syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:34:56 executing program 5:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)

03:34:56 executing program 0:
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf0000000000000000300050000000000"], 0x70}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="24000000030307031dfffd944ef20c0020200a0009000100021d85680c1baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)

03:34:56 executing program 1:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
r1 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(r0, r1)

03:34:56 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:34:56 executing program 0:
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7"], 0x78}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="24000000030307031dfffd944ef20c0020200a0009000100021d85680c1baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)

03:34:56 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast=0xe0000001}, @icmp}}}}, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x3000)=nil, 0x0)
shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0)
recvfrom$inet(r0, 0x0, 0x0, 0x2, 0x0, 0x800e005b9)

03:34:56 executing program 5:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)

03:34:56 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:34:56 executing program 1:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
r1 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(r0, r1)

03:34:56 executing program 0:
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7"], 0x78}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="24000000030307031dfffd944ef20c0020200a0009000100021d85680c1baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)

03:34:57 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:34:57 executing program 5:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)

03:34:57 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:34:57 executing program 1:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
unshare(0x40600)
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
r1 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(r0, r1)

03:34:57 executing program 0:
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7"], 0x78}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="24000000030307031dfffd944ef20c0020200a0009000100021d85680c1baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)

03:34:57 executing program 5:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)

03:34:57 executing program 0:
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000"], 0x7c}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="24000000030307031dfffd944ef20c0020200a0009000100021d85680c1baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)

03:34:57 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast=0xe0000001}, @icmp}}}}, 0x0)
getsockopt$inet_int(r0, 0x0, 0x5, 0x0, &(0x7f00000000c0))
recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e0075f)

03:34:57 executing program 1:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
unshare(0x40600)
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
r1 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(r0, r1)

03:34:57 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:34:57 executing program 5:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)

03:34:57 executing program 0:
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000"], 0x7c}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="24000000030307031dfffd944ef20c0020200a0009000100021d85680c1baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)

03:34:57 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:34:57 executing program 1:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
unshare(0x40600)
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
r1 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(r0, r1)

03:34:57 executing program 0:
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000"], 0x7c}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="24000000030307031dfffd944ef20c0020200a0009000100021d85680c1baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)

03:34:58 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:34:58 executing program 5:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)

03:34:58 executing program 0:
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b82000000000"], 0x7e}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="24000000030307031dfffd944ef20c0020200a0009000100021d85680c1baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)

03:34:58 executing program 1:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000027000)={0x1})
unshare(0x40600)
writev(0xffffffffffffffff, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
r0 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(0xffffffffffffffff, r0)

03:34:58 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x68, 0x0, 0x221)
recvfrom$inet(r0, 0x0, 0xa4d, 0x2002, 0x0, 0x800e00389)
shutdown(r0, 0x0)

03:34:58 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:34:58 executing program 0:
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b82000000000"], 0x7e}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="24000000030307031dfffd944ef20c0020200a0009000100021d85680c1baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)

03:34:58 executing program 5:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)

03:34:58 executing program 1:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000027000)={0x1})
unshare(0x40600)
writev(0xffffffffffffffff, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
r0 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(0xffffffffffffffff, r0)

03:34:58 executing program 3:
perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:34:58 executing program 5:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)

03:34:58 executing program 2:
unshare(0x400)
r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0)
lseek(r0, 0x0, 0x0)

03:34:58 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:34:58 executing program 1:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000027000)={0x1})
unshare(0x40600)
writev(0xffffffffffffffff, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
r0 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(0xffffffffffffffff, r0)

03:34:58 executing program 0:
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b82000000000"], 0x7e}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="24000000030307031dfffd944ef20c0020200a0009000100021d85680c1baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)

03:34:59 executing program 2:
r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/access\x00', 0x2, 0x0)
write$selinux_access(r0, 0x0, 0x0)

03:34:59 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:34:59 executing program 0:
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000"], 0x7f}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="24000000030307031dfffd944ef20c0020200a0009000100021d85680c1baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)

03:34:59 executing program 1:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
unshare(0x40600)
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
r1 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(r0, r1)

03:34:59 executing program 5:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)

03:34:59 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:34:59 executing program 3:
perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:34:59 executing program 2:
r0 = socket$inet6(0xa, 0x80000000000002, 0x0)
r1 = socket$inet6(0xa, 0x4000000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x2000000000000580, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000040)=0x1, 0x4)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x20000000004e20, 0x0, @ipv4}, 0x1c)
connect$inet6(r0, &(0x7f00000005c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f00000000c0)=0x2, 0x4)
recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/36, 0x24}, 0x2000)
sendmmsg(r0, &(0x7f0000000100), 0x400000000000034, 0x0)

03:34:59 executing program 0:
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000"], 0x7f}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="24000000030307031dfffd944ef20c0020200a0009000100021d85680c1baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)

03:34:59 executing program 1:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
unshare(0x40600)
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
r1 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(r0, r1)

03:34:59 executing program 5:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(0x0, 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)

03:34:59 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  410.848997][T20718] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
03:34:59 executing program 1:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
unshare(0x40600)
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
r1 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(r0, r1)

03:34:59 executing program 5:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(0x0, 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)

03:34:59 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:34:59 executing program 0:
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000"], 0x7f}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="24000000030307031dfffd944ef20c0020200a0009000100021d85680c1baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)

03:34:59 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x60, 0x0, 0x0)

[  411.132009][T20743] binder: BINDER_SET_CONTEXT_MGR already set
[  411.161761][T20743] binder: 20734:20743 ioctl 40046207 0 returned -16
03:35:00 executing program 1:
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
unshare(0x40600)
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
r1 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(r0, r1)

03:35:00 executing program 3:
perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:00 executing program 0:
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
socket$key(0xf, 0x3, 0x2)
sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="24000000030307031dfffd944ef20c0020200a0009000100021d85680c1baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)

03:35:00 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:00 executing program 5:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(0x0, 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)

03:35:00 executing program 2:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4)
sendto$inet(r1, 0x0, 0x2ba, 0x400200007fe, &(0x7f00000000c0)={0x2, 0x4004e23, @local}, 0x10)
write$binfmt_elf64(r1, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644)
sendmsg$inet_sctp(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="e3", 0x1}], 0x1}, 0x4000001)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff012}], 0x1, &(0x7f0000000200)=""/20, 0xd57}, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)

03:35:00 executing program 1:
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
unshare(0x40600)
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
r1 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(r0, r1)

03:35:00 executing program 1:
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
unshare(0x40600)
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
r1 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(r0, r1)

03:35:00 executing program 0:
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
socket$key(0xf, 0x3, 0x2)
sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="24000000030307031dfffd944ef20c0020200a0009000100021d85680c1baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)

[  411.626475][T20774] binder: BINDER_SET_CONTEXT_MGR already set
[  411.695358][T20774] binder: 20767:20774 ioctl 40046207 0 returned -16
03:35:00 executing program 5:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0x0)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)

03:35:00 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:00 executing program 1:
mkdir(0x0, 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
unshare(0x40600)
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
r1 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(r0, r1)

03:35:00 executing program 0:
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
socket$key(0xf, 0x3, 0x2)
sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="24000000030307031dfffd944ef20c0020200a0009000100021d85680c1baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)

03:35:01 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:01 executing program 5:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0x0)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)

03:35:01 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:01 executing program 0:
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, 0x0, 0x0, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="24000000030307031dfffd944ef20c0020200a0009000100021d85680c1baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)

03:35:01 executing program 2:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4)
sendto$inet(r0, 0x0, 0x2ba, 0x400200007fe, &(0x7f00000000c0)={0x2, 0x4004e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644)
sendmsg$inet_sctp(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="e3", 0x1}], 0x1}, 0x4000001)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff012}], 0x1, &(0x7f0000000200)=""/20, 0xd57}, 0x300)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

03:35:01 executing program 1:
mkdir(0x0, 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
unshare(0x40600)
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
r1 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(r0, r1)

03:35:01 executing program 5:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0x0)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)

03:35:01 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:01 executing program 0:
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, 0x0, 0x0, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="24000000030307031dfffd944ef20c0020200a0009000100021d85680c1baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)

03:35:01 executing program 5:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000027000)={0x1})
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)

03:35:01 executing program 1:
mkdir(0x0, 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
unshare(0x40600)
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
r1 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(r0, r1)

03:35:01 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:01 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:01 executing program 0:
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, 0x0, 0x0, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="24000000030307031dfffd944ef20c0020200a0009000100021d85680c1baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)

03:35:01 executing program 1:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
unshare(0x40600)
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
r1 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(r0, r1)

03:35:01 executing program 5:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000027000)={0x1})
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)

03:35:02 executing program 2:
io_setup(0x3, &(0x7f00000001c0)=<r0=>0x0)
io_submit(r0, 0xf, 0x0)

03:35:02 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5800, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:02 executing program 1:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
unshare(0x40600)
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
r1 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(r0, r1)

03:35:02 executing program 0:
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)

03:35:02 executing program 5:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000027000)={0x1})
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)

03:35:02 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:02 executing program 1:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
unshare(0x40600)
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
r1 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(r0, r1)

03:35:02 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:02 executing program 5:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x0, &(0x7f0000027000)={0x1})
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)

03:35:02 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:02 executing program 2:
socket$inet_udplite(0x2, 0x2, 0x88)
syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00')
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00')
lseek(r0, 0x7ffffffffffffffc, 0x0)

03:35:02 executing program 1:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
unshare(0x40600)
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
r1 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(r0, r1)

03:35:02 executing program 5:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x0, &(0x7f0000027000)={0x1})
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)

03:35:02 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:02 executing program 2:
socket$inet_udplite(0x2, 0x2, 0x88)
syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00')
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00')
lseek(r0, 0x7ffffffffffffffc, 0x0)

03:35:02 executing program 0:
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)

03:35:03 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:03 executing program 5:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x0, &(0x7f0000027000)={0x1})
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)

03:35:03 executing program 1:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
unshare(0x40600)
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
r1 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(r0, r1)

03:35:03 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:03 executing program 2:
socket$inet_udplite(0x2, 0x2, 0x88)
syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00')
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00')
lseek(r0, 0x7ffffffffffffffc, 0x0)

03:35:03 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:03 executing program 5:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, 0x0)
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)

03:35:03 executing program 1:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
unshare(0x40600)
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
r1 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(r0, r1)

[  414.677415][T20987] binder: BINDER_SET_CONTEXT_MGR already set
03:35:03 executing program 2:
socket$inet_udplite(0x2, 0x2, 0x88)
syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00')
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00')
lseek(r0, 0x7ffffffffffffffc, 0x0)

[  414.737887][T20987] binder: 20983:20987 ioctl 40046207 0 returned -16
03:35:03 executing program 5:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, 0x0)
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)

03:35:03 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:03 executing program 0:
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)

03:35:03 executing program 1:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
unshare(0x40600)
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
r1 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(r0, r1)

03:35:03 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:03 executing program 5:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, 0x0)
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)

[  415.265734][T21034] binder: BINDER_SET_CONTEXT_MGR already set
[  415.306139][T21034] binder: 21022:21034 ioctl 40046207 0 returned -16
03:35:04 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:04 executing program 2:
socket$inet_udplite(0x2, 0x2, 0x88)
syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00')
lseek(0xffffffffffffffff, 0x7ffffffffffffffc, 0x0)

03:35:04 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:04 executing program 5:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000))
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)

03:35:04 executing program 1:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
unshare(0x40600)
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
r1 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(r0, r1)

03:35:04 executing program 2:
socket$inet_udplite(0x2, 0x2, 0x88)
syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00')
lseek(0xffffffffffffffff, 0x7ffffffffffffffc, 0x0)

03:35:04 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:04 executing program 1:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
unshare(0x40600)
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
r1 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(r0, r1)

03:35:04 executing program 0:
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)

03:35:04 executing program 5:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000))
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)

03:35:04 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000000, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:04 executing program 2:
socket$inet_udplite(0x2, 0x2, 0x88)
syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00')
lseek(0xffffffffffffffff, 0x7ffffffffffffffc, 0x0)

03:35:05 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:05 executing program 1:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(0x0, 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
unshare(0x40600)
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
r1 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(r0, r1)

03:35:05 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38000000, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:05 executing program 2:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00')
lseek(r0, 0x7ffffffffffffffc, 0x0)

03:35:05 executing program 5:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000))
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)

03:35:05 executing program 0:
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)

03:35:05 executing program 2:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00')
lseek(r0, 0x7ffffffffffffffc, 0x0)

03:35:05 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:05 executing program 5:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
writev(0xffffffffffffffff, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)

03:35:05 executing program 1:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(0x0, 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
unshare(0x40600)
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
r1 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(r0, r1)

03:35:05 executing program 2:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00')
lseek(r0, 0x7ffffffffffffffc, 0x0)

03:35:05 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:05 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:05 executing program 1:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(0x0, 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
unshare(0x40600)
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
r1 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(r0, r1)

03:35:05 executing program 2:
syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00')
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00')
lseek(r0, 0x7ffffffffffffffc, 0x0)

03:35:05 executing program 0:
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)

03:35:05 executing program 5:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
writev(0xffffffffffffffff, 0x0, 0x0)
creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)

03:35:05 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58000000, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:05 executing program 1:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0x0)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
unshare(0x40600)
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
r1 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(r0, r1)

03:35:05 executing program 5:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
writev(0xffffffffffffffff, 0x0, 0x0)
creat(0x0, 0x0)

03:35:05 executing program 2:
syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00')
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00')
lseek(r0, 0x7ffffffffffffffc, 0x0)

03:35:05 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:06 executing program 2:
syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00')
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00')
lseek(r0, 0x7ffffffffffffffc, 0x0)

03:35:06 executing program 5:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
writev(0xffffffffffffffff, 0x0, 0x0)
creat(0x0, 0x0)

03:35:06 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:06 executing program 1:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0x0)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
unshare(0x40600)
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
r1 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(r0, r1)

03:35:06 executing program 0:
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0x0)

03:35:06 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:06 executing program 5:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
writev(0xffffffffffffffff, 0x0, 0x0)
creat(0x0, 0x0)

03:35:06 executing program 2:
socket$inet_udplite(0x2, 0x2, 0x88)
syz_open_procfs(0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00')
lseek(r0, 0x7ffffffffffffffc, 0x0)

03:35:06 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:06 executing program 2:
socket$inet_udplite(0x2, 0x2, 0x88)
syz_open_procfs(0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00')
lseek(r0, 0x7ffffffffffffffc, 0x0)

03:35:06 executing program 1:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0x0)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
unshare(0x40600)
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
r1 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(r0, r1)

03:35:06 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0105ec7be070")
r1 = socket$inet(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f000021d000)={0x2, 0x4e21, @multicast1}, 0x10)
syz_emit_ethernet(0x36d, &(0x7f0000000240)={@local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x35f, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, @udp={0x0, 0x4e21, 0x34b}}}}}, 0x0)

03:35:06 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:06 executing program 2:
socket$inet_udplite(0x2, 0x2, 0x88)
syz_open_procfs(0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00')
lseek(r0, 0x7ffffffffffffffc, 0x0)

03:35:07 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:07 executing program 0:
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0x0)

03:35:07 executing program 1:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000027000)={0x1})
unshare(0x40600)
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
r1 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(r0, r1)

03:35:07 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:07 executing program 2:
socket$inet_udplite(0x2, 0x2, 0x88)
syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00')
r0 = syz_open_procfs(0x0, 0x0)
lseek(r0, 0x7ffffffffffffffc, 0x0)

03:35:07 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x800000000000f)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x1, 0x4)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ff7fffff}, 0xc)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'rose0\x00', 0x2})

[  418.532225][T21278] binder: BINDER_SET_CONTEXT_MGR already set
[  418.565149][T21278] binder: 21272:21278 ioctl 40046207 0 returned -16
03:35:07 executing program 2:
socket$inet_udplite(0x2, 0x2, 0x88)
syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00')
r0 = syz_open_procfs(0x0, 0x0)
lseek(r0, 0x7ffffffffffffffc, 0x0)

03:35:07 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:07 executing program 1:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000027000)={0x1})
unshare(0x40600)
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
r1 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(r0, r1)

