, 0x800, 0x6, 0x7fff, 0x43, 0x6, 0x0, 0x9, 0x9, 0x57, 0x4, 0x3ff, 0x7, 0x36a, 0x200, 0x7f, 0x9, 0x7fff, 0x2, 0x5, 0xfffffffe, 0x5, 0x1, 0x200, 0x10001, 0x78b898fe, 0x6, 0x81, 0x26, 0x10001, 0x7, 0x8b9, 0xfffffff7, 0x3, 0xc2, 0x3, 0x2]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x0, 0x7, 0x0, 0x9, 0x3f, 0x6, 0x7f, 0xffffff08, 0x8, 0x9, 0x0, 0x200, 0x9, 0x9, 0x20, 0x2d9, 0x3f, 0x2, 0xe1, 0x8000, 0x3, 0x3, 0x100, 0xffff8f44, 0xffffff81, 0x80000000, 0x1, 0x7ff, 0x2, 0x8001, 0x7, 0xfffffffb, 0x7, 0x401, 0x9, 0x7f, 0x5, 0x7, 0x0, 0x3, 0x8, 0x3, 0x200, 0x7ff, 0x6, 0x8, 0xfffff3cd, 0x2, 0x400, 0x400, 0x1d1, 0x3, 0x8001, 0x3f, 0x400, 0x1, 0x80, 0x2, 0x2, 0x80000001, 0x40, 0x600, 0x1, 0xf62b, 0xfffff800, 0x39, 0x1f, 0x6, 0x2, 0xff, 0x3, 0x3, 0xea, 0x100, 0x2d8e9375, 0x6, 0xfffffffa, 0x5, 0x1, 0x4, 0x5, 0xffffff08, 0x6, 0x9, 0x7, 0xffffffff, 0x3ff, 0x4, 0x5, 0x1, 0x1ff, 0x61, 0x7, 0x687, 0x319b, 0x4, 0xe8, 0xd2a, 0xffffffff, 0x0, 0x101, 0x0, 0x4, 0x5, 0x2, 0x401, 0x81, 0x20, 0x0, 0x8, 0x9, 0x800, 0x7fffffff, 0x6, 0x8, 0x8, 0x0, 0x8, 0x5, 0x37d, 0x0, 0x9, 0x401, 0x4, 0x7fff, 0xf3300000, 0x7, 0x1, 0x7, 0xfffffffd, 0x7, 0x7, 0x6, 0x0, 0x17b, 0x9, 0x9, 0x1f, 0x5, 0x20, 0xffffffff, 0x7, 0x4, 0x4, 0x2, 0x7, 0x0, 0x5, 0x5, 0x2cff, 0x8001, 0x63c1, 0x2d25, 0x1, 0x5, 0x4000000, 0x400, 0x5, 0x1f, 0x0, 0xd4, 0x4, 0x400, 0x5, 0x3, 0x4, 0x0, 0x3, 0x0, 0x1, 0x8, 0x83, 0x7ff, 0x9, 0x2400000, 0x6, 0x1, 0xfff, 0x6, 0x1ff, 0x100, 0x1, 0x3, 0xfffffff8, 0xed, 0xd8b0, 0x1, 0xff, 0x5c, 0x8, 0x8, 0x2491, 0x9, 0x0, 0x7, 0x9, 0x11, 0x7, 0x79, 0x80000001, 0xc6, 0x56, 0x800, 0x100, 0x8, 0x80000000, 0x8000, 0x0, 0xea8e, 0x1, 0x3ff, 0x8, 0x3, 0x2, 0x8, 0x100, 0x1, 0x7fff, 0x5, 0x6, 0x8, 0x4, 0x81, 0x10001, 0x9, 0x40, 0xfffffff9, 0xe1c, 0xc242, 0x7, 0x4, 0xffff, 0x2c31, 0x742, 0x2, 0xedef, 0x401, 0x6, 0xfffffff7, 0x401, 0x800, 0xd092edf, 0x9, 0x1, 0x83ec, 0x8, 0x1, 0x8, 0x1, 0x8, 0xff, 0x2, 0x0, 0x1000]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8001}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x100, 