03:35:07 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:07 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = creat(&(0x7f00000000c0)='./file1\x00', 0x0)
write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
fremovexattr(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='u'])
ftruncate(r1, 0x0)

03:35:07 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:07 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:07 executing program 0:
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0x0)

03:35:07 executing program 2:
socket$inet_udplite(0x2, 0x2, 0x88)
syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00')
r0 = syz_open_procfs(0x0, 0x0)
lseek(r0, 0x7ffffffffffffffc, 0x0)

03:35:07 executing program 1:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000027000)={0x1})
unshare(0x40600)
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
r1 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(r0, r1)

03:35:07 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:08 executing program 2:
socket$inet_udplite(0x2, 0x2, 0x88)
syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00')
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00')
lseek(0xffffffffffffffff, 0x7ffffffffffffffc, 0x0)

03:35:08 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:08 executing program 1:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x0, &(0x7f0000027000)={0x1})
unshare(0x40600)
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
r1 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(r0, r1)

03:35:08 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

[  419.492481][T21346] binder: BINDER_SET_CONTEXT_MGR already set
03:35:08 executing program 2:
socket$inet_udplite(0x2, 0x2, 0x88)
syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00')
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00')
lseek(0xffffffffffffffff, 0x7ffffffffffffffc, 0x0)

[  419.542544][T21346] binder: 21339:21346 ioctl 40046207 0 returned -16
03:35:08 executing program 5:
bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000002000)=ANY=[@ANYBLOB="f7000000ffffffe40f000000000000009500220000000000"], 0x0, 0x1, 0xc3, &(0x7f0000006f3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)

03:35:08 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:08 executing program 1:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x0, &(0x7f0000027000)={0x1})
unshare(0x40600)
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
r1 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(r0, r1)

03:35:08 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:08 executing program 2:
socket$inet_udplite(0x2, 0x2, 0x88)
syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00')
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00')
lseek(0xffffffffffffffff, 0x7ffffffffffffffc, 0x0)

03:35:08 executing program 0:
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x0)

[  419.899617][T21369] binder: BINDER_SET_CONTEXT_MGR already set
03:35:08 executing program 2:
socket$inet_udplite(0x2, 0x2, 0x88)
syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00')
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00')
lseek(r0, 0x0, 0x0)

03:35:08 executing program 5:

03:35:08 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  419.949563][T21369] binder: 21362:21369 ioctl 40046207 0 returned -16
03:35:08 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:08 executing program 1:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x0, &(0x7f0000027000)={0x1})
unshare(0x40600)
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
r1 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(r0, r1)

03:35:08 executing program 5:

03:35:09 executing program 2:
socket$inet_udplite(0x2, 0x2, 0x88)
syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00')
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00')
lseek(r0, 0x0, 0x0)

03:35:09 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:09 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:09 executing program 1:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, 0x0)
unshare(0x40600)
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
r1 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(r0, r1)

03:35:09 executing program 5:

03:35:09 executing program 0:

03:35:09 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:09 executing program 2:
socket$inet_udplite(0x2, 0x2, 0x88)
syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00')
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00')
lseek(r0, 0x0, 0x0)

03:35:09 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000000000000, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:09 executing program 0:

03:35:09 executing program 5:

03:35:09 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3800000000000000, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:09 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:09 executing program 2:

03:35:09 executing program 1:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, 0x0)
unshare(0x40600)
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
r1 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(r0, r1)

03:35:09 executing program 0:

03:35:09 executing program 5:

03:35:09 executing program 2:

03:35:09 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:09 executing program 0:

03:35:09 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:09 executing program 5:

03:35:10 executing program 2:

03:35:10 executing program 1:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, 0x0)
unshare(0x40600)
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
r1 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(r0, r1)

03:35:10 executing program 5:

03:35:10 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:10 executing program 0:

03:35:10 executing program 2:

03:35:10 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:10 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5800000000000000, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:10 executing program 5:

03:35:10 executing program 1:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000))
unshare(0x40600)
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
r1 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(r0, r1)

03:35:10 executing program 0:

03:35:10 executing program 2:

03:35:10 executing program 5:

03:35:10 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0), 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:10 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:10 executing program 2:

03:35:10 executing program 0:

03:35:10 executing program 5:

03:35:10 executing program 1:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000))
unshare(0x40600)
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
r1 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(r0, r1)

03:35:10 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0), 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:10 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:10 executing program 2:

03:35:10 executing program 0:

03:35:10 executing program 5:

03:35:11 executing program 2:

03:35:11 executing program 0:

03:35:11 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:11 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0), 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:11 executing program 5:

03:35:11 executing program 1:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000))
unshare(0x40600)
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
r1 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(r0, r1)

03:35:11 executing program 0:

03:35:11 executing program 2:

03:35:11 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:11 executing program 5:

03:35:11 executing program 0:

03:35:11 executing program 2:

03:35:11 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[]}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

[  422.803545][T21543] binder: BINDER_SET_CONTEXT_MGR already set
03:35:11 executing program 1:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
unshare(0x0)
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
r1 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(r0, r1)

03:35:11 executing program 5:

[  422.854109][T21543] binder: 21540:21543 ioctl 40046207 0 returned -16
03:35:11 executing program 0:

03:35:11 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:11 executing program 2:

03:35:11 executing program 5:

03:35:11 executing program 0:

03:35:11 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[]}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:12 executing program 1:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
unshare(0x0)
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
r1 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(r0, r1)

03:35:12 executing program 5:

03:35:12 executing program 2:

03:35:12 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:12 executing program 0:

03:35:12 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[]}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:12 executing program 5:

03:35:12 executing program 2:

03:35:12 executing program 0:

03:35:12 executing program 1:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
unshare(0x0)
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
r1 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(r0, r1)

03:35:12 executing program 5:

03:35:12 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB]}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:12 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:12 executing program 2:

03:35:12 executing program 0:

03:35:12 executing program 5:

03:35:12 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:12 executing program 1:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
unshare(0x40600)
writev(0xffffffffffffffff, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
r1 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(r0, r1)

03:35:12 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB]}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:12 executing program 0:

03:35:12 executing program 2:

03:35:12 executing program 5:

[  424.150990][T21616] binder: BINDER_SET_CONTEXT_MGR already set
03:35:13 executing program 2:

03:35:13 executing program 0:

[  424.215152][T21616] binder: 21606:21616 ioctl 40046207 0 returned -16
03:35:13 executing program 5:

03:35:13 executing program 1:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
unshare(0x40600)
writev(0xffffffffffffffff, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
r1 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(r0, r1)

03:35:13 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB]}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:13 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:13 executing program 2:

03:35:13 executing program 5:

03:35:13 executing program 0:

03:35:13 executing program 2:

03:35:13 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff0000002000000000000000"], 0x40}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:13 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000248, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:13 executing program 1:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
unshare(0x40600)
writev(0xffffffffffffffff, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
r1 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(r0, r1)

03:35:13 executing program 5:

03:35:13 executing program 2:

[  424.758773][T21648] binder_alloc: 21646: binder_alloc_buf size 536871552 failed, no address space
03:35:13 executing program 0:

03:35:13 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff0000002000000000000000"], 0x40}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

[  424.821101][T21648] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  424.920875][T21656] binder_alloc: 21646: binder_alloc_buf size 536871552 failed, no address space
03:35:13 executing program 5:

03:35:13 executing program 2:

[  424.962811][T21656] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
03:35:13 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x20000278, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:13 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff0000002000000000000000"], 0x40}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:13 executing program 0:

03:35:13 executing program 5:

03:35:14 executing program 1:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
unshare(0x40600)
writev(r0, 0x0, 0x0)
r1 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(r0, r1)

[  425.179616][T21668] binder_alloc: 21667: binder_alloc_buf size 536871616 failed, no address space
03:35:14 executing program 2:
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x638, 0x8083)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000180)={0x0, 0x0, 0x10000001002, 0x0, [0xfffffffe]})
close(r0)

03:35:14 executing program 5:
r0 = gettid()
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'bcsh0\x00', 0xd806})
r2 = socket$nl_route(0x10, 0x3, 0x0)
readv(r1, &(0x7f0000000000)=[{&(0x7f0000000540)=""/117, 0x75}], 0x1)
dup3(r2, r1, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00'/12], 0x1}}, 0x0)
timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x16)

[  425.241828][T21668] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  425.277024][T21675] binder_alloc: 21667: binder_alloc_buf size 536871616 failed, no address space
[  425.326142][T21675] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
03:35:14 executing program 0:
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0x0, r0, 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x200, &(0x7f00000000c0)=0x2f1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)

03:35:14 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:14 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbb"], 0x60}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:14 executing program 1:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
unshare(0x40600)
writev(r0, 0x0, 0x0)
r1 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(r0, r1)

03:35:14 executing program 2:
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0)
ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\r\xff', @ifru_names='bond_slave_1\x00'})
ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\n\x00\n\x06!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'})

03:35:14 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66646185}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:14 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbb"], 0x60}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:14 executing program 0:
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0x0, r0, 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x200, &(0x7f00000000c0)=0x2f1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)

[  425.773447][   T26] audit: type=1400 audit(2000000114.549:64): avc:  denied  { ioctl } for  pid=21703 comm="syz-executor.2" path="socket:[66362]" dev="sockfs" ino=66362 ioctlcmd=0x8991 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1
03:35:14 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbb"], 0x60}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:14 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x70742a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:14 executing program 1:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
unshare(0x40600)
writev(r0, 0x0, 0x0)
r1 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(r0, r1)

[  425.878518][T21706] bond0: Releasing backup interface bond_slave_1
[  426.276412][T21714] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  426.305160][T21732] bond0: Releasing backup interface bond_slave_1
03:35:15 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='veth0_to_team\x00', 0x28b)
r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0)
pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003)
sendfile(r0, r1, 0x0, 0x102000002)

03:35:15 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73682a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:15 executing program 1:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
unshare(0x40600)
writev(r0, &(0x7f00009adf60), 0x0)
r1 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(r0, r1)

03:35:15 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf0000000000000000300050000000000"], 0x70}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:15 executing program 2:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000040))

03:35:15 executing program 0:

[  426.507973][T21740] binder: BINDER_SET_CONTEXT_MGR already set
[  426.530373][T21740] binder: 21733:21740 ioctl 40046207 0 returned -16
03:35:15 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:15 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf0000000000000000300050000000000"], 0x70}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:15 executing program 1:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
unshare(0x40600)
writev(r0, &(0x7f00009adf60), 0x0)
r1 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(r0, r1)

03:35:15 executing program 2:

03:35:15 executing program 0:

03:35:15 executing program 5:

03:35:15 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77682a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:15 executing program 0:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x50000}]})
r0 = openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$P9_RVERSION(r0, 0x0, 0x0)

03:35:15 executing program 1:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
unshare(0x40600)
writev(r0, &(0x7f00009adf60), 0x0)
r1 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(r0, r1)

03:35:15 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf0000000000000000300050000000000"], 0x70}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:15 executing program 5:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]})
r0 = accept$unix(0xffffffffffffffff, 0x0, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, 0x0, 0x0)

03:35:15 executing program 2:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000a80))

03:35:15 executing program 2:

03:35:15 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7"], 0x78}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:16 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x2}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:16 executing program 1:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
unshare(0x40600)
writev(r0, &(0x7f00009adf60)=[{0x0}], 0x1)
r1 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(r0, r1)

03:35:16 executing program 5:

03:35:16 executing program 0:

03:35:16 executing program 2:

03:35:16 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7"], 0x78}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:16 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x3}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:16 executing program 0:

03:35:16 executing program 1:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
unshare(0x40600)
writev(r0, &(0x7f00009adf60)=[{0x0}], 0x1)
r1 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(r0, r1)

03:35:16 executing program 5:

03:35:16 executing program 0:

03:35:16 executing program 2:

03:35:16 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x4}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:16 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7"], 0x78}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:16 executing program 5:

03:35:16 executing program 1:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
unshare(0x40600)
writev(r0, &(0x7f00009adf60)=[{0x0}], 0x1)
r1 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(r0, r1)

03:35:16 executing program 0:

03:35:16 executing program 2:

[  427.956753][T21821] binder: BINDER_SET_CONTEXT_MGR already set
03:35:16 executing program 5:

[  428.027446][T21821] binder: 21820:21821 ioctl 40046207 0 returned -16
03:35:16 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000"], 0x7c}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:16 executing program 0:

03:35:16 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x5}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:17 executing program 2:

03:35:17 executing program 5:

03:35:17 executing program 0:

03:35:17 executing program 1:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
unshare(0x40600)
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)}], 0x1)
r1 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(r0, r1)

03:35:17 executing program 2:

03:35:17 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000"], 0x7c}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:17 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x6}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:17 executing program 5:

03:35:17 executing program 0:

03:35:17 executing program 2:

03:35:17 executing program 1:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
unshare(0x40600)
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)}], 0x1)
r1 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(r0, r1)

03:35:17 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000"], 0x7c}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:17 executing program 0:

03:35:17 executing program 2:

03:35:17 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x7}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:17 executing program 5:

03:35:17 executing program 0:

03:35:17 executing program 2:

03:35:17 executing program 5:

03:35:17 executing program 1:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
unshare(0x40600)
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)}], 0x1)
r1 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(r0, r1)

03:35:17 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b82000000000"], 0x7e}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:17 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x12}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:17 executing program 0:

03:35:18 executing program 2:

03:35:18 executing program 1:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
unshare(0x40600)
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
r1 = creat(0x0, 0x0)
dup2(r0, r1)

03:35:18 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b82000000000"], 0x7e}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:18 executing program 5:

03:35:18 executing program 0:

03:35:18 executing program 2:

03:35:18 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x30}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:18 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b82000000000"], 0x7e}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:18 executing program 2:

03:35:18 executing program 5:

03:35:18 executing program 0:

03:35:18 executing program 0:

03:35:18 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000"], 0x7f}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:19 executing program 1:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
unshare(0x40600)
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
r1 = creat(0x0, 0x0)
dup2(r0, r1)

03:35:19 executing program 2:

03:35:19 executing program 5:

03:35:19 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x38}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:19 executing program 0:

03:35:19 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000"], 0x7f}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:19 executing program 2:

03:35:19 executing program 0:

03:35:19 executing program 5:

03:35:19 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x48}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:19 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000"], 0x7f}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:19 executing program 5:

03:35:19 executing program 1:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
unshare(0x40600)
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
r1 = creat(0x0, 0x0)
dup2(r0, r1)

03:35:19 executing program 0:

03:35:19 executing program 2:

03:35:19 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x58}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:19 executing program 5:

03:35:19 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
socket$key(0xf, 0x3, 0x2)
sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:20 executing program 0:

03:35:20 executing program 2:

03:35:20 executing program 5:

03:35:20 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
socket$key(0xf, 0x3, 0x2)
sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:20 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x68}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:20 executing program 0:

03:35:20 executing program 1:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
unshare(0x40600)
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
r1 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(0xffffffffffffffff, r1)

03:35:20 executing program 2:

03:35:20 executing program 5:

03:35:20 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x300}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:20 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
socket$key(0xf, 0x3, 0x2)
sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:20 executing program 0:

03:35:21 executing program 5:

03:35:21 executing program 2:

[  432.227889][T21997] binder: BINDER_SET_CONTEXT_MGR already set
[  432.250741][T21997] binder: 21991:21997 ioctl 40046207 0 returned -16
03:35:21 executing program 0:

03:35:21 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, 0x0, 0x0, 0x0)

03:35:21 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x500}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:21 executing program 5:

03:35:21 executing program 1:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
unshare(0x40600)
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
r1 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(0xffffffffffffffff, r1)

03:35:21 executing program 0:

03:35:21 executing program 2:

03:35:21 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, 0x0, 0x0, 0x0)

03:35:21 executing program 5:

03:35:21 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x600}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:22 executing program 0:

03:35:22 executing program 5:

03:35:22 executing program 2:

[  433.208861][T22026] binder: BINDER_SET_CONTEXT_MGR already set
[  433.233109][T22027] binder_alloc: 22023: binder_alloc_buf, no vma
03:35:22 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, 0x0, 0x0, 0x0)