0x2, 0xcf12, 0x2436, 0x0, 0xdb, 0x7, 0x2, 0x80, 0x3f, 0x5, 0x1, 0x9, 0x6, 0x7, 0x9, 0x380, 0x7, 0x1, 0x8, 0x4, 0x3, 0x3, 0x3, 0xffff, 0xfa, 0x5, 0x6, 0xff, 0x4, 0x6, 0x4, 0x4, 0x7fffffff, 0x7eb, 0xea, 0x10000, 0xb4e, 0x537b, 0x2, 0x2, 0x0, 0x6ce, 0x1000, 0x32, 0xb4, 0xffffffff, 0x400, 0x4, 0x1, 0x7, 0x9, 0xffff, 0x6, 0x2, 0x2, 0x4, 0x1, 0xd514, 0x6, 0x80, 0x7, 0x22336824, 0xfff, 0x8, 0x5, 0x5, 0xb025, 0x7, 0x9, 0x101, 0x1, 0x4, 0x2, 0x7, 0x9, 0x0, 0x4, 0x2, 0x10000000, 0x5, 0xff, 0x2, 0x20, 0x80000001, 0x4, 0x6, 0x55a, 0x42, 0x5, 0x83, 0xe053c6f, 0x1, 0x0, 0x9, 0x9, 0x7ff, 0x7, 0x8, 0x9, 0xfffffff9, 0x6, 0x7ff, 0xfffff53f, 0xd, 0x1, 0xfffffff9, 0x0, 0x28000000, 0x40, 0x3, 0x6, 0x0, 0x401, 0x6, 0x4, 0x5, 0x3, 0x800, 0x5, 0xfffffffa, 0x8, 0x8, 0xe36, 0x0, 0x20, 0x9, 0xfffffffd, 0x3f, 0xba, 0xfffffffb, 0x9, 0x1, 0x9, 0x0, 0x7f, 0x1, 0x1ff, 0x6, 0x6, 0x4, 0x4074, 0x400, 0x101, 0x4, 0x1f, 0x7, 0x3, 0x7d, 0x1, 0x6, 0xffff9a35, 0x800, 0x72c6, 0x800, 0x7fffffff, 0x7, 0x9, 0x8, 0x91, 0x20, 0x7fffffff, 0x401, 0xffffffff, 0x5, 0x1, 0x3, 0x8a, 0x3, 0x80, 0x1, 0x7, 0x6, 0x7, 0x8001, 0x8, 0x3ff, 0x1, 0x7, 0x0, 0x10001, 0x7fffffff, 0x7ff, 0xffffffff, 0x80000000, 0x12, 0x80000001, 0xfffffffb, 0x5, 0x0, 0x3, 0xfffffff7, 0x0, 0x9, 0x2e6b, 0x3, 0x4, 0x200, 0x80, 0x7ff, 0x0, 0x8, 0x6, 0x1, 0x3, 0x2, 0x8, 0x7f, 0x4, 0x6d, 0x3ff, 0xceaf, 0x8, 0x0, 0x81, 0x9949, 0x6, 0x4, 0x6718, 0x6, 0x2, 0xfffffff7, 0x9, 0x200, 0x2, 0x2, 0x0, 0x7f, 0x400, 0x0, 0x15524a01, 0x4, 0x6, 0x4, 0x80, 0x80, 0x65d, 0xed, 0x416, 0x1, 0x10000, 0x9, 0x1983, 0x3, 0x1, 0x20, 0x7ff, 0x5, 0x7, 0x401, 0x0, 0x4, 0x4, 0xffffffff, 0x80000000]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x40}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x1400000, 0x40, 0xfffffff7, 0xffff, 0x3, 0x3092, 0x9, 0x2, 0x0, 0x8, 0x0, 0x4, 0xff, 0x5, 0x7, 0x6, 0xe01, 0x0, 0x6, 0x4, 0xffffff7f, 0x8000, 0x380, 0x100000, 0x8, 0x2d52, 0x0, 0x86b1, 0x5, 0x84, 0x400, 0x6, 0x2, 0x5, 0x6, 0x1f, 0x81, 0x800, 0x6cc4, 