[  433.305545][T22026] binder: 22023:22026 ioctl 40046207 0 returned -16
03:35:22 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x700}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:22 executing program 0:

[  433.524208][T22044] binder: BINDER_SET_CONTEXT_MGR already set
[  433.546392][T22044] binder: 22041:22044 ioctl 40046207 0 returned -16
[  433.565219][T22045] binder_alloc: 22041: binder_alloc_buf, no vma
03:35:22 executing program 1:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
unshare(0x40600)
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
r1 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(0xffffffffffffffff, r1)

03:35:22 executing program 2:

03:35:22 executing program 5:

03:35:22 executing program 3:

03:35:22 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x1200}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:22 executing program 0:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={<r1=>0x0}, &(0x7f0000000080)=0xc)
getpriority(0x2, r1)

03:35:22 executing program 5:
r0 = socket(0x2, 0x3, 0x100000001)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)

03:35:22 executing program 2:
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@hoplimit_2292={{0x14}}], 0x18}, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ipv6_route\x00')
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1)
readv(r0, &(0x7f0000000580), 0x3c1)

03:35:22 executing program 3:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
clone(0x3102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3d)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xa7})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)
fchdir(0xffffffffffffffff)

03:35:23 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:23 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x3000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:23 executing program 5:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
unshare(0x40600)
writev(r0, 0x0, 0x0)
r1 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(r0, r1)

[  434.380673][T22080] binder: BINDER_SET_CONTEXT_MGR already set
[  434.405121][T22080] binder: 22072:22080 ioctl 40046207 0 returned -16
[  434.449437][T22080] binder: BINDER_SET_CONTEXT_MGR already set
[  434.462850][T22080] binder: 22072:22080 ioctl 40046207 0 returned -16
03:35:23 executing program 1:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
unshare(0x40600)
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(r0, 0xffffffffffffffff)

03:35:23 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x70742a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:23 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:23 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:23 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x3800}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:23 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:23 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x4000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  435.079642][T22094] binder: BINDER_SET_CONTEXT_MGR already set
[  435.109143][T22095] binder: BINDER_SET_CONTEXT_MGR already set
[  435.117000][T22094] binder: 22093:22094 ioctl 40046207 0 returned -16
[  435.134764][T22098] binder: BINDER_SET_CONTEXT_MGR already set
[  435.149154][T22095] binder: 22091:22095 ioctl 40046207 0 returned -16
[  435.156829][T22096] binder: BINDER_SET_CONTEXT_MGR already set
[  435.163536][T22098] binder: 22089:22098 ioctl 40046207 0 returned -16
[  435.181832][T22096] binder: 22090:22096 ioctl 40046207 0 returned -16
03:35:24 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:24 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:24 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:24 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:24 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x4800}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  435.435685][T22119] binder: BINDER_SET_CONTEXT_MGR already set
[  435.468847][T22119] binder: 22114:22119 ioctl 40046207 0 returned -16
[  435.477165][T22122] binder: BINDER_SET_CONTEXT_MGR already set
[  435.491656][T22122] binder: 22118:22122 ioctl 40046207 0 returned -16
[  435.519787][T22124] binder: BINDER_SET_CONTEXT_MGR already set
[  435.534080][T22124] binder: 22121:22124 ioctl 40046207 0 returned -16
03:35:24 executing program 1:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
unshare(0x40600)
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(r0, 0xffffffffffffffff)

03:35:24 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:24 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x5800}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:24 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:24 executing program 2:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:24 executing program 5:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:24 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  435.985357][T22143] binder: BINDER_SET_CONTEXT_MGR already set
[  436.007547][T22143] binder: 22136:22143 ioctl 40046207 0 returned -16
03:35:24 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  436.060296][T22143] binder: BINDER_SET_CONTEXT_MGR already set
[  436.079867][T22143] binder: 22136:22143 ioctl 40046207 0 returned -16
[  436.099951][T22149] binder_alloc: 22135: binder_alloc_buf, no vma
03:35:24 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:25 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x6800}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:25 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:25 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:25 executing program 1:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
unshare(0x40600)
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(r0, 0xffffffffffffffff)

03:35:25 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x1000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:25 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:25 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:25 executing program 2:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:25 executing program 5:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:25 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:25 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:25 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x2000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:25 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:25 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:26 executing program 0:
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:26 executing program 2:
perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:26 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x3000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:26 executing program 1:
perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:26 executing program 0:
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:26 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:26 executing program 5:
perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:26 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:26 executing program 0:
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:26 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x4000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:26 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:26 executing program 0:
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  438.103663][T22276] binder: BINDER_SET_CONTEXT_MGR already set
[  438.131182][T22276] binder: 22270:22276 ioctl 40046207 0 returned -16
03:35:27 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x5000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:27 executing program 2:
perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:27 executing program 3:
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:27 executing program 0:
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:27 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x6000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:27 executing program 1:
perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:27 executing program 5:
perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:27 executing program 3:
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:27 executing program 0:
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:27 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x7000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:27 executing program 3:
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  438.922828][T22339] binder: BINDER_SET_CONTEXT_MGR already set
[  438.941043][T22339] binder: 22333:22339 ioctl 40046207 0 returned -16
03:35:27 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:27 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x12000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:28 executing program 2:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:28 executing program 3:
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:28 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:28 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x30000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:28 executing program 1:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:28 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x7000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  439.522390][T22379] binder: BINDER_SET_CONTEXT_MGR already set
03:35:28 executing program 3:
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:28 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  439.564634][T22383] binder: BINDER_SET_CONTEXT_MGR already set
[  439.570838][T22383] binder: 22382:22383 ioctl 40046207 0 returned -16
[  439.595711][T22379] binder: 22377:22379 ioctl 40046207 0 returned -16
03:35:28 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x38000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:28 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:28 executing program 3:
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:28 executing program 0:
syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:29 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:29 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x40000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:29 executing program 3:
syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:29 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:29 executing program 1:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:29 executing program 0:
syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:29 executing program 0:
syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:29 executing program 3:
syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:29 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x48000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:29 executing program 3:
syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:29 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[  440.625423][T22470] binder: BINDER_SET_CONTEXT_MGR already set
[  440.659511][T22470] binder: 22465:22470 ioctl 40046207 0 returned -16
03:35:29 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[  440.724106][T22480] binder: 22475:22480 ioctl c0306201 0 returned -14
[  440.853155][T22487] binder: 22485:22487 ioctl c0306201 0 returned -14
03:35:29 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:29 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x58000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:29 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

03:35:29 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:29 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

03:35:29 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

[  441.071929][T22502] binder: 22498:22502 ioctl c0306201 0 returned -14
03:35:29 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x68000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  441.153167][T22508] binder: 22507:22508 ioctl c0306201 0 returned -14
03:35:30 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

03:35:30 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[  441.278313][T22520] binder: BINDER_SET_CONTEXT_MGR already set
03:35:30 executing program 5:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
unshare(0x40600)
writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1)
r1 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0)
dup2(r0, r1)

[  441.325622][T22520] binder: 22516:22520 ioctl 40046207 0 returned -16
[  441.373007][T22526] binder: 22525:22526 ioctl c0306201 0 returned -14
[  441.388103][T22529] binder_alloc: 22516: binder_alloc_buf, no vma
[  441.403925][T22531] binder: 22530:22531 ioctl c0306201 0 returned -14
03:35:30 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0xfdfdffff}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:30 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

03:35:30 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:30 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

03:35:30 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

03:35:30 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0xfffffdfd}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:30 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x500000000000000, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:30 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

03:35:30 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

03:35:30 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  441.883052][T22562] binder: BINDER_SET_CONTEXT_MGR already set
[  441.906937][T22562] binder: 22560:22562 ioctl 40046207 0 returned -16
03:35:30 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x100000000000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:30 executing program 5:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x1000000})

03:35:30 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})

03:35:31 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x200000000000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:31 executing program 2:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)

03:35:31 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

03:35:31 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:31 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})

03:35:31 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x300000000000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:31 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  442.617476][T22621] binder: BINDER_SET_CONTEXT_MGR already set
03:35:31 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})

03:35:31 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})

[  442.676308][T22621] binder: 22618:22621 ioctl 40046207 0 returned -16
03:35:31 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:31 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x400000000000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:31 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x3000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:31 executing program 2:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)

03:35:31 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0})

[  442.879532][T22640] binder: BINDER_SET_CONTEXT_MGR already set
[  442.905080][T22640] binder: 22635:22640 ioctl 40046207 0 returned -16
03:35:31 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})

03:35:31 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  443.025624][T22649] binder: BINDER_SET_CONTEXT_MGR already set
[  443.049905][T22649] binder: 22647:22649 ioctl 40046207 0 returned -16
03:35:31 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0})

03:35:31 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x500000000000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:31 executing program 2:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)

03:35:31 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})

03:35:32 executing program 1:
r0 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff)
ioctl$NBD_CLEAR_SOCK(r0, 0x40086602)

03:35:32 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x3000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:32 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x600000000000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:32 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:32 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0})

03:35:32 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0})

03:35:32 executing program 2:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x10000, 0x0)

[  443.504758][T22680] binder: BINDER_SET_CONTEXT_MGR already set
03:35:32 executing program 5:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, r0)
ioctl$NBD_CLEAR_SOCK(r1, 0xab08)
r3 = dup(r1)
ioctl$TCSETXW(r3, 0x5435, &(0x7f0000000000)={0x7ff, 0x1, [0x80, 0xd4, 0xc763, 0x4, 0x100000000]})

[  443.556875][T22680] binder: 22677:22680 ioctl 40046207 0 returned -16
[  443.565907][T22685] binder: BINDER_SET_CONTEXT_MGR already set
[  443.596408][T22685] binder: 22679:22685 ioctl 40046207 0 returned -16
[  443.603953][T22684] binder_alloc: 22673: binder_alloc_buf, no vma
03:35:32 executing program 2:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x10000, 0x0)

03:35:32 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, 0x0}}], 0x0, 0x0, 0x0})

03:35:32 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x700000000000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:32 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:32 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0})

[  443.716894][T22694] block nbd0: NBD_DISCONNECT
[  443.729311][T22694] block nbd0: Send disconnect failed -6
[  443.738461][T22694] block nbd0: Send disconnect failed -6
[  443.830963][T22693] block nbd0: Disconnected due to user request.
[  443.868616][T22693] block nbd0: shutting down sockets
03:35:32 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, 0x0}}], 0x0, 0x0, 0x0})

03:35:32 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0})

03:35:32 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x1200000000000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:32 executing program 2:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x10000, 0x0)

[  443.899570][T22706] binder: BINDER_SET_CONTEXT_MGR already set
[  443.935038][T22706] binder: 22705:22706 ioctl 40046207 0 returned -16
03:35:32 executing program 5:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, r0)
ioctl$NBD_CLEAR_SOCK(r1, 0xab08)
r3 = dup(r1)
ioctl$TCSETXW(r3, 0x5435, &(0x7f0000000000)={0x7ff, 0x1, [0x80, 0xd4, 0xc763, 0x4, 0x100000000]})

03:35:32 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:32 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, 0x0}}], 0x0, 0x0, 0x0})

03:35:32 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x3000000000000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:32 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, 0x0}}], 0x0, 0x0, 0x0})

03:35:33 executing program 2:
unshare(0x600)
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r0, 0xffffffffffffffff, 0x10000, 0x0)

03:35:33 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

[  444.310210][T22726] block nbd0: NBD_DISCONNECT
[  444.372025][T22726] block nbd0: Send disconnect failed -6
[  444.411758][T22726] block nbd0: Send disconnect failed -6
03:35:33 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x3800000000000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:33 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, 0x0}}], 0x0, 0x0, 0x0})

03:35:33 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

03:35:33 executing program 0:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105512, &(0x7f0000000040)={0x0, 0xfffffffffffffffe})

[  444.474311][T22724] block nbd0: Disconnected due to user request.
[  444.497129][T22724] block nbd0: shutting down sockets
03:35:33 executing program 2:
unshare(0x600)
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r0, 0xffffffffffffffff, 0x10000, 0x0)

[  444.595714][T22748] binder: BINDER_SET_CONTEXT_MGR already set
03:35:33 executing program 5:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, r0)
ioctl$NBD_CLEAR_SOCK(r1, 0xab08)
r3 = dup(r1)
ioctl$TCSETXW(r3, 0x5435, &(0x7f0000000000)={0x7ff, 0x1, [0x80, 0xd4, 0xc763, 0x4, 0x100000000]})

03:35:33 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, 0x0}}], 0x0, 0x0, 0x0})

03:35:33 executing program 2:
unshare(0x600)
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r0, 0xffffffffffffffff, 0x10000, 0x0)

[  444.687441][T22748] binder: 22745:22748 ioctl 40046207 0 returned -16
03:35:33 executing program 0:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0x8108551b, &(0x7f0000000040)={0x0, 0xfffffffffffffffe})

03:35:33 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x4000000000000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:33 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

[  444.863296][T22761] block nbd0: NBD_DISCONNECT
[  444.900343][T22761] block nbd0: Send disconnect failed -6
[  444.928867][T22761] block nbd0: Send disconnect failed -6
03:35:33 executing program 3:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x10000, 0x0)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000140)={<r1=>0x0, 0x6, 0xaa3}, &(0x7f0000000180)=0x8)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={r1, 0x2}, &(0x7f0000000200)=0x8)
r2 = socket$unix(0x1, 0x1, 0x0)
linkat(r0, &(0x7f0000000240)='./file0/file0\x00', r0, &(0x7f0000000280)='./file0\x00', 0x1000)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)={0x30, @tick=0x9, 0x80000000, {0x7, 0x4}, 0x80000000, 0x3, 0x600000000000000})
setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000340)=0xffc0000000000000, 0x2)
bind$unix(r2, &(0x7f0000000000)=@abs={0x1}, 0x6e)
bind$unix(r2, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e)

03:35:33 executing program 0 (fault-call:2 fault-nth:0):
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  444.966499][T22759] block nbd0: Disconnected due to user request.
[  445.000405][T22759] block nbd0: shutting down sockets
03:35:33 executing program 1:
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

03:35:33 executing program 2:
unshare(0x600)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r0, 0xffffffffffffffff, 0x10000, 0x0)

03:35:33 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x4800000000000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:33 executing program 5:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, r0)
ioctl$NBD_CLEAR_SOCK(r1, 0xab08)
dup(r1)

[  445.177942][T22786] FAULT_INJECTION: forcing a failure.
[  445.177942][T22786] name failslab, interval 1, probability 0, space 0, times 0
03:35:34 executing program 1:
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