0x2, 0x6, 0x4, 0x7fff, 0x0, 0x80000001, 0x3, 0x40, 0x3, 0x92e6, 0x6, 0x5, 0x101, 0x3, 0xa4e, 0x8, 0x200, 0x0, 0x8, 0x1c, 0xb039, 0xfffffffe, 0x6, 0x401, 0x0, 0x5306dcca, 0xa8, 0x43ba, 0x40, 0x2, 0xfffffffa, 0x0, 0x8, 0xcf, 0x3ff, 0x6, 0x4, 0x7fffffff, 0xfffffffa, 0xf17, 0x40, 0x5, 0x78, 0x1, 0x2, 0x40, 0x7, 0x7f, 0x99, 0x8, 0x7ff, 0xfffffffd, 0x1, 0x8, 0x1, 0x10001, 0xffffffff, 0x3d, 0x9, 0x1f7, 0x6, 0x5, 0x306, 0x3f, 0x6, 0x40, 0x8, 0x3, 0x3ff, 0x6, 0x6, 0x8abe, 0x401, 0x9b6, 0x2c116fcb, 0x8, 0x10000, 0x2, 0x10001, 0x7fff, 0x6253, 0x8000, 0x2, 0x6, 0x3ff7, 0x7, 0x9, 0x7, 0x6, 0xb57d, 0x3, 0x101, 0x81, 0x69, 0x7, 0xfffffc00, 0x2, 0x3, 0x9, 0x0, 0x4, 0x20, 0xfffffff7, 0x7, 0xff, 0xff, 0x9, 0x211, 0x5, 0x8001, 0x9, 0x4, 0x3ff, 0x1, 0x80000000, 0x7fffffff, 0x1, 0x7, 0x1, 0x46af, 0x6, 0x88d2, 0x9, 0x587c, 0x5, 0x1, 0x7fff, 0x5, 0x101, 0x4, 0x0, 0x3, 0x8, 0x0, 0x8, 0x9, 0x3ff, 0x100, 0xdfa, 0xfff, 0x3, 0x200, 0x7fffffff, 0xfffffe00, 0xff, 0x7, 0x6, 0x4, 0x7, 0xdf8, 0x3ff, 0x2, 0x73, 0x9bff, 0x1, 0x1, 0x1, 0x0, 0x6, 0x6, 0x6, 0x8, 0x124, 0x3ff, 0x401, 0x81, 0x5, 0x5, 0xffffffc1, 0x4a, 0x8, 0x1, 0x7ff, 0x6, 0x0, 0x4, 0x0, 0x9f9, 0x582, 0x9b, 0x4, 0x6, 0x2, 0x9, 0xcb9b, 0x7, 0x2, 0x0, 0x10001, 0x8, 0x2c0e, 0x1ff, 0x800, 0x81, 0x0, 0x2, 0x7, 0x0, 0x5, 0x7, 0x400, 0x1000, 0x10000, 0x80, 0x2, 0xe0b, 0x0, 0x400, 0x1200000, 0x2, 0x7, 0x2, 0x0, 0x5, 0x1, 0x2]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x400}, @TCA_POLICE_TBF={0x3c, 0x1, {0x87, 0x20000002, 0xfa, 0xffffff00, 0xff, {0x1, 0x0, 0xffff, 0x1ff, 0x0, 0x4}, {0x38, 0x2, 0x1, 0x0, 0x7, 0x1157}, 0x8, 0x6, 0xff}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x5, 0x1, 0x8, 0x100000, {0x6, 0x2, 0x7, 0x1ff, 0x81, 0x8}, {0x0, 0x1, 0x8, 0x8000, 0x79f5, 0x9}, 0x80000001, 0x8, 0x400}}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x1, 0x2, 0x1c, 0x5, 0x4fde9136, 0x80000000, 0x2, 0x0, 0x8, 0x1, 0x7fffffff, 0x6, 0x4, 0x7fffffff, 0x7, 0x50, 0xae8c, 0x2, 0x1, 0x6, 0x7, 0x0, 0x6, 0x0, 0x8, 0xff, 0x2, 0x1, 0x401, 