03:35:34 executing program 3 (fault-call:2 fault-nth:0):
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  445.317680][T22792] block nbd0: NBD_DISCONNECT
[  445.334093][T22792] block nbd0: Send disconnect failed -6
[  445.354276][T22786] CPU: 1 PID: 22786 Comm: syz-executor.0 Not tainted 5.2.0-rc5 #28
[  445.360562][T22791] block nbd0: Disconnected due to user request.
[  445.362666][T22786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  445.362674][T22786] Call Trace:
[  445.362706][T22786]  dump_stack+0x172/0x1f0
[  445.362735][T22786]  should_fail.cold+0xa/0x15
[  445.362772][T22786]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  445.362799][T22786]  ? ___might_sleep+0x163/0x280
[  445.362825][T22786]  __should_failslab+0x121/0x190
[  445.362848][T22786]  should_failslab+0x9/0x14
[  445.362862][T22786]  __kmalloc+0x2d9/0x740
[  445.362882][T22786]  ? tomoyo_realpath_from_path+0xc0/0x7a0
[  445.362902][T22786]  ? rcu_read_lock_sched_held+0x110/0x130
[  445.362915][T22786]  ? tomoyo_realpath_from_path+0xcd/0x7a0
[  445.362934][T22786]  tomoyo_realpath_from_path+0xcd/0x7a0
[  445.362957][T22786]  ? tomoyo_path_number_perm+0x193/0x520
[  445.379286][T22786]  tomoyo_path_number_perm+0x1dd/0x520
[  445.385080][T22791] block nbd0: shutting down sockets
[  445.386921][T22786]  ? tomoyo_path_number_perm+0x193/0x520
[  445.386943][T22786]  ? tomoyo_execute_permission+0x4a0/0x4a0
[  445.386959][T22786]  ? __f_unlock_pos+0x19/0x20
[  445.386984][T22786]  ? ___might_sleep+0x163/0x280
[  445.397404][T22786]  ? selinux_file_mprotect+0x620/0x620
[  445.397420][T22786]  ? __fget+0x381/0x550
[  445.397439][T22786]  ? ksys_dup3+0x3e0/0x3e0
[  445.397457][T22786]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  445.397478][T22786]  ? fput_many+0x12c/0x1a0
[  445.468076][T22803] FAULT_INJECTION: forcing a failure.
[  445.468076][T22803] name failslab, interval 1, probability 0, space 0, times 0
[  445.471197][T22786]  tomoyo_file_ioctl+0x23/0x30
[  445.471214][T22786]  security_file_ioctl+0x77/0xc0
[  445.471234][T22786]  ksys_ioctl+0x57/0xd0
[  445.471251][T22786]  __x64_sys_ioctl+0x73/0xb0
[  445.471270][T22786]  do_syscall_64+0xfd/0x680
[  445.471292][T22786]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  445.471303][T22786] RIP: 0033:0x4592c9
[  445.471318][T22786] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  445.471335][T22786] RSP: 002b:00007fedd40c6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  445.574412][T22786] RAX: ffffffffffffffda RBX: 00007fedd40c6c90 RCX: 00000000004592c9
[  445.582407][T22786] RDX: 0000000020000440 RSI: 00000000c0306201 RDI: 0000000000000003
[  445.590381][T22786] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  445.598354][T22786] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fedd40c76d4
[  445.606397][T22786] R13: 00000000004c078e R14: 00000000004d3248 R15: 0000000000000005
[  445.615940][T22803] CPU: 0 PID: 22803 Comm: syz-executor.3 Not tainted 5.2.0-rc5 #28
[  445.623859][T22803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  445.633924][T22803] Call Trace:
[  445.637235][T22803]  dump_stack+0x172/0x1f0
[  445.641599][T22803]  should_fail.cold+0xa/0x15
[  445.643567][T22786] ERROR: Out of memory at tomoyo_realpath_from_path.
[  445.646198][T22803]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  445.646223][T22803]  ? ___might_sleep+0x163/0x280
[  445.646247][T22803]  __should_failslab+0x121/0x190
03:35:34 executing program 1:
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

[  445.668509][T22803]  should_failslab+0x9/0x14
[  445.673021][T22803]  __kmalloc+0x2d9/0x740
[  445.677279][T22803]  ? tomoyo_realpath_from_path+0xc0/0x7a0
[  445.683020][T22803]  ? rcu_read_lock_sched_held+0x110/0x130
[  445.688753][T22803]  ? tomoyo_realpath_from_path+0xcd/0x7a0
[  445.694510][T22803]  tomoyo_realpath_from_path+0xcd/0x7a0
[  445.700083][T22803]  ? tomoyo_path_number_perm+0x193/0x520
[  445.705739][T22803]  tomoyo_path_number_perm+0x1dd/0x520
[  445.711567][T22803]  ? tomoyo_path_number_perm+0x193/0x520
[  445.717245][T22803]  ? tomoyo_execute_permission+0x4a0/0x4a0
[  445.723068][T22803]  ? __f_unlock_pos+0x19/0x20
[  445.723094][T22803]  ? ___might_sleep+0x163/0x280
[  445.723128][T22803]  ? selinux_file_mprotect+0x620/0x620
[  445.723139][T22803]  ? __fget+0x381/0x550
[  445.723159][T22803]  ? ksys_dup3+0x3e0/0x3e0
[  445.723176][T22803]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  445.723192][T22803]  ? fput_many+0x12c/0x1a0
[  445.723214][T22803]  tomoyo_file_ioctl+0x23/0x30
[  445.732817][T22803]  security_file_ioctl+0x77/0xc0
[  445.732836][T22803]  ksys_ioctl+0x57/0xd0
[  445.732852][T22803]  __x64_sys_ioctl+0x73/0xb0
[  445.732872][T22803]  do_syscall_64+0xfd/0x680
[  445.732893][T22803]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  445.732905][T22803] RIP: 0033:0x4592c9
[  445.732922][T22803] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  445.732931][T22803] RSP: 002b:00007f13bd665c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
03:35:34 executing program 1:
r0 = syz_open_dev$usb(0x0, 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

03:35:34 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x5800000000000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:34 executing program 0 (fault-call:2 fault-nth:1):
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  445.732945][T22803] RAX: ffffffffffffffda RBX: 00007f13bd665c90 RCX: 00000000004592c9
[  445.732954][T22803] RDX: 0000000020000440 RSI: 00000000c0306201 RDI: 0000000000000003
[  445.732962][T22803] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  445.732978][T22803] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f13bd6666d4
[  445.850924][T22803] R13: 00000000004c078e R14: 00000000004d3248 R15: 0000000000000004
03:35:34 executing program 2:
unshare(0x600)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r0, 0xffffffffffffffff, 0x10000, 0x0)

[  445.895881][T22803] ERROR: Out of memory at tomoyo_realpath_from_path.
03:35:34 executing program 5:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, r0)
ioctl$NBD_CLEAR_SOCK(r1, 0xab08)
dup(r1)

[  445.993943][T22814] FAULT_INJECTION: forcing a failure.
[  445.993943][T22814] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  446.007211][T22814] CPU: 0 PID: 22814 Comm: syz-executor.0 Not tainted 5.2.0-rc5 #28
[  446.015174][T22814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  446.025248][T22814] Call Trace:
[  446.028582][T22814]  dump_stack+0x172/0x1f0
[  446.032948][T22814]  should_fail.cold+0xa/0x15
[  446.032975][T22814]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  446.033010][T22814]  should_fail_alloc_page+0x50/0x60
[  446.033031][T22814]  __alloc_pages_nodemask+0x1a1/0x8d0
[  446.048741][T22814]  ? __lock_acquire+0x54f/0x5490
[  446.059179][T22814]  ? __alloc_pages_slowpath+0x28f0/0x28f0
[  446.064926][T22814]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  446.070759][T22814]  cache_grow_begin+0x9d/0x650
[  446.075543][T22814]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  446.081810][T22814]  __kmalloc+0x67c/0x740
[  446.086085][T22814]  ? tomoyo_realpath_from_path+0xcd/0x7a0
[  446.091914][T22814]  tomoyo_realpath_from_path+0xcd/0x7a0
[  446.097497][T22814]  ? tomoyo_path_number_perm+0x193/0x520
[  446.103156][T22814]  tomoyo_path_number_perm+0x1dd/0x520
[  446.108627][T22814]  ? tomoyo_path_number_perm+0x193/0x520
[  446.114288][T22814]  ? tomoyo_execute_permission+0x4a0/0x4a0
[  446.120193][T22814]  ? __f_unlock_pos+0x19/0x20
[  446.124913][T22814]  ? ___might_sleep+0x163/0x280
[  446.129799][T22814]  ? selinux_file_mprotect+0x620/0x620
[  446.135402][T22814]  ? __fget+0x381/0x550
[  446.139866][T22814]  ? ksys_dup3+0x3e0/0x3e0
[  446.140779][T22820] block nbd0: NBD_DISCONNECT
[  446.145094][T22814]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  446.145112][T22814]  ? fput_many+0x12c/0x1a0
[  446.145133][T22814]  tomoyo_file_ioctl+0x23/0x30
[  446.145148][T22814]  security_file_ioctl+0x77/0xc0
[  446.145165][T22814]  ksys_ioctl+0x57/0xd0
[  446.145180][T22814]  __x64_sys_ioctl+0x73/0xb0
[  446.145199][T22814]  do_syscall_64+0xfd/0x680
[  446.145221][T22814]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  446.145233][T22814] RIP: 0033:0x4592c9
[  446.145264][T22814] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  446.158562][T22820] block nbd0: Send disconnect failed -6
[  446.161187][T22814] RSP: 002b:00007fedd40c6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  446.161203][T22814] RAX: ffffffffffffffda RBX: 00007fedd40c6c90 RCX: 00000000004592c9
[  446.161211][T22814] RDX: 0000000020000440 RSI: 00000000c0306201 RDI: 0000000000000003
03:35:35 executing program 0 (fault-call:2 fault-nth:2):
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:35 executing program 1:
r0 = syz_open_dev$usb(0x0, 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

03:35:35 executing program 3 (fault-call:2 fault-nth:1):
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:35 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x6800000000000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  446.161219][T22814] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  446.161236][T22814] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fedd40c76d4
[  446.182602][T22820] block nbd0: Send disconnect failed -6
[  446.184531][T22814] R13: 00000000004c078e R14: 00000000004d3248 R15: 0000000000000005
[  446.300642][T22819] block nbd0: Disconnected due to user request.
[  446.322452][T22819] block nbd0: shutting down sockets
[  446.323807][T22825] FAULT_INJECTION: forcing a failure.
[  446.323807][T22825] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  446.341198][T22825] CPU: 1 PID: 22825 Comm: syz-executor.3 Not tainted 5.2.0-rc5 #28
[  446.341209][T22825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  446.341214][T22825] Call Trace:
[  446.341247][T22825]  dump_stack+0x172/0x1f0
[  446.359234][T22825]  should_fail.cold+0xa/0x15
[  446.366849][T22825]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  446.366880][T22825]  should_fail_alloc_page+0x50/0x60
[  446.366895][T22825]  __alloc_pages_nodemask+0x1a1/0x8d0
[  446.366918][T22825]  ? __lock_acquire+0x54f/0x5490
[  446.393378][T22825]  ? __alloc_pages_slowpath+0x28f0/0x28f0
[  446.399141][T22825]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  446.405172][T22825]  cache_grow_begin+0x9d/0x650
[  446.409962][T22825]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  446.416408][T22825]  __kmalloc+0x67c/0x740
[  446.420683][T22825]  ? tomoyo_realpath_from_path+0xcd/0x7a0
[  446.426427][T22825]  tomoyo_realpath_from_path+0xcd/0x7a0
[  446.431997][T22825]  ? tomoyo_path_number_perm+0x193/0x520
[  446.437662][T22825]  tomoyo_path_number_perm+0x1dd/0x520
[  446.443140][T22825]  ? tomoyo_path_number_perm+0x193/0x520
[  446.448892][T22825]  ? tomoyo_execute_permission+0x4a0/0x4a0
[  446.454721][T22825]  ? __f_unlock_pos+0x19/0x20
[  446.459449][T22825]  ? ___might_sleep+0x163/0x280
[  446.464338][T22825]  ? selinux_file_mprotect+0x620/0x620
[  446.469819][T22825]  ? __fget+0x381/0x550
[  446.473995][T22825]  ? ksys_dup3+0x3e0/0x3e0
[  446.478430][T22825]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  446.484674][T22825]  ? fput_many+0x12c/0x1a0
[  446.484696][T22825]  tomoyo_file_ioctl+0x23/0x30
[  446.484712][T22825]  security_file_ioctl+0x77/0xc0
[  446.484728][T22825]  ksys_ioctl+0x57/0xd0
[  446.484747][T22825]  __x64_sys_ioctl+0x73/0xb0
[  446.507803][T22825]  do_syscall_64+0xfd/0x680
[  446.512331][T22825]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  446.518329][T22825] RIP: 0033:0x4592c9
[  446.522238][T22825] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  446.542039][T22825] RSP: 002b:00007f13bd665c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
03:35:35 executing program 1:
r0 = syz_open_dev$usb(0x0, 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

03:35:35 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x0, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

[  446.550469][T22825] RAX: ffffffffffffffda RBX: 00007f13bd665c90 RCX: 00000000004592c9
[  446.558453][T22825] RDX: 0000000020000440 RSI: 00000000c0306201 RDI: 0000000000000003
[  446.566432][T22825] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  446.574420][T22825] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f13bd6666d4
[  446.582523][T22825] R13: 00000000004c078e R14: 00000000004d3248 R15: 0000000000000004
03:35:35 executing program 3 (fault-call:2 fault-nth:2):
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:35 executing program 2:
unshare(0x600)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r0, 0xffffffffffffffff, 0x10000, 0x0)

[  446.617169][T22836] FAULT_INJECTION: forcing a failure.
[  446.617169][T22836] name failslab, interval 1, probability 0, space 0, times 0
[  446.651750][T22836] CPU: 1 PID: 22836 Comm: syz-executor.0 Not tainted 5.2.0-rc5 #28
03:35:35 executing program 5:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, r0)
ioctl$NBD_CLEAR_SOCK(r1, 0xab08)

03:35:35 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x8000000000000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  446.659888][T22836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  446.669961][T22836] Call Trace:
[  446.673285][T22836]  dump_stack+0x172/0x1f0
[  446.677662][T22836]  should_fail.cold+0xa/0x15
[  446.682282][T22836]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  446.688135][T22836]  ? ___might_sleep+0x163/0x280
[  446.693029][T22836]  __should_failslab+0x121/0x190
[  446.697995][T22836]  should_failslab+0x9/0x14
[  446.702508][T22836]  __kmalloc+0x2d9/0x740
[  446.706791][T22836]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  446.713044][T22836]  ? d_absolute_path+0x11b/0x170
[  446.718001][T22836]  ? __d_path+0x140/0x140
[  446.722342][T22836]  ? tomoyo_encode2.part.0+0xf5/0x400
[  446.727744][T22836]  tomoyo_encode2.part.0+0xf5/0x400
[  446.732988][T22836]  tomoyo_encode+0x2b/0x50
[  446.737554][T22836]  tomoyo_realpath_from_path+0x1d3/0x7a0
[  446.743236][T22836]  tomoyo_path_number_perm+0x1dd/0x520
[  446.749100][T22836]  ? tomoyo_path_number_perm+0x193/0x520
[  446.754750][T22836]  ? tomoyo_execute_permission+0x4a0/0x4a0
[  446.760579][T22836]  ? __f_unlock_pos+0x19/0x20
[  446.765279][T22836]  ? ___might_sleep+0x163/0x280
[  446.770302][T22836]  ? selinux_file_mprotect+0x620/0x620
[  446.775784][T22836]  ? __fget+0x381/0x550
[  446.776627][T22846] FAULT_INJECTION: forcing a failure.
[  446.776627][T22846] name failslab, interval 1, probability 0, space 0, times 0
[  446.779977][T22836]  ? ksys_dup3+0x3e0/0x3e0
[  446.779996][T22836]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  446.780012][T22836]  ? fput_many+0x12c/0x1a0
[  446.780038][T22836]  tomoyo_file_ioctl+0x23/0x30
[  446.797621][T22845] block nbd0: NBD_DISCONNECT
03:35:35 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x0, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

[  446.803388][T22836]  security_file_ioctl+0x77/0xc0
[  446.803408][T22836]  ksys_ioctl+0x57/0xd0
[  446.803425][T22836]  __x64_sys_ioctl+0x73/0xb0
[  446.803445][T22836]  do_syscall_64+0xfd/0x680
[  446.803466][T22836]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  446.803486][T22836] RIP: 0033:0x4592c9
[  446.818174][T22845] block nbd0: Send disconnect failed -6
[  446.822267][T22836] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  446.822277][T22836] RSP: 002b:00007fedd40c6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  446.822292][T22836] RAX: ffffffffffffffda RBX: 00007fedd40c6c90 RCX: 00000000004592c9
[  446.822301][T22836] RDX: 0000000020000440 RSI: 00000000c0306201 RDI: 0000000000000003
[  446.822310][T22836] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  446.822317][T22836] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fedd40c76d4
[  446.822326][T22836] R13: 00000000004c078e R14: 00000000004d3248 R15: 0000000000000005
[  446.830919][T22845] block nbd0: Send disconnect failed -6
[  446.854956][T22846] CPU: 0 PID: 22846 Comm: syz-executor.3 Not tainted 5.2.0-rc5 #28
[  446.903643][T22846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  446.903651][T22846] Call Trace:
[  446.903679][T22846]  dump_stack+0x172/0x1f0
[  446.903700][T22846]  should_fail.cold+0xa/0x15
[  446.903718][T22846]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  446.903739][T22846]  ? ___might_sleep+0x163/0x280
[  446.903760][T22846]  __should_failslab+0x121/0x190
[  446.903779][T22846]  should_failslab+0x9/0x14
[  446.903791][T22846]  __kmalloc+0x2d9/0x740
[  446.903808][T22846]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  446.903832][T22846]  ? d_absolute_path+0x11b/0x170
[  446.920496][T22846]  ? __d_path+0x140/0x140
[  446.920514][T22846]  ? tomoyo_encode2.part.0+0xf5/0x400
[  446.920535][T22846]  tomoyo_encode2.part.0+0xf5/0x400
[  446.934283][T22846]  tomoyo_encode+0x2b/0x50
[  446.934300][T22846]  tomoyo_realpath_from_path+0x1d3/0x7a0
[  446.934323][T22846]  tomoyo_path_number_perm+0x1dd/0x520
[  446.934335][T22846]  ? tomoyo_path_number_perm+0x193/0x520
[  446.934352][T22846]  ? tomoyo_execute_permission+0x4a0/0x4a0
[  446.934365][T22846]  ? __f_unlock_pos+0x19/0x20
[  446.934387][T22846]  ? ___might_sleep+0x163/0x280
[  446.934421][T22846]  ? selinux_file_mprotect+0x620/0x620
[  446.934441][T22846]  ? __fget+0x381/0x550
[  446.948079][T22846]  ? ksys_dup3+0x3e0/0x3e0
[  446.957072][T22846]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  446.957090][T22846]  ? fput_many+0x12c/0x1a0
[  446.957115][T22846]  tomoyo_file_ioctl+0x23/0x30
[  446.968069][T22846]  security_file_ioctl+0x77/0xc0
[  446.968089][T22846]  ksys_ioctl+0x57/0xd0
[  446.968112][T22846]  __x64_sys_ioctl+0x73/0xb0
[  446.983316][T22846]  do_syscall_64+0xfd/0x680
[  446.998814][T22846]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  446.998828][T22846] RIP: 0033:0x4592c9
03:35:35 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0xfdfdffff00000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  446.998849][T22846] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  447.094468][T22836] ERROR: Out of memory at tomoyo_realpath_from_path.
[  447.099845][T22846] RSP: 002b:00007f13bd665c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  447.099860][T22846] RAX: ffffffffffffffda RBX: 00007f13bd665c90 RCX: 00000000004592c9
[  447.099869][T22846] RDX: 0000000020000440 RSI: 00000000c0306201 RDI: 0000000000000003
[  447.099878][T22846] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  447.099887][T22846] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f13bd6666d4
[  447.099895][T22846] R13: 00000000004c078e R14: 00000000004d3248 R15: 0000000000000004
[  447.192116][T22842] block nbd0: Disconnected due to user request.
[  447.200095][T22842] block nbd0: shutting down sockets
[  447.262851][T22846] ERROR: Out of memory at tomoyo_realpath_from_path.
[  447.268904][T22859] binder: BINDER_SET_CONTEXT_MGR already set
[  447.304874][T22859] binder: 22857:22859 ioctl 40046207 0 returned -16
03:35:36 executing program 0 (fault-call:2 fault-nth:3):
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:36 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)

03:35:36 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x0, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

03:35:36 executing program 5:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, r0)

03:35:36 executing program 3 (fault-call:2 fault-nth:3):
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:36 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0xffffffff00000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  447.466996][T22865] block nbd0: shutting down sockets
03:35:36 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

[  447.509504][T22874] FAULT_INJECTION: forcing a failure.
[  447.509504][T22874] name failslab, interval 1, probability 0, space 0, times 0
03:35:36 executing program 5:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0)

[  447.549873][T22873] FAULT_INJECTION: forcing a failure.
[  447.549873][T22873] name failslab, interval 1, probability 0, space 0, times 0
[  447.592155][T22873] CPU: 1 PID: 22873 Comm: syz-executor.0 Not tainted 5.2.0-rc5 #28
[  447.600101][T22873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  447.610174][T22873] Call Trace:
[  447.613494][T22873]  dump_stack+0x172/0x1f0
[  447.617862][T22873]  should_fail.cold+0xa/0x15
[  447.622479][T22873]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  447.628309][T22873]  ? ___might_sleep+0x163/0x280
[  447.633311][T22873]  __should_failslab+0x121/0x190
[  447.638267][T22873]  should_failslab+0x9/0x14
[  447.642791][T22873]  kmem_cache_alloc_trace+0x2ce/0x750
[  447.648202][T22873]  ? kasan_check_read+0x11/0x20
[  447.653063][T22873]  ? do_raw_spin_unlock+0x57/0x270
[  447.658181][T22873]  ? _raw_spin_unlock+0x2d/0x50
[  447.663082][T22873]  binder_get_thread+0x1db/0x7c0
[  447.668032][T22873]  ? __might_sleep+0x95/0x190
[  447.672720][T22873]  binder_ioctl+0x1e5/0x1833
[  447.677338][T22873]  ? tomoyo_path_number_perm+0x459/0x520
[  447.684642][T22873]  ? binder_thread_write+0x2820/0x2820
[  447.690110][T22873]  ? tomoyo_path_number_perm+0x263/0x520
[  447.695754][T22873]  ? tomoyo_execute_permission+0x4a0/0x4a0
[  447.701665][T22873]  ? __f_unlock_pos+0x19/0x20
[  447.706362][T22873]  ? ___might_sleep+0x163/0x280
[  447.711441][T22873]  ? binder_thread_write+0x2820/0x2820
[  447.716909][T22873]  do_vfs_ioctl+0xd5f/0x1380
[  447.721547][T22873]  ? ioctl_preallocate+0x210/0x210
[  447.726669][T22873]  ? selinux_file_mprotect+0x620/0x620
[  447.732134][T22873]  ? __fget+0x381/0x550
[  447.736300][T22873]  ? ksys_dup3+0x3e0/0x3e0
[  447.740722][T22873]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  447.746980][T22873]  ? fput_many+0x12c/0x1a0
[  447.751429][T22873]  ? tomoyo_file_ioctl+0x23/0x30
[  447.756376][T22873]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  447.762619][T22873]  ? security_file_ioctl+0x8d/0xc0
[  447.767764][T22873]  ksys_ioctl+0xab/0xd0
[  447.771931][T22873]  __x64_sys_ioctl+0x73/0xb0
[  447.776536][T22873]  do_syscall_64+0xfd/0x680
[  447.781058][T22873]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  447.787210][T22873] RIP: 0033:0x4592c9
[  447.791110][T22873] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  447.810817][T22873] RSP: 002b:00007fedd40c6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  447.819239][T22873] RAX: ffffffffffffffda RBX: 00007fedd40c6c90 RCX: 00000000004592c9
[  447.827216][T22873] RDX: 0000000020000440 RSI: 00000000c0306201 RDI: 0000000000000003
[  447.835244][T22873] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  447.843574][T22873] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fedd40c76d4
[  447.851656][T22873] R13: 00000000004c078e R14: 00000000004d3248 R15: 0000000000000005
[  447.859660][T22874] CPU: 0 PID: 22874 Comm: syz-executor.3 Not tainted 5.2.0-rc5 #28
[  447.867569][T22874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  447.879158][T22874] Call Trace:
[  447.882470][T22874]  dump_stack+0x172/0x1f0
[  447.890128][T22874]  should_fail.cold+0xa/0x15
[  447.895793][T22874]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  447.901631][T22874]  ? ___might_sleep+0x163/0x280
[  447.902930][T22873] binder: 22869:22873 ioctl c0306201 20000440 returned -12
[  447.906506][T22874]  __should_failslab+0x121/0x190
[  447.906529][T22874]  should_failslab+0x9/0x14
[  447.906544][T22874]  kmem_cache_alloc_trace+0x2ce/0x750
[  447.906558][T22874]  ? kasan_check_read+0x11/0x20
[  447.906575][T22874]  ? do_raw_spin_unlock+0x57/0x270
[  447.906598][T22874]  ? _raw_spin_unlock+0x2d/0x50
03:35:36 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)

[  447.918757][T22874]  binder_get_thread+0x1db/0x7c0
[  447.928659][T22874]  ? __might_sleep+0x95/0x190
[  447.928683][T22874]  binder_ioctl+0x1e5/0x1833
[  447.928702][T22874]  ? tomoyo_path_number_perm+0x459/0x520
[  447.928721][T22874]  ? binder_thread_write+0x2820/0x2820
[  447.928736][T22874]  ? tomoyo_path_number_perm+0x263/0x520
[  447.928762][T22874]  ? tomoyo_execute_permission+0x4a0/0x4a0
[  447.943653][T22874]  ? __f_unlock_pos+0x19/0x20
[  447.943682][T22874]  ? ___might_sleep+0x163/0x280
[  447.943706][T22874]  ? binder_thread_write+0x2820/0x2820
[  447.943724][T22874]  do_vfs_ioctl+0xd5f/0x1380
[  447.943742][T22874]  ? ioctl_preallocate+0x210/0x210
[  447.943757][T22874]  ? selinux_file_mprotect+0x620/0x620
[  447.943767][T22874]  ? __fget+0x381/0x550
[  447.943786][T22874]  ? ksys_dup3+0x3e0/0x3e0
[  447.943801][T22874]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  447.943815][T22874]  ? fput_many+0x12c/0x1a0
[  447.943838][T22874]  ? tomoyo_file_ioctl+0x23/0x30
[  447.953468][T22874]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
03:35:36 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  447.953485][T22874]  ? security_file_ioctl+0x8d/0xc0
[  447.953503][T22874]  ksys_ioctl+0xab/0xd0
[  447.953520][T22874]  __x64_sys_ioctl+0x73/0xb0
[  447.953540][T22874]  do_syscall_64+0xfd/0x680
[  447.953561][T22874]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  447.953572][T22874] RIP: 0033:0x4592c9
[  447.953587][T22874] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  447.953595][T22874] RSP: 002b:00007f13bd665c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  447.953609][T22874] RAX: ffffffffffffffda RBX: 00007f13bd665c90 RCX: 00000000004592c9
[  447.953617][T22874] RDX: 0000000020000440 RSI: 00000000c0306201 RDI: 0000000000000003
[  447.953624][T22874] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  447.953632][T22874] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f13bd6666d4
[  447.953640][T22874] R13: 00000000004c078e R14: 00000000004d3248 R15: 0000000000000004
03:35:36 executing program 0 (fault-call:2 fault-nth:4):
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:36 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

[  447.955115][T22885] binder_alloc: 22876: binder_alloc_buf, no vma
[  448.016573][T22874] binder: 22870:22874 ioctl c0306201 20000440 returned -12
[  448.100840][T22882] block nbd0: shutting down sockets
03:35:37 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:37 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)

03:35:37 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

03:35:37 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:37 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:37 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x2, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:37 executing program 5:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0)

03:35:37 executing program 2:
unshare(0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)

03:35:37 executing program 1:
syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

03:35:37 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x10, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  448.613940][T22914] block nbd0: shutting down sockets
03:35:37 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x4}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:37 executing program 5:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0)

03:35:37 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x2, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  448.779281][T22929] binder: 22925:22929 ioctl 10 20000440 returned -22
03:35:37 executing program 1:
syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

03:35:37 executing program 2:
unshare(0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)

[  448.849096][T22934] block nbd0: shutting down sockets
[  448.875298][T22935] binder: 22925:22935 ioctl 10 20000440 returned -22
03:35:37 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x5}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:37 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x10, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:37 executing program 1:
syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

03:35:37 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x301, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:37 executing program 2:
unshare(0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)

03:35:37 executing program 5:
r0 = socket(0x11, 0x2, 0x0)
syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)

[  449.194239][T22956] binder: 22952:22956 ioctl 301 20000440 returned -22
[  449.223526][T22959] binder: 22951:22959 ioctl 10 20000440 returned -22
03:35:38 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x6}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  449.242538][T22963] binder: 22952:22963 ioctl 301 20000440 returned -22
[  449.257674][T22964] binder: 22951:22964 ioctl 10 20000440 returned -22
03:35:38 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, 0x0)

[  449.296873][T22962] block nbd0: shutting down sockets
03:35:38 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x4b47, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:38 executing program 5:
r0 = socket(0x11, 0x2, 0x0)
syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)

03:35:38 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x125d, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:38 executing program 2:
unshare(0x600)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r0, 0xffffffffffffffff, 0x10000, 0x0)

[  449.402002][T22970] binder_alloc: 22967: binder_alloc_buf, no vma
03:35:38 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, 0x0)

[  449.541947][T22979] binder: 22977:22979 ioctl 125d 20000440 returned -22
[  449.571784][T22982] binder: 22978:22982 ioctl 4b47 20000440 returned -22
[  449.574770][T22973] block nbd0: shutting down sockets
03:35:38 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x7}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  449.588388][T22983] binder: 22977:22983 ioctl 125d 20000440 returned -22
[  449.597247][T22984] binder: 22978:22984 ioctl 4b47 20000440 returned -22
03:35:38 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x125e, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:38 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x4b49, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:38 executing program 2:
unshare(0x600)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r0, 0xffffffffffffffff, 0x10000, 0x0)

03:35:38 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, 0x0)

03:35:38 executing program 5:
r0 = socket(0x11, 0x2, 0x0)
syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)

[  449.868700][T23001] binder: 22998:23001 ioctl 125e 20000440 returned -22
[  449.895824][T22999] block nbd0: shutting down sockets
[  449.911810][T23005] binder: 22998:23005 ioctl 125e 20000440 returned -22
03:35:38 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x12}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  449.929556][T23007] binder: 23000:23007 ioctl 4b49 20000440 returned -22
[  449.943110][T23008] binder: 23000:23008 ioctl 4b49 20000440 returned -22
03:35:38 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x125f, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:38 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0x0, 0xfffffffffffffffe})

03:35:38 executing program 2:
unshare(0x600)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r0, 0xffffffffffffffff, 0x10000, 0x0)

03:35:38 executing program 5:
r0 = socket(0x11, 0x2, 0x0)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0)
r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)

03:35:38 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x4c01, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:38 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x30}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  450.133703][T23019] binder: 23015:23019 ioctl 125f 20000440 returned -22
[  450.192059][T23022] binder: 23015:23022 ioctl 125f 20000440 returned -22
03:35:39 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0x0, 0xfffffffffffffffe})

03:35:39 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x1260, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  450.276526][T23027] binder: 23023:23027 ioctl 4c01 20000440 returned -22
03:35:39 executing program 2:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)

03:35:39 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x38}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  450.325002][T23031] binder: 23023:23031 ioctl 4c01 20000440 returned -22
03:35:39 executing program 5:
r0 = socket(0x11, 0x2, 0x0)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0)
r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)

03:35:39 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x541b, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  450.416073][T23037] binder: 23035:23037 ioctl 1260 20000440 returned -22
03:35:39 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0x0, 0xfffffffffffffffe})

[  450.493967][T23042] binder: 23035:23042 ioctl 1260 20000440 returned -22
03:35:39 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x1261, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:39 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x48}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:39 executing program 2:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)

[  450.654623][T23053] binder: 23050:23053 ioctl 541b 20000440 returned -22
03:35:39 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1})

03:35:39 executing program 5:
r0 = socket(0x11, 0x2, 0x0)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0)
r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)

[  450.722379][T23059] binder: 23050:23059 ioctl 541b 20000440 returned -22
03:35:39 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  450.798178][T23064] binder: 23058:23064 ioctl 1261 20000440 returned -22
[  450.852679][T23068] binder: BINDER_SET_CONTEXT_MGR already set
03:35:39 executing program 2:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)

[  450.896181][T23071] usb usb2: usbfs: process 23071 (syz-executor.1) did not claim interface 0 before use
[  450.899041][T23068] binder: 23061:23068 ioctl 40046207 0 returned -16
[  450.920554][T23074] binder: 23058:23074 ioctl 1261 20000440 returned -22
03:35:39 executing program 5:
r0 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff)
r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff)

[  450.966706][T23071] vhci_hcd: default hub control req: a100 v0000 i0000 l0
03:35:39 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x1262, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:39 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x58}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:39 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5423, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:39 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1})

03:35:39 executing program 2:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, 0x0)
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)