0x0, 0x6, 0x101, 0x4, 0x1, 0x60000000, 0x4, 0x9, 0x6, 0xfffffffc, 0x9, 0x1, 0x912, 0x778541f9, 0x0, 0x7, 0x8, 0x8001, 0x8000, 0x7, 0x2, 0x9, 0x4, 0xb, 0x7, 0x100, 0x2, 0x0, 0x716, 0x4, 0x8001, 0xfff, 0x20, 0x4, 0x68, 0x3, 0x3, 0x2, 0xfffffff9, 0x101, 0xaaf3, 0x0, 0x81, 0x2, 0xfffeffff, 0x1ff, 0x0, 0x1, 0x0, 0x2, 0x8, 0x9, 0x0, 0x80, 0x10000, 0x6, 0x8000, 0x5, 0x40000000, 0x8, 0x800, 0x8af3, 0x9, 0xd9ee, 0x401, 0x9, 0x9, 0x9, 0x8, 0x7fff, 0x6f514236, 0x5, 0x100, 0x730, 0x8000, 0x80000000, 0x81, 0x3, 0x4, 0x7, 0x8, 0x6, 0x0, 0x1, 0x7, 0x5, 0x2, 0x8, 0x80000001, 0x6, 0x23, 0xa22, 0x1, 0x0, 0x7f, 0x6, 0xb4, 0x3, 0x7, 0x9, 0x800, 0xfffffffc, 0x8000, 0x401, 0x876e, 0x2, 0x6cc5, 0x81, 0x7f, 0x0, 0x80, 0x8, 0x4, 0x5, 0x3, 0xb6b, 0x6, 0x3, 0x2, 0x3, 0x26c6e678, 0xf2, 0x9, 0x6, 0x3, 0x1, 0xb82, 0x9e5f, 0x6, 0xffff, 0x5, 0x4, 0xfffffc00, 0x1ff, 0x6, 0x401, 0xa3f, 0xfffffff7, 0x324a, 0x8, 0x6, 0xd9d, 0x0, 0x8, 0x5, 0x3ff, 0x0, 0x8, 0xffff7fff, 0x1, 0x1, 0x3, 0x8001, 0x9, 0xfffffffe, 0x2, 0x80000000, 0x1, 0x3, 0x0, 0xd1e, 0xac0, 0x2, 0x7, 0x1, 0x101, 0x9, 0xb14, 0xd0d1, 0x4, 0x8, 0xbce5, 0xff, 0x4, 0xe99, 0x3ff, 0x5, 0x8, 0x9435, 0x5, 0x8f7, 0x10001, 0x20, 0x3, 0x4477f78d, 0x9, 0x0, 0xd8, 0x2000, 0x101, 0xffffff80, 0x7, 0x7282857d, 0x5, 0x4, 0xfffffffa, 0x1, 0x0, 0x7a596123, 0x2, 0x8, 0x401, 0x2, 0x9, 0x0, 0xd6, 0x4, 0x5, 0x1, 0x4, 0x3f, 0x8, 0x2, 0x1, 0x5, 0x5, 0xfff, 0x1ff, 0x6, 0x61c, 0x2, 0x0, 0x6, 0x2, 0xbbdf, 0xfff]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x1, 0x7, 0x8, 0x1, {0x6b, 0x1, 0x2, 0x3, 0x1, 0x1000}, {0x40, 0x0, 0x80, 0x20, 0x2a, 0x5}, 0x2a6a, 0xba9e, 0x7ff}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x39}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x80}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x5, 0x1000, 0x401, 0x3f, {0x7f, 0x2, 0x5f7b, 0x100, 0x3e, 0x1df}, {0x4, 0x0, 0x2, 0x80, 0xee4, 0x1000}, 0x1ff, 0x7fffffff, 0x7f}}], [@TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x42}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1f}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x5, 