03:35:40 executing program 5:
r0 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff)
r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff)

[  451.220819][T23090] binder: 23088:23090 ioctl 1262 20000440 returned -22
03:35:40 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x68}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  451.306108][T23094] binder: 23085:23094 ioctl 5423 20000440 returned -22
[  451.316517][T23098] binder: 23088:23098 ioctl 1262 20000440 returned -22
[  451.326655][T23097] usb usb2: usbfs: process 23097 (syz-executor.1) did not claim interface 0 before use
[  451.339193][T23100] binder: 23085:23100 ioctl 5423 20000440 returned -22
[  451.395482][T23097] vhci_hcd: default hub control req: a100 v0000 i0000 l0
03:35:40 executing program 5:
r0 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff)
r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff)

03:35:40 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x1263, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:40 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5450, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:40 executing program 2:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, 0x0)
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)

03:35:40 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1})

03:35:40 executing program 5:
r0 = socket(0x0, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, r0)

[  451.631463][T23115] binder: 23114:23115 ioctl 1263 20000440 returned -22
03:35:40 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x300}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:40 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5451, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  451.693313][T23121] usb usb2: usbfs: process 23121 (syz-executor.1) did not claim interface 0 before use
03:35:40 executing program 2:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, 0x0)
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)

[  451.744767][T23125] binder: 23114:23125 ioctl 1263 20000440 returned -22
[  451.773459][T23121] vhci_hcd: default hub control req: a100 v0000 i0000 l0
03:35:40 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x1264, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:40 executing program 1 (fault-call:1 fault-nth:0):
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

03:35:40 executing program 5:
r0 = socket(0x0, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, r0)

03:35:40 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x500}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:40 executing program 2:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040))
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)

[  452.004937][T23141] binder: 23140:23141 ioctl 1264 20000440 returned -22
03:35:40 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5452, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  452.067669][T23145] binder: 23140:23145 ioctl 1264 20000440 returned -22
[  452.082905][T23147] FAULT_INJECTION: forcing a failure.
[  452.082905][T23147] name failslab, interval 1, probability 0, space 0, times 0
03:35:40 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x1265, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  452.175011][T23147] CPU: 1 PID: 23147 Comm: syz-executor.1 Not tainted 5.2.0-rc5 #28
[  452.182960][T23147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  452.193126][T23147] Call Trace:
[  452.196450][T23147]  dump_stack+0x172/0x1f0
[  452.200827][T23147]  should_fail.cold+0xa/0x15
[  452.205444][T23147]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  452.211286][T23147]  ? ___might_sleep+0x163/0x280
[  452.216164][T23147]  __should_failslab+0x121/0x190
[  452.221125][T23147]  should_failslab+0x9/0x14
[  452.225674][T23147]  __kmalloc+0x2d9/0x740
[  452.229966][T23147]  ? tomoyo_realpath_from_path+0xc0/0x7a0
[  452.235879][T23147]  ? rcu_read_lock_sched_held+0x110/0x130
[  452.241621][T23147]  ? tomoyo_realpath_from_path+0xcd/0x7a0
[  452.247372][T23147]  tomoyo_realpath_from_path+0xcd/0x7a0
[  452.253028][T23147]  ? tomoyo_path_number_perm+0x193/0x520
[  452.258691][T23147]  tomoyo_path_number_perm+0x1dd/0x520
[  452.264175][T23147]  ? tomoyo_path_number_perm+0x193/0x520
[  452.269835][T23147]  ? tomoyo_execute_permission+0x4a0/0x4a0
[  452.275759][T23147]  ? __f_unlock_pos+0x19/0x20
[  452.280500][T23147]  ? ___might_sleep+0x163/0x280
[  452.285392][T23147]  ? selinux_file_mprotect+0x620/0x620
[  452.290861][T23147]  ? __fget+0x381/0x550
[  452.295212][T23147]  ? ksys_dup3+0x3e0/0x3e0
[  452.299674][T23147]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  452.305936][T23147]  ? fput_many+0x12c/0x1a0
[  452.308585][T23163] binder: 23160:23163 ioctl 1265 20000440 returned -22
[  452.310397][T23147]  tomoyo_file_ioctl+0x23/0x30
03:35:41 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x1267, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  452.310415][T23147]  security_file_ioctl+0x77/0xc0
[  452.310435][T23147]  ksys_ioctl+0x57/0xd0
[  452.310452][T23147]  __x64_sys_ioctl+0x73/0xb0
[  452.310476][T23147]  do_syscall_64+0xfd/0x680
[  452.324305][T23164] binder: 23160:23164 ioctl 1265 20000440 returned -22
[  452.327961][T23147]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  452.327975][T23147] RIP: 0033:0x4592c9
[  452.327993][T23147] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  452.328001][T23147] RSP: 002b:00007f5c6f1cbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  452.328024][T23147] RAX: ffffffffffffffda RBX: 00007f5c6f1cbc90 RCX: 00000000004592c9
[  452.393854][T23147] RDX: 0000000020000040 RSI: 00000000c0185500 RDI: 0000000000000003
[  452.394663][T23167] binder: 23166:23167 ioctl 1267 20000440 returned -22
[  452.401845][T23147] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  452.401854][T23147] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5c6f1cc6d4
03:35:41 executing program 5:
r0 = socket(0x0, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, r0)

[  452.401862][T23147] R13: 00000000004c1974 R14: 00000000004d46b8 R15: 0000000000000004
03:35:41 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5460, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:41 executing program 2:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040))
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)

03:35:41 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x600}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  452.477666][T23147] ERROR: Out of memory at tomoyo_realpath_from_path.
[  452.511846][T23172] binder: 23166:23172 ioctl 1267 20000440 returned -22
03:35:41 executing program 5:
r0 = socket(0x11, 0x0, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, r0)

03:35:41 executing program 1 (fault-call:1 fault-nth:1):
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

03:35:41 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x1268, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:41 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x6364, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:41 executing program 2:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040))
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)

03:35:41 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x700}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:41 executing program 5:
r0 = socket(0x11, 0x0, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, r0)

03:35:41 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

[  452.884534][T23196] binder: 23187:23196 ioctl 1268 20000440 returned -22
[  452.919153][T23199] binder: 23194:23199 ioctl 6364 20000440 returned -22
[  452.966961][T23202] binder: 23194:23202 ioctl 6364 20000440 returned -22
[  452.984305][T23201] binder: 23187:23201 ioctl 1268 20000440 returned -22
03:35:41 executing program 2:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0b")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)

03:35:41 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x8912, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  453.046976][T23206] binder: BINDER_SET_CONTEXT_MGR already set
03:35:41 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x4b47, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  453.099890][T23206] binder: 23200:23206 ioctl 40046207 0 returned -16
03:35:41 executing program 5:
r0 = socket(0x11, 0x0, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, r0)

03:35:41 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0x2, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

03:35:42 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x1200}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  453.259390][T23217] binder: 23216:23217 ioctl 8912 20000440 returned -22
03:35:42 executing program 2:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0b")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)

[  453.302756][T23222] binder: 23219:23222 ioctl 4b47 20000440 returned -22
[  453.312791][T23223] binder: 23216:23223 ioctl 8912 20000440 returned -22
03:35:42 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x8933, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:42 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0x10, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

[  453.366591][T23229] binder: 23219:23229 ioctl 4b47 20000440 returned -22
[  453.395322][T23231] binder: BINDER_SET_CONTEXT_MGR already set
03:35:42 executing program 5:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, r0)

03:35:42 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x4b49, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  453.467825][T23231] binder: 23227:23231 ioctl 40046207 0 returned -16
03:35:42 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x3000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:42 executing program 2:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0b")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)

[  453.553690][T23240] binder: 23237:23240 ioctl 8933 20000440 returned -22
[  453.593632][T23244] binder: 23237:23244 ioctl 8933 20000440 returned -22
03:35:42 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0x4b35, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

[  453.638060][T23246] binder: 23241:23246 ioctl 4b49 20000440 returned -22
[  453.665889][T23249] binder: 23241:23249 ioctl 4b49 20000440 returned -22
03:35:42 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40045431, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:42 executing program 5:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, r0)

03:35:42 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x4c01, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:42 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x3800}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:42 executing program 2:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7b")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)

03:35:42 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0x4b47, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

03:35:42 executing program 5:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, r0)

[  453.926798][T23263] binder: 23259:23263 ioctl 40045431 20000440 returned -22
[  453.947421][T23270] binder: 23259:23270 ioctl 40045431 20000440 returned -22
[  453.957528][T23265] binder: 23264:23265 ioctl 4c01 20000440 returned -22
03:35:42 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x4000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  454.047322][T23274] binder: 23264:23274 ioctl 4c01 20000440 returned -22
03:35:42 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400454ca, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:42 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0x4b49, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

[  454.131895][T23283] binder: BINDER_SET_CONTEXT_MGR already set
[  454.137948][T23283] binder: 23277:23283 ioctl 40046207 0 returned -16
03:35:43 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x541b, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:43 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x4800}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:43 executing program 5:
r0 = socket(0x11, 0x2, 0x0)
syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0)
r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)

03:35:43 executing program 2:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7b")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)

[  454.327435][T23290] binder: 23287:23290 ioctl 400454ca 20000440 returned -22
03:35:43 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0x4c01, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

[  454.393770][T23297] binder: 23296:23297 ioctl 541b 20000440 returned -22
[  454.414685][T23299] binder: 23287:23299 ioctl 400454ca 20000440 returned -22
[  454.479000][T23305] binder: 23296:23305 ioctl 541b 20000440 returned -22
[  454.498552][T23301] block nbd0: shutting down sockets
03:35:43 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:43 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:43 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0x541b, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

03:35:43 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x5800}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:43 executing program 2:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7b")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)

03:35:43 executing program 5:
r0 = socket(0x11, 0x2, 0x0)
syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0)
r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)

03:35:43 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  454.815883][T23323] block nbd0: shutting down sockets
03:35:43 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0x5421, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

03:35:43 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x6800}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:43 executing program 2:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be0")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)

03:35:43 executing program 5:
r0 = socket(0x11, 0x2, 0x0)
syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0)
r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)

03:35:43 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5450, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:43 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:43 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0x5450, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

[  455.114366][T23343] binder: BINDER_SET_CONTEXT_MGR already set
[  455.120431][T23343] binder: 23340:23343 ioctl 40046207 0 returned -16
03:35:43 executing program 2:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be0")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)

03:35:44 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5451, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:44 executing program 5:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, r0)

03:35:44 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0x5451, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

03:35:44 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40049409, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:44 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x1000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:44 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0x5452, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

03:35:44 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5452, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  455.482121][T23368] block nbd0: shutting down sockets
03:35:44 executing program 2:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be0")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)

03:35:44 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x2000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:44 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40086602, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:44 executing program 5:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, r0)

03:35:44 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0x5460, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

03:35:44 executing program 2:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$mice(0x0, 0x0, 0x0)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)

03:35:44 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x3000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:44 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5460, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  455.807943][T23393] block nbd0: shutting down sockets
[  455.840718][T23394] binder: 23391:23394 ioctl 40086602 20000440 returned -22
03:35:44 executing program 2:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$mice(0x0, 0x0, 0x0)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)

03:35:44 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0x550b, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

[  455.941640][T23397] binder: 23391:23397 ioctl 40086602 20000440 returned -22
03:35:44 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40087602, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:44 executing program 5:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, r0)

03:35:44 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x4000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:44 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x6364, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  456.151204][T23418] binder: 23416:23418 ioctl 40087602 20000440 returned -22
03:35:45 executing program 2:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$mice(0x0, 0x0, 0x0)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)

03:35:45 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0x5514, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

[  456.226616][T23423] binder: 23416:23423 ioctl 40087602 20000440 returned -22
[  456.270952][T23428] binder: 23424:23428 ioctl 6364 20000440 returned -22
[  456.295431][T23422] block nbd0: shutting down sockets
03:35:45 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x5000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  456.318740][T23431] binder: 23424:23431 ioctl 6364 20000440 returned -22
03:35:45 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:45 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x8912, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:45 executing program 5:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0)

03:35:45 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0x551f, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

03:35:45 executing program 2:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x10000, 0x0)

[  456.560700][T23442] binder: 23441:23442 ioctl 8912 20000440 returned -22
03:35:45 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x4020940d, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:45 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x6000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  456.608134][T23448] block nbd0: shutting down sockets
[  456.625938][T23453] binder: 23441:23453 ioctl 8912 20000440 returned -22
03:35:45 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0x6364, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

03:35:45 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x8933, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:45 executing program 5:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0)

03:35:45 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x7000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:45 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0x890b, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

[  456.875633][T23470] binder: 23465:23470 ioctl 8933 20000440 returned -22
[  456.908750][T23468] block nbd0: shutting down sockets
03:35:45 executing program 2:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x10000, 0x0)

03:35:45 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x80045430, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  456.933020][T23472] binder: 23465:23472 ioctl 8933 20000440 returned -22
03:35:45 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xab00, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:45 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0x8912, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

[  457.130236][T23486] binder: 23483:23486 ioctl 80045430 20000440 returned -22
03:35:45 executing program 5:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0)

03:35:45 executing program 2:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x10000, 0x0)

03:35:46 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x12000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  457.194369][T23489] binder: 23483:23489 ioctl 80045430 20000440 returned -22
[  457.240292][T23488] binder: 23487:23488 ioctl ab00 20000440 returned -22
03:35:46 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x800454d2, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  457.309049][T23497] binder: 23487:23497 ioctl ab00 20000440 returned -22
[  457.366756][T23499] block nbd0: shutting down sockets
03:35:46 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xab08, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:46 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0x8918, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

[  457.431236][T23507] binder: 23504:23507 ioctl 800454d2 20000440 returned -22
03:35:46 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x30000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:46 executing program 2:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r1, 0xffffffffffffffff, 0x0, 0x0)

03:35:46 executing program 5:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff)

[  457.512800][T23509] binder: 23504:23509 ioctl 800454d2 20000440 returned -22
[  457.588716][T23515] binder: 23512:23515 ioctl ab08 20000440 returned -22
[  457.639165][T23520] binder: 23512:23520 ioctl ab08 20000440 returned -22
03:35:46 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400454ca, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:46 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x80086301, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  457.685382][T23517] block nbd0: shutting down sockets
03:35:46 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0x8933, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

03:35:46 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x38000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:46 executing program 2:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r1, 0xffffffffffffffff, 0x0, 0x0)

03:35:46 executing program 5:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff)

[  457.896088][T23534] binder: 23529:23534 ioctl 80086301 20000440 returned -22
[  457.907707][T23536] binder: 23530:23536 ioctl 400454ca 20000440 returned -22
03:35:46 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xae01, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

[  457.952148][T23540] binder: 23530:23540 ioctl 400454ca 20000440 returned -22
[  457.979020][T23542] binder: BINDER_SET_CONTEXT_MGR already set
[  457.986220][T23545] binder: 23529:23545 ioctl 80086301 20000440 returned -22
03:35:46 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  458.024977][T23539] block nbd0: shutting down sockets
[  458.028958][T23542] binder: 23537:23542 ioctl 40046207 0 returned -16
03:35:46 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x40000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:46 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x80086601, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:46 executing program 2:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r1, 0xffffffffffffffff, 0x0, 0x0)

03:35:46 executing program 5:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff)

03:35:46 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0x40045431, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

03:35:47 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  458.318558][T23564] binder: 23560:23564 ioctl 80086601 20000440 returned -22
03:35:47 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0x400454ca, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

03:35:47 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x48000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  458.382920][T23566] block nbd0: shutting down sockets
[  458.402714][T23570] binder: 23560:23570 ioctl 80086601 20000440 returned -22
03:35:47 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x38000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:47 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x80087601, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  458.463083][T23576] binder: BINDER_SET_CONTEXT_MGR already set
03:35:47 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x4000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  458.539313][T23576] binder: 23567:23576 ioctl 40046207 20000440 returned -16
03:35:47 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:47 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0x4004550c, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