0x9f, 0x2, 0x6, {0x0, 0x0, 0xfffe, 0xfff, 0x1000, 0x10001}, {0x9, 0x2, 0xeb39, 0x2, 0x7fff, 0x4}, 0x1, 0x3ff, 0x4}}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x400}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x8000, 0xfffffff7, 0xffffffff, 0x8000, 0xfff, 0x0, 0x2, 0x1, 0x101, 0x3, 0x1f, 0x1ff, 0x53, 0x3, 0x4, 0x6, 0x1, 0xf8, 0x9, 0x61a, 0x40, 0x5, 0x0, 0x3f, 0x7c, 0x3, 0xe082, 0x4, 0xfff, 0x8, 0x2, 0xce, 0x4, 0x4, 0x9, 0x6, 0x9, 0x1fa, 0xa9, 0xffffffff, 0x1, 0x9, 0x2, 0x8000, 0x90000000, 0x8, 0x8000, 0x6, 0x1, 0x8000, 0x7, 0x3, 0xe17, 0x6, 0x3, 0xffffffff, 0x100, 0x42cfcaf3, 0x8, 0x40, 0x200, 0x200, 0x20, 0x9, 0x10000, 0x100000, 0x9, 0x3f9b, 0x40, 0x3, 0x6, 0x8, 0x8, 0x800, 0x7, 0x1f, 0x3e5b, 0xe2, 0x80, 0xfff, 0x0, 0x735, 0x2, 0x1, 0x2, 0x5, 0x6, 0x1, 0x81, 0x3, 0x18000000, 0xfffffffc, 0xa12e, 0x6dcf, 0x400, 0x7f1, 0x3, 0xffffffff, 0x4, 0x100, 0x667b, 0x5, 0x7, 0x9, 0x0, 0x3, 0x1, 0xffffffda, 0x3, 0x81, 0xffffff74, 0x4, 0x1000, 0x3, 0x400, 0x564, 0x1f, 0xffffff66, 0xffffffa1, 0x0, 0x9b58, 0x1ff, 0xffffffff, 0x2, 0x10000, 0x2, 0x2, 0x8, 0x5, 0x18, 0x0, 0x80000000, 0x2, 0x374000, 0x401, 0x846, 0x7, 0x7, 0x7fff, 0x80, 0x5, 0x80000000, 0xc7, 0x2, 0x0, 0x5, 0x3, 0xe0b2, 0x0, 0x3, 0x46b0e709, 0x10000, 0x9, 0x1000, 0xdac, 0x401, 0x80000001, 0x6, 0x1, 0xfffffff8, 0x9, 0x3, 0x18, 0x9, 0x8, 0x401, 0xe4, 0x55597047, 0x8, 0x1da, 0x9, 0xca, 0x1, 0x10001, 0x81, 0x7ff, 0x8, 0x8, 0x1ff, 0x24ab, 0x0, 0x1, 0x100, 0x40, 0x7fff, 0x1, 0x5, 0x3, 0x40, 0x3, 0x1000, 0x5, 0x7, 0xffffffa9, 0x3, 0xe4ef, 0x3, 0x97fa, 0x9, 0x8, 0x47c8, 0x8, 0x9, 0x7, 0x7fff, 0x7ff, 0x0, 0x101, 0xfffffffc, 0x1f, 0x0, 0x100, 0xa9, 0xfffff2e7, 0x6, 0xa0, 0xdc, 0x1, 0xbfed30a, 0x8, 0x3, 0x400, 0xffff, 0x8, 0x41e2781b, 0x3, 0x3, 0x2, 0x2, 0x5, 0x1, 0x8, 0xf47f, 0x2, 0x80000001, 0xffffff01, 0x5, 0x0, 0xfffffffe, 0x8, 0x1, 0x800, 0x8, 0x3f, 0x6, 0x3, 0x1000, 0x800, 0x1ff, 0x80000001, 0x83, 0x3, 0x81, 0x1ff, 0x100]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1f, 0xfffff800, 0x7, 0x6, 0x7f, 0x7, 0x9, 0x2, 0x8, 0x10000, 0x4, 0x10000, 0x0, 0xffffffff, 0x1ff, 0x0, 0xfffffffd, 0x7fffffff, 0xd4, 0x1, 0xfffffff9, 0x2, 0x0, 0x574, 0x1, 0x8001, 0x100, 0x373, 0x81, 0x0, 0x8, 0x80000001, 0x3, 0xfb, 0x0, 0x1, 0x8, 0x7fff, 0x20, 0x3ff, 0x0, 0x4, 0x5, 0xffffffe0, 0x8, 0x2a0, 0xfb, 0x5, 0x0, 0x2, 0x0, 0x5, 0x1000, 0x286, 0xfe, 0x1, 0xfff, 0x93, 0x2, 0x97a0, 0x5, 0x5, 0x8, 0x7, 0x785d, 0x1ff, 0x2, 0x2, 0x3, 0x9, 0x3, 0x80, 0xd2f, 0x51b, 0x8, 0x2, 0x9, 0x5, 0x9, 0x31c8, 0x5, 0x2000000, 0x3ff, 0xbed, 0x7ff, 0x6, 0x5c6, 0x3, 0x9, 0x1, 0x3ff, 0x7f, 0x8, 0x6, 0x2, 0x81, 0xfffffff9, 0x6, 0x401, 0x5f8a, 0x4, 0xe, 0x3, 0x7ff, 0x705, 0x36, 0x8, 0x2, 0x1, 0x7, 0x9, 0x7fffffff, 0x66c0, 0x4, 0x7, 0x10000, 0x7f, 0x36ef, 0x8, 0x1000, 0x3, 0x3, 0x4, 0x1, 0x1, 0x628, 0x1, 0x9, 0x800, 0x200, 0x400, 0x2, 0x3, 0x0, 0x9, 0x7fff, 0x6, 0xfffffffd, 0xff, 0x7, 0xa1, 0x0, 0x401, 0x0, 0xd0e, 0x9, 0x1f, 0x22f, 0xffffffff, 0x6, 0x80000001, 0x80, 0x7fff, 0x3, 0x0, 0x7, 0x7f, 0xffffff00, 0x4, 0xffffffff, 0x23afb613, 0x8, 0x1f, 0x8, 0x0, 0xffff, 0x6, 0xffff8001, 0x0, 0x3, 0x6, 0x9, 0x2, 0x3, 0x7a, 0x7fffffff, 0x5, 0x8d9, 0x5, 0x401, 0x5, 0xd31, 0xf1, 0x8000, 0x2, 0x6, 0x4, 0x8, 0x9, 0x8, 0x800, 0x40, 0x7, 0x299600, 0x3, 0xd73d, 0x1, 0x8, 0x80, 0x4, 0x2, 0x5, 0x2, 0x5, 0x5, 0x200, 0x20, 0x81, 0x40, 0x1, 0x3, 0x45, 0x3, 0x10001, 0x7, 0x9, 0x5, 0x400, 0x183, 0x80, 0x81, 0x0, 0x3, 0xffffff8f, 0x1f, 0x40, 0x9, 0x4, 0x7, 0x0, 0x2, 0x2, 0x9, 0x4, 0x401, 0x3f, 0xffff0603, 0x5, 0xe0, 0x1, 0xbd, 0x149b, 0x1, 0x6, 0xfff, 0x2, 0x7, 0xfffffff7, 0x838, 0x6, 0x8, 0x101, 0x9456, 0x6, 0xf87, 0x92]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x10000000, 0x80000000, 0x3, 0xff, {0x4d, 0x1, 0x0, 0xdb6, 0x101, 0x1f}, {0x0, 0x2, 0x8, 0x1, 0x794c, 0x9}, 0xf, 0xf74d, 0xf3}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x300}], [@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x2, 0xffff, 0x9, 0x10001, 0x7, 0xfd, 0x7, 0x80, 