03:35:47 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x58000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  458.638574][T23587] binder: 23582:23587 ioctl 80087601 20000440 returned -22
[  458.661033][T23584] binder: BINDER_SET_CONTEXT_MGR already set
[  458.695601][T23590] binder: 23582:23590 ioctl 80087601 20000440 returned -22
[  458.722120][T23584] binder: 23581:23584 ioctl 40046207 0 returned -16
03:35:47 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x1265, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:47 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:47 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40049409, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:47 executing program 2 (fault-call:4 fault-nth:0):
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, r0)

03:35:47 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x68000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  458.975862][T23605] binder: 23604:23605 ioctl 1265 20000440 returned -22
[  459.009149][T23614] FAULT_INJECTION: forcing a failure.
[  459.009149][T23614] name failslab, interval 1, probability 0, space 0, times 0
[  459.040637][T23614] CPU: 1 PID: 23614 Comm: syz-executor.2 Not tainted 5.2.0-rc5 #28
[  459.048691][T23614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  459.058880][T23614] Call Trace:
[  459.062199][T23614]  dump_stack+0x172/0x1f0
[  459.066556][T23614]  should_fail.cold+0xa/0x15
[  459.071161][T23614]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  459.077001][T23614]  ? ___might_sleep+0x163/0x280
[  459.081873][T23614]  __should_failslab+0x121/0x190
[  459.086826][T23614]  should_failslab+0x9/0x14
[  459.091357][T23614]  __kmalloc+0x2d9/0x740
[  459.095612][T23614]  ? tomoyo_realpath_from_path+0xc0/0x7a0
[  459.101336][T23614]  ? rcu_read_lock_sched_held+0x110/0x130
[  459.107074][T23614]  ? tomoyo_realpath_from_path+0xcd/0x7a0
[  459.112820][T23614]  tomoyo_realpath_from_path+0xcd/0x7a0
[  459.118383][T23614]  ? tomoyo_path_number_perm+0x193/0x520
[  459.124032][T23614]  tomoyo_path_number_perm+0x1dd/0x520
[  459.129503][T23614]  ? tomoyo_path_number_perm+0x193/0x520
[  459.135181][T23614]  ? tomoyo_execute_permission+0x4a0/0x4a0
[  459.141000][T23614]  ? __f_unlock_pos+0x19/0x20
[  459.145962][T23614]  ? ___might_sleep+0x163/0x280
[  459.150850][T23614]  ? selinux_file_mprotect+0x620/0x620
[  459.156343][T23614]  ? __fget+0x381/0x550
[  459.160518][T23614]  ? ksys_dup3+0x3e0/0x3e0
[  459.164941][T23614]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  459.171190][T23614]  ? fput_many+0x12c/0x1a0
[  459.175620][T23614]  tomoyo_file_ioctl+0x23/0x30
[  459.180390][T23614]  security_file_ioctl+0x77/0xc0
[  459.185340][T23614]  ksys_ioctl+0x57/0xd0
[  459.189515][T23614]  __x64_sys_ioctl+0x73/0xb0
[  459.194396][T23614]  do_syscall_64+0xfd/0x680
[  459.198920][T23614]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  459.204825][T23614] RIP: 0033:0x4592c9
[  459.208731][T23614] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  459.228364][T23614] RSP: 002b:00007fdba9524c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
03:35:48 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0xfdfdffff}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:48 executing program 5 (fault-call:4 fault-nth:0):
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)

03:35:48 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40086602, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:48 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0xfffffdfd}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:48 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  459.236802][T23614] RAX: ffffffffffffffda RBX: 00007fdba9524c90 RCX: 00000000004592c9
[  459.244797][T23614] RDX: 0000000000000003 RSI: 000000000000ab00 RDI: 0000000000000005
[  459.252876][T23614] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  459.260895][T23614] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdba95256d4
[  459.268962][T23614] R13: 00000000004c2b12 R14: 00000000004d5bb8 R15: 0000000000000006
[  459.312577][T23626] binder: 23621:23626 ioctl 40086602 20000440 returned -22
[  459.352823][T23632] binder: 23621:23632 ioctl 40086602 20000440 returned -22
[  459.409148][T23614] ERROR: Out of memory at tomoyo_realpath_from_path.
[  459.429735][T23608] block nbd0: shutting down sockets
03:35:48 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0x4004550d, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

03:35:48 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40087602, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:48 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:48 executing program 5:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)

03:35:48 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x100000000000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:48 executing program 2 (fault-call:4 fault-nth:1):
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, r0)

[  459.657303][T23651] binder: 23643:23651 ioctl 40087602 20000440 returned -22
[  459.706624][T23655] binder: 23643:23655 ioctl 40087602 20000440 returned -22
[  459.735680][T23652] FAULT_INJECTION: forcing a failure.
[  459.735680][T23652] name fail_page_alloc, interval 1, probability 0, space 0, times 0
03:35:48 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0x4004551e, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

03:35:48 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:48 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x200000000000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  459.749046][T23652] CPU: 0 PID: 23652 Comm: syz-executor.2 Not tainted 5.2.0-rc5 #28
[  459.757209][T23652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  459.767360][T23652] Call Trace:
[  459.770853][T23652]  dump_stack+0x172/0x1f0
[  459.775207][T23652]  should_fail.cold+0xa/0x15
[  459.779828][T23652]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  459.785754][T23652]  should_fail_alloc_page+0x50/0x60
[  459.791158][T23652]  __alloc_pages_nodemask+0x1a1/0x8d0
[  459.797065][T23652]  ? __lock_acquire+0x54f/0x5490
[  459.802026][T23652]  ? __alloc_pages_slowpath+0x28f0/0x28f0
[  459.807955][T23652]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  459.813864][T23652]  cache_grow_begin+0x9d/0x650
[  459.818641][T23652]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  459.824902][T23652]  __kmalloc+0x67c/0x740
[  459.829198][T23652]  ? tomoyo_realpath_from_path+0xcd/0x7a0
[  459.834940][T23652]  tomoyo_realpath_from_path+0xcd/0x7a0
[  459.840517][T23652]  ? tomoyo_path_number_perm+0x193/0x520
[  459.846165][T23652]  tomoyo_path_number_perm+0x1dd/0x520
[  459.846179][T23652]  ? tomoyo_path_number_perm+0x193/0x520
03:35:48 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  459.846195][T23652]  ? tomoyo_execute_permission+0x4a0/0x4a0
[  459.846209][T23652]  ? __f_unlock_pos+0x19/0x20
[  459.846232][T23652]  ? ___might_sleep+0x163/0x280
[  459.846266][T23652]  ? selinux_file_mprotect+0x620/0x620
[  459.846285][T23652]  ? __fget+0x381/0x550
[  459.846304][T23652]  ? ksys_dup3+0x3e0/0x3e0
[  459.888588][T23652]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  459.894930][T23652]  ? fput_many+0x12c/0x1a0
[  459.894955][T23652]  tomoyo_file_ioctl+0x23/0x30
[  459.894971][T23652]  security_file_ioctl+0x77/0xc0
[  459.894990][T23652]  ksys_ioctl+0x57/0xd0
[  459.895008][T23652]  __x64_sys_ioctl+0x73/0xb0
[  459.895027][T23652]  do_syscall_64+0xfd/0x680
[  459.895048][T23652]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  459.895059][T23652] RIP: 0033:0x4592c9
[  459.895075][T23652] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
03:35:48 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  459.895084][T23652] RSP: 002b:00007fdba9524c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  459.895098][T23652] RAX: ffffffffffffffda RBX: 00007fdba9524c90 RCX: 00000000004592c9
[  459.895114][T23652] RDX: 0000000000000003 RSI: 000000000000ab00 RDI: 0000000000000005
[  459.909314][T23652] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  459.909323][T23652] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdba95256d4
[  459.909331][T23652] R13: 00000000004c2b12 R14: 00000000004d5bb8 R15: 0000000000000006
03:35:48 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0x40046207, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

03:35:48 executing program 5:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r1, 0xffffffffffffffff, 0x4000000, 0x0)

03:35:48 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x4020940d, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  460.057124][T23649] block nbd0: shutting down sockets
03:35:48 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x300000000000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:49 executing program 2 (fault-call:4 fault-nth:2):
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, r0)

[  460.202065][T23676] binder: 23672:23676 ioctl c018620c 20000440 returned -22
03:35:49 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0x40047440, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

[  460.276990][T23682] binder: 23672:23682 ioctl c018620c 20000440 returned -22
03:35:49 executing program 5:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000080)="00ffe45ecb789945732eeeaf3955e217242157a1859c7e62e79e45dfa79daf178577601f465b783b0fc60f18ad2b6069a04d89cb5749cba4e93807e0a892120cc7fed28fde523cca63a66536a59932c63f2a8a75e24825bed391cf9cd1f23c3909cd5e9b7977", 0x66, 0x40, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)

03:35:49 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0189436, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:49 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x800454d2, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:49 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x400000000000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:49 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0x40049409, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

[  460.547639][T23700] binder: 23696:23700 ioctl 800454d2 20000440 returned -22
03:35:49 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000001c0)=ANY=[@ANYRES32=<r2=>0x0, @ANYBLOB="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"], &(0x7f0000000000)=0xb9)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000180)={r2, 0x4}, 0x8)
fsetxattr$trusted_overlay_upper(r0, &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000300)={0x0, 0xfb, 0xa1, 0x5, 0x0, "3b51915f122f3df61cf27f40ea2d4335", "eea643fa4bf580f631f68cd2154507bab6bf2727a3109bea6f315bc8396e831c44f5df0774d70ae0e19368f45b4d68765ea507bfc473db5d347e721c1da29f625609c47f346f9a6eef831a3e31a315742181f5a032e0b20fa0cc3386625db717bbfabd376ef539c6af70ffea49bdc7acfc6b0401c7af131793ef9b718fa2ba6f5be18caaa741aae5077e439b"}, 0xa1, 0x1)

03:35:49 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc020660b, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:49 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x500000000000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  460.619978][T23708] binder: 23696:23708 ioctl 800454d2 20000440 returned -22
[  460.653800][T23707] FAULT_INJECTION: forcing a failure.
[  460.653800][T23707] name failslab, interval 1, probability 0, space 0, times 0
[  460.734221][T23707] CPU: 1 PID: 23707 Comm: syz-executor.2 Not tainted 5.2.0-rc5 #28
[  460.742216][T23707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  460.752415][T23707] Call Trace:
[  460.755731][T23707]  dump_stack+0x172/0x1f0
[  460.760128][T23707]  should_fail.cold+0xa/0x15
[  460.764752][T23707]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  460.770586][T23707]  ? ___might_sleep+0x163/0x280
[  460.775487][T23707]  __should_failslab+0x121/0x190
[  460.780451][T23707]  should_failslab+0x9/0x14
[  460.784965][T23707]  __kmalloc+0x2d9/0x740
[  460.789240][T23707]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  460.795929][T23707]  ? d_absolute_path+0x11b/0x170
[  460.800880][T23707]  ? __d_path+0x140/0x140
[  460.805221][T23707]  ? tomoyo_encode2.part.0+0xf5/0x400
[  460.810605][T23707]  tomoyo_encode2.part.0+0xf5/0x400
[  460.815818][T23707]  tomoyo_encode+0x2b/0x50
[  460.820279][T23707]  tomoyo_realpath_from_path+0x1d3/0x7a0
[  460.825932][T23707]  tomoyo_path_number_perm+0x1dd/0x520
[  460.831401][T23707]  ? tomoyo_path_number_perm+0x193/0x520
[  460.837087][T23707]  ? tomoyo_execute_permission+0x4a0/0x4a0
[  460.842904][T23707]  ? __f_unlock_pos+0x19/0x20
[  460.842931][T23707]  ? ___might_sleep+0x163/0x280
[  460.842964][T23707]  ? selinux_file_mprotect+0x620/0x620
[  460.857918][T23707]  ? __fget+0x381/0x550
[  460.857941][T23707]  ? ksys_dup3+0x3e0/0x3e0
[  460.857959][T23707]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  460.857981][T23707]  ? fput_many+0x12c/0x1a0
[  460.877199][T23707]  tomoyo_file_ioctl+0x23/0x30
[  460.881982][T23707]  security_file_ioctl+0x77/0xc0
[  460.887023][T23707]  ksys_ioctl+0x57/0xd0
[  460.891220][T23707]  __x64_sys_ioctl+0x73/0xb0
[  460.895859][T23707]  do_syscall_64+0xfd/0x680
[  460.900467][T23707]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  460.906371][T23707] RIP: 0033:0x4592c9
[  460.910280][T23707] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
03:35:49 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x600000000000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:49 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x80086301, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  460.930330][T23707] RSP: 002b:00007fdba9524c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  460.938784][T23707] RAX: ffffffffffffffda RBX: 00007fdba9524c90 RCX: 00000000004592c9
[  460.946852][T23707] RDX: 0000000000000003 RSI: 000000000000ab00 RDI: 0000000000000005
[  460.954837][T23707] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  460.962813][T23707] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdba95256d4
[  460.970796][T23707] R13: 00000000004c2b12 R14: 00000000004d5bb8 R15: 0000000000000006
[  461.018295][T23707] ERROR: Out of memory at tomoyo_realpath_from_path.
[  461.032676][T23726] binder: 23725:23726 ioctl 80086301 20000440 returned -22
[  461.037770][T23686] block nbd0: shutting down sockets
03:35:49 executing program 2 (fault-call:4 fault-nth:3):
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, r0)

03:35:49 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x700000000000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:49 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0x4008550c, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

03:35:49 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306203, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  461.092220][T23729] binder: 23725:23729 ioctl 80086301 20000440 returned -22
03:35:49 executing program 5:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x10)
ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000100)={0x3, 0x0, 0x1})
r2 = syz_open_dev$dspn(&(0x7f00000003c0)='/dev/dsp#\x00', 0x401, 0x80000)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00')
setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000080)={0x8, 0x6, 0x5, 0x4}, 0x6)
sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x202000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r3, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000000)
r4 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r4, 0xffffffffffffffff, 0x10000, 0x0)

03:35:49 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x80086601, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  461.198895][T23735] binder: 23733:23735 ioctl c0306203 20000440 returned -22
[  461.239877][T23741] binder: 23733:23741 ioctl c0306203 20000440 returned -22
[  461.288253][T23742] block nbd0: shutting down sockets
03:35:50 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x1200000000000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:50 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306205, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  461.320576][T23747] binder: 23744:23747 ioctl 80086601 20000440 returned -22
03:35:50 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, r0)

03:35:50 executing program 5:
unshare(0x20000)
r0 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000100)=0x5, 0x1)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000000c0)={0x4, 0xffff, 0x7fffffff, 0x1, 0x7}, 0x14)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r3, r2, 0x10000, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, 0xfffffffffffffffd, &(0x7f0000000140))

[  461.403062][T23753] binder: 23744:23753 ioctl 80086601 20000440 returned -22
[  461.468567][T23755] binder: 23752:23755 ioctl c0306205 20000440 returned -22
03:35:50 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x80087601, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  461.510092][T23759] binder: BINDER_SET_CONTEXT_MGR already set
[  461.519548][T23762] binder: 23752:23762 ioctl c0306205 20000440 returned -22
[  461.534435][T23759] binder: 23751:23759 ioctl 40046207 0 returned -16
03:35:50 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc030620c, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  461.564058][T23756] block nbd0: shutting down sockets
03:35:50 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x3000000000000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  461.613924][T23766] binder: 23765:23766 ioctl 80087601 20000440 returned -22
[  461.639853][T23767] binder: 23765:23767 ioctl 80087601 20000440 returned -22
03:35:50 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0x2, r0)

[  461.698707][T23774] binder: 23768:23774 ioctl c030620c 20000440 returned -22
[  461.714551][T23775] binder: 23768:23775 ioctl c030620c 20000440 returned -22
[  461.788166][T23776] binder: BINDER_SET_CONTEXT_MGR already set
[  461.809090][T23777] block nbd0: shutting down sockets
[  461.819654][T23776] binder: 23773:23776 ioctl 40046207 0 returned -16
[  461.819716][T23778] binder_alloc: 23773: binder_alloc_buf, no vma
[  461.897153][T23777] block nbd0: shutting down sockets
03:35:50 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0x4008550d, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

03:35:50 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:50 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)

03:35:50 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x5d, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:50 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x3800000000000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:50 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0x10, r0)