0xdd9b, 0xfffffffc, 0x7, 0x4, 0x80, 0x1c4, 0xed0dcf1, 0x0, 0x101, 0x6, 0x7ff, 0xffff90a3, 0x0, 0xef5, 0x7, 0x508, 0x2, 0x8, 0x9, 0x10001, 0x10000, 0x4, 0x5, 0x7ff, 0x0, 0x2, 0x574, 0x7, 0x7f5f, 0xffffffff, 0x528a, 0x2, 0x4, 0x4800, 0x1, 0x8, 0x6, 0x6, 0x0, 0x3, 0x0, 0x7ff, 0x1f, 0x1, 0x9, 0x7f, 0x81, 0x6, 0x3, 0x2, 0x9, 0xc02, 0x3c4d, 0x5, 0x7, 0x400, 0x8, 0x0, 0x2, 0x1f, 0x0, 0xc0, 0x6, 0x7, 0x6, 0xff, 0xfffeffff, 0x5, 0x2, 0xffffff70, 0x4, 0x1f, 0x6, 0x1, 0x2, 0x80000, 0x5, 0x1, 0x5, 0x1, 0xffffff28, 0x8, 0xfd3, 0x4, 0xfffffffa, 0x3, 0x8, 0x2, 0x3, 0x2, 0x2, 0x81bd, 0x4, 0xfff, 0x1, 0xc38, 0x8, 0x7fff, 0x100, 0xfffff001, 0x81, 0x100, 0x3, 0x401, 0x3, 0x1, 0x101, 0x4, 0x6, 0x4b, 0x1, 0x1, 0x8, 0x2802, 0x0, 0x8, 0x3ff, 0x10000, 0x20, 0x1f, 0x5, 0x4, 0x8, 0x5, 0x2, 0x55d, 0x1, 0xffff, 0x400, 0xfffff001, 0xe9d, 0x81, 0x1ef, 0x5, 0x8, 0x5, 0xffff8001, 0x3, 0x401, 0x7, 0xfffffffc, 0x2, 0x959, 0x80000000, 0x4, 0x7, 0x8000, 0x60, 0x7, 0xa3ba, 0x0, 0x3, 0x40, 0x9, 0x8, 0x1f, 0x3, 0x5, 0xfffffc00, 0x2, 0x2, 0xffff, 0x8, 0x4, 0xcb, 0x3, 0x5, 0x9, 0xffffffff, 0x8, 0x25b, 0x81, 0x672, 0x400, 0x7ff, 0x1, 0x3ff, 0x4, 0x2, 0x7f, 0x3f, 0x7f, 0x20, 0x9, 0x7, 0x101, 0x9, 0x80000000, 0x4, 0x1, 0xf6, 0x6, 0x8, 0x3, 0x2, 0x8b, 0x6, 0x3, 0xffffffff, 0x6, 0x2, 0x4, 0xdd6, 0xff, 0x3, 0x8c9, 0x45c, 0x6, 0x100, 0x8, 0x36a, 0x1ff, 0x401, 0x80, 0x9, 0xdb, 0x7f, 0xe6, 0xfffffffc, 0x0, 0x50, 0x4, 0x800, 0x2, 0x4, 0x6, 0xff, 0x10000, 0x6, 0xff, 0x5, 0x8, 0x1, 0x0, 0x2, 0x8, 0x6, 0x10000, 0x4, 0xad8, 0x7, 0x9, 0x9, 0x7fffffff, 0x0, 0x6, 0xfff]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffff000}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0xde, 0x9, 0x4e, 0x0, 0x8, 0x6, 0x7f, 0x4, 0x8001, 0x58, 0x800, 0x0, 0x6, 0x2, 0x9037, 0xffff, 0x2, 0x4, 0xfffffe00, 0xfffffffc, 0x5ae4, 0x0, 0xc, 0x7, 0x200, 0x78, 0x0, 0x3, 0x5, 0x6, 0x0, 0xcf, 0x8, 0x0, 0xdaa, 0x8, 0xffffffff, 0x883, 0xcb8, 0xfffffffe, 0x1f, 0x6, 0x1ff, 0x4, 0x100, 0x2, 0x101, 0x8001, 0xfffffffa, 0x1ff, 0x7, 0x2, 0x4, 0x0, 0x1000, 0x6, 0x9, 0x20, 0x0, 0x4, 0x4, 0x3, 0x9, 0x40, 0x7fffffff, 0xfff, 0x0, 0x7, 0x5, 0x3, 0x3, 0x8, 0x1, 0x3dc, 0x80000001, 0x5, 0x7, 0x1000, 0x1, 0x870, 0x10000, 0xfbf4, 0x9ed20, 0x40, 0xc669, 0x2, 0x80000001, 0x3, 0x4, 0x3, 0x9, 0xfff, 0x34, 0x8738, 0x3, 0x9, 0x5, 0x5, 0x8, 0xffffffff, 0x40, 0x7, 0x4, 0x7, 0xfffff787, 0xfffffffb, 0x7, 0xffffffff, 0xac6, 0xff, 0xf0, 0xff, 0x20, 0x7f, 0x1, 0xc4, 0x8000, 0xffffffff, 0x6, 0x20, 0x7, 0x9, 0x4, 0x4, 0xad, 0x80, 0x3, 0xe1, 0x4, 0x3, 0x3, 0x5, 0x3, 0x70000, 0x5, 0x7d, 0x9, 0x4, 0x14d, 0x10000, 0xffffe438, 0x5, 0x5, 0x4, 0x3f, 0xfff, 0x1, 0x100, 0x820, 0x9, 0x1, 0x80000000, 0x80000000, 0x80, 0x6c, 0x9, 0x1, 0x9, 0xfffffffc, 0x2, 0xfffff6cd, 0x10000, 0x7f, 0x800, 0x81, 0xff, 0x5, 0x0, 0x820c, 0x4, 0x7, 0x0, 0x5, 0x7, 0x4, 0x1, 0x828, 0x6, 0x5, 0x71, 0x8, 0x5, 0x4, 0xb7a7, 0x800, 0x15345f5c, 0x9, 0x2, 0x6, 0x6, 0xbbb9, 0x2, 0x3, 0x5a9, 0x1, 0x4, 0x8, 0xfffeffff, 0x8, 0x100, 0x96, 0x1, 0x10000, 0x4b7, 0x80, 0x1000, 0xffff, 0x1, 0x6, 0x7cfe, 0x0, 0x9, 0x2, 0x3902, 0x5, 0x1, 0x60000, 0x1f, 0x81, 0x7fffffff, 0x3, 0x2, 0x7, 0x10000000, 0x3, 0x37c42b56, 0x80000000, 0x7, 0x80000000, 0x10000, 0x101, 0x5, 0x7, 0x2, 0x2, 0x81, 0x8, 0x7fff, 0xff, 0x9, 0x8, 0x9b, 0x200, 0xe77, 0x0, 0x1000, 0xffff, 0x4ddfd753, 0x4e5, 0x1ff, 0x10001, 0x0, 0x6, 0x800, 0x3]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7f}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffffff49, 0x10000004, 0x1, 0xd1b2, 0x4, {0x3f, 0x0, 0x0, 0x0, 0x1, 0x5}, {0xd8, 0x1, 0x81, 0x7f, 0x0, 0x4df7}, 0xffffffff, 0x8, 0xb3a4}}], [@TCA_POLICE_RESULT={0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0xbf, 0x6, 0x7, 0x7, 0x80000000, {0x9, 0x1, 0x101, 0x2, 0x9, 0x1}, {0xff, 0x2, 0x7, 0x2, 0x7f, 0x7}, 0x6c, 0x0, 0xc0000000}}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffff, 0x2, 0x80000001, 0x3, 0x5, {0x4, 0x1, 0x7, 0x8, 0x3}, {0x0, 0x2, 0x1, 0x4ed, 0x8, 0x800}, 0x934, 0x5, 0x2}}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x10000}, @TCA_POLICE_AV