[  462.102005][T23789] block nbd0: shutting down sockets
03:35:50 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:50 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x4000000000000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:50 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x2, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:51 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0x40085511, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

[  462.183588][T23789] block nbd0: shutting down sockets
[  462.243284][T23808] binder: 23805:23808 unknown command 16448
[  462.282559][T23808] binder: 23805:23808 ioctl c0306201 20000440 returned -22
03:35:51 executing program 5:
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm-monitor\x00', 0x8040, 0x0)
setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000340)='aead\x00', 0x5)
unshare(0x600)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58)
accept$alg(r3, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r4=>0x0, <r5=>0x0})
timerfd_settime(r2, 0x1, &(0x7f00000000c0)={{r4, r5+30000000}, {0x77359400}}, &(0x7f00000002c0))
bind$alg(r2, &(0x7f0000000480)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58)
tee(r2, 0xffffffffffffffff, 0x10000, 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000100)={<r6=>0x0, 0x7}, &(0x7f00000001c0)=0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000200)={r6, 0x1}, 0x8)

[  462.307393][T23813] binder: 23805:23813 unknown command 16448
03:35:51 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0x301, r0)

03:35:51 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  462.361730][T23813] binder: 23805:23813 ioctl c0306201 20000440 returned -22
03:35:51 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x3, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:51 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0x40086602, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

03:35:51 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x4800000000000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  462.529687][T23823] block nbd0: shutting down sockets
03:35:51 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0185500, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:51 executing program 5:
unshare(0x800)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000000c0)={<r2=>0x0, 0x7}, &(0x7f0000000100)=0x8)
setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000140)={r2, 0x1000100000000}, 0x8)
ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, &(0x7f0000000200)={0xa, 0x20, &(0x7f0000000180)="1a5edac0dfab681f08313cd01769db364230ab2e38f2c06b6cf01fb38ecf0bd92171d5293348603e23372437c221d00af56ade63de327836f17ec14bc339223c9c3a951a9b63374f3de6372150e025a9ace0300ab12128fceb2c9fac949c82447bd7d4a27b89234f0e3b49720e4bd041fe981d62033edbab625e5a7a80", {0x7f, 0x5, 0x3234564e, 0x0, 0x1, 0xa3, 0xf, 0x1}})
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r3, 0xffffffffffffffff, 0x10000, 0x0)

[  462.607000][T23835] binder: 23829:23835 unknown command 64
[  462.613561][T23823] block nbd0: shutting down sockets
[  462.637551][T23835] binder: 23829:23835 ioctl c0306201 20000440 returned -22
03:35:51 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0x125d, r0)

[  462.701308][T23841] binder: 23829:23841 unknown command 64
[  462.731258][T23842] binder: 23839:23842 ioctl c0185500 20000440 returned -22
03:35:51 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0x40087602, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

03:35:51 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x5800000000000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  462.763610][T23841] binder: 23829:23841 ioctl c0306201 20000440 returned -22
[  462.767002][T23844] binder: 23839:23844 ioctl c0185500 20000440 returned -22
03:35:51 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x4, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  462.857751][T23847] block nbd0: shutting down sockets
03:35:51 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:51 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0x4020565b, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

03:35:51 executing program 5:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x40200, 0x0)
ioctl$SIOCGETLINKNAME(r1, 0x89e0, &(0x7f00000000c0)={0x4})
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
getpeername$netlink(r1, &(0x7f0000000140), &(0x7f0000000180)=0xc)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r2, r1, 0x10000, 0x0)

03:35:51 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x6800000000000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  463.020918][T23861] binder: 23856:23861 unknown command 0
[  463.026921][T23861] binder: 23856:23861 ioctl c0306201 20000440 returned -22
[  463.033662][T23847] block nbd0: shutting down sockets
[  463.053300][T23862] binder: 23856:23862 unknown command 0
[  463.081648][T23862] binder: 23856:23862 ioctl c0306201 20000440 returned -22
03:35:51 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0x125e, r0)

03:35:51 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:51 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x5, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:52 executing program 5:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000080), &(0x7f00000000c0)=0x8)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xa00080}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@deltaction={0x4c, 0x31, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x38, 0x1, [{0x14, 0x1a, @TCA_ACT_KIND={0xc, 0x1, 'skbmod\x00'}}, {0x10, 0x1d, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x1, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x84}, 0x810)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)

03:35:52 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x8000000000000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:52 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0x4020940d, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

[  463.359471][T23881] binder: 23877:23881 ioctl c018620c 20000440 returned -22
[  463.388570][T23884] binder: 23879:23884 unknown command 0
[  463.398067][T23880] block nbd0: shutting down sockets
[  463.417491][T23884] binder: 23879:23884 ioctl c0306201 20000440 returned -22
[  463.433241][T23889] binder: 23877:23889 ioctl c018620c 20000440 returned -22
[  463.448259][T23893] binder: 23879:23893 unknown command 0
[  463.460907][T23893] binder: 23879:23893 ioctl c0306201 20000440 returned -22
03:35:52 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0xfdfdffff00000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:52 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x6, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  463.523950][T23880] block nbd0: shutting down sockets
03:35:52 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0189436, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:52 executing program 5:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)={0x0, <r2=>0x0, 0x3ff})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)={r2, 0x80000, r1})

03:35:52 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

03:35:52 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0x125f, r0)

03:35:52 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc020660b, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:52 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0xffffffff00000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  463.784746][T23912] binder: 23904:23912 unknown command 0
[  463.838389][T23912] binder: 23904:23912 ioctl c0306201 20000440 returned -22
03:35:52 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0x800454d2, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

03:35:52 executing program 5:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xe0, 0x0)
ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, &(0x7f00000000c0)={0x402, 0x1})
openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x202900, 0x0)
ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000100))
r2 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x40)
tee(r2, 0xffffffffffffffff, 0x10000, 0x0)

[  463.881067][T23919] binder: 23904:23919 unknown command 0
[  463.903779][T23914] block nbd0: shutting down sockets
[  463.918721][T23919] binder: 23904:23919 ioctl c0306201 20000440 returned -22
[  463.983934][T23914] block nbd0: shutting down sockets
03:35:52 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x2}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:52 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0x80045503, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

03:35:52 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306203, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:52 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x7, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:52 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0x1260, r0)

03:35:53 executing program 5:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000080)='vboxnet1ppp1\x00', 0x0, r1)

[  464.302662][T23945] binder: 23940:23945 unknown command 0
[  464.307709][T23939] block nbd0: shutting down sockets
[  464.308403][T23945] binder: 23940:23945 ioctl c0306201 20000440 returned -22
03:35:53 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x3}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:53 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0x80045505, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

[  464.348142][T23949] binder: 23942:23949 ioctl c0306203 20000440 returned -22
[  464.360089][T23950] binder: 23940:23950 unknown command 0
[  464.376307][T23953] binder: 23942:23953 ioctl c0306203 20000440 returned -22
[  464.405067][T23939] block nbd0: shutting down sockets
03:35:53 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306205, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  464.427659][T23950] binder: 23940:23950 ioctl c0306201 20000440 returned -22
03:35:53 executing program 5:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x5, 0x0)
connect$l2tp(r1, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x4, 0x2, 0x0, 0x4, {0xa, 0x4e24, 0x1ff, @dev={0xfe, 0x80, [], 0xb}, 0x4}}}, 0x3a)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r2, 0xffffffffffffffff, 0x10000, 0x0)

03:35:53 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x12, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:53 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0x1261, r0)

03:35:53 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0x8004550f, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

03:35:53 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x4}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  464.672123][T23970] binder: 23959:23970 ioctl c0306205 20000440 returned -22
03:35:53 executing program 5:
unshare(0x600)
r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x40, 0x0)
getsockopt$inet6_buf(r0, 0x29, 0xff, &(0x7f00000000c0)=""/214, &(0x7f0000000200)=0x7b)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x8a182)
tee(r2, 0xffffffffffffffff, 0x10000, 0x0)

[  464.746365][T23976] binder: 23959:23976 ioctl c0306205 20000440 returned -22
[  464.749262][T23975] binder: 23971:23975 unknown command 0
[  464.780560][T23969] block nbd0: shutting down sockets
[  464.793930][T23975] binder: 23971:23975 ioctl c0306201 20000440 returned -22
03:35:53 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0x80045510, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

03:35:53 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc030620c, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:53 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x5}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  464.874543][T23969] block nbd0: shutting down sockets
[  464.880134][T23985] binder: 23971:23985 unknown command 0
[  464.901325][T23985] binder: 23971:23985 ioctl c0306201 20000440 returned -22
03:35:53 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x30, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:53 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0x1262, r0)

03:35:53 executing program 5:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)
getsockopt$inet_dccp_int(r1, 0x21, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

03:35:53 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x6}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  465.104507][T23997] binder: 23995:23997 ioctl c030620c 20000440 returned -22
03:35:53 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0x80045515, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

[  465.223415][T24006] binder: 23995:24006 ioctl c030620c 20000440 returned -22
[  465.232350][T24000] binder: 23998:24000 unknown command 0
[  465.255127][T24005] block nbd0: shutting down sockets
03:35:54 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x7}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  465.270819][T24000] binder: 23998:24000 ioctl c0306201 20000440 returned -22
03:35:54 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306210, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  465.318489][T24016] binder: 23998:24016 unknown command 0
[  465.333880][T24005] block nbd0: shutting down sockets
03:35:54 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

03:35:54 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)

[  465.359156][T24016] binder: 23998:24016 ioctl c0306201 20000440 returned -22
03:35:54 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x38, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:54 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0x1263, r0)

03:35:54 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x12}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  465.592891][T24025] binder: 24021:24025 ioctl c0306210 20000440 returned -22
[  465.614287][T24028] block nbd0: shutting down sockets
03:35:54 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0x80045519, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

[  465.642143][T24032] binder: 24021:24032 ioctl c0306210 20000440 returned -22
[  465.665352][T24037] binder: 24034:24037 unknown command 0
[  465.677700][T24037] binder: 24034:24037 ioctl c0306201 20000440 returned -22
[  465.703899][T24028] block nbd0: shutting down sockets
[  465.708573][T24041] binder: 24034:24041 unknown command 0
03:35:54 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x5d, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:54 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0x1264, r0)

[  465.746113][T24041] binder: 24034:24041 ioctl c0306201 20000440 returned -22
03:35:54 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x30}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:54 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x48, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:54 executing program 5:
unshare(0x600)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r2, 0xffffffffffffffff, 0x10000, 0x0)
fcntl$getown(r0, 0x9)

03:35:54 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0x8004551a, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

03:35:54 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x2, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  465.973124][T24053] block nbd0: shutting down sockets
03:35:54 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x38}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:54 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x58, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  466.073581][T24053] block nbd0: shutting down sockets
03:35:54 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0x80085504, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

[  466.127089][T24067] binder: 24065:24067 unknown command 16448
[  466.161823][T24067] binder: 24065:24067 ioctl c0306201 20000440 returned -22
03:35:55 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0x1265, r0)

03:35:55 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x48}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:55 executing program 5:
unshare(0x700)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/btrfs-control\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f00000000c0)={0x3, 0x7fff, 0x0, {}, 0x8a1, 0x1})
r2 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0xfffffffffffffffb)
setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x1, 0x4)
tee(r2, r0, 0x10000, 0x0)
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x1)

[  466.205429][T24078] binder: 24065:24078 unknown command 16448
[  466.239685][T24078] binder: 24065:24078 ioctl c0306201 20000440 returned -22
03:35:55 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x68, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:55 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x3, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:55 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0x8008550e, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

03:35:55 executing program 5:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x480, 0x0)
ioctl$RTC_UIE_ON(r1, 0x7003)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
openat$cgroup_int(r1, &(0x7f0000000280)='cpuset.mem_exclusive\x00', 0x2, 0x0)
tee(r2, r0, 0x10000, 0x0)
ioctl$IMSETDEVNAME(r2, 0x80184947, &(0x7f00000000c0)={0xb8, 'syz0\x00'})
getsockopt$netlink(r2, 0x10e, 0x7, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=0x1000)
ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, &(0x7f0000000080)={0x91e, 0xffffffff})
getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x7ff, 0x6, 0x3, 0xa4, 0x3f, 0x3, {<r3=>0x0, @in={{0x2, 0x4e24, @rand_addr=0x81}}, 0xfff, 0x270, 0x4000000000000, 0x8, 0x100}}, &(0x7f00000001c0)=0xb0)
setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={r3, 0x6}, 0x8)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000002c0)=0x3)

03:35:55 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x300, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  466.531879][T24091] block nbd0: shutting down sockets
[  466.583647][T24091] block nbd0: shutting down sockets
03:35:55 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x58}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:55 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0x8008551c, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

[  466.611328][T24102] binder: 24096:24102 unknown command 64
[  466.647610][T24102] binder: 24096:24102 ioctl c0306201 20000440 returned -22
03:35:55 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x500, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:55 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0x1267, r0)

[  466.715184][T24114] binder: 24096:24114 unknown command 64
[  466.737307][T24114] binder: 24096:24114 ioctl c0306201 20000440 returned -22
03:35:55 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x4, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:55 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0x8008551d, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

03:35:55 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x68}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  466.817091][T24116] binder: BINDER_SET_CONTEXT_MGR already set
[  466.840741][T24116] binder: 24108:24116 ioctl 40046207 0 returned -16
03:35:55 executing program 5:
unshare(0x10000300)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
flock(r1, 0x0)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)
getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000080), &(0x7f00000000c0)=0x8)

03:35:55 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x600, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:55 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0x80086301, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

[  467.010706][T24125] block nbd0: shutting down sockets
[  467.018272][T24133] binder: 24127:24133 unknown command 0
[  467.036892][T24133] binder: 24127:24133 ioctl c0306201 20000440 returned -22
[  467.067242][T24135] binder: BINDER_SET_CONTEXT_MGR already set
[  467.074053][T24138] binder: 24127:24138 unknown command 0
[  467.079639][T24138] binder: 24127:24138 ioctl c0306201 20000440 returned -22
[  467.113800][T24125] block nbd0: shutting down sockets
03:35:55 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x5, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  467.137410][T24135] binder: 24129:24135 ioctl 40046207 0 returned -16
03:35:56 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x700, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:56 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0x1268, r0)

03:35:56 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x300}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:56 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0x80086601, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

[  467.250900][T24149] binder: 24146:24149 unknown command 0
[  467.301182][T24149] binder: 24146:24149 ioctl c0306201 20000440 returned -22
03:35:56 executing program 5:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x3, 0x2000)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x401)
tee(r0, r1, 0x20000000a, 0xffffffffffffffff)

[  467.384886][T24160] binder: 24146:24160 unknown command 0
[  467.404104][T24155] block nbd0: shutting down sockets
03:35:56 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0x80087601, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

03:35:56 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x1200, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:56 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x500}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  467.478892][T24160] binder: 24146:24160 ioctl c0306201 20000440 returned -22
[  467.524431][T24155] block nbd0: shutting down sockets
03:35:56 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x6, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:56 executing program 5:
unshare(0x401fffd)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)
ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000080))

03:35:56 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0x1269, r0)

03:35:56 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x3000, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:56 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x600}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:56 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

[  467.801244][T24184] binder: 24183:24184 unknown command 0
[  467.844627][T24184] binder: 24183:24184 ioctl c0306201 20000440 returned -22
[  467.856066][T24188] block nbd0: shutting down sockets
03:35:56 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

[  467.944124][T24198] binder: 24183:24198 unknown command 0
[  467.949740][T24198] binder: 24183:24198 ioctl c0306201 20000440 returned -22
03:35:56 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x7, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  468.003918][T24188] block nbd0: shutting down sockets
03:35:56 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x3800, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:56 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0x8038550a, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

03:35:56 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x700}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:56 executing program 5:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)
r2 = semget(0x1, 0x1, 0x1)
semctl$IPC_INFO(r2, 0x7, 0x3, &(0x7f0000000080)=""/235)

03:35:56 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0x1274, r0)

[  468.229802][T24215] binder: 24209:24215 unknown command 0
[  468.253597][T24215] binder: 24209:24215 ioctl c0306201 20000440 returned -22
03:35:57 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0x8108551b, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

[  468.276130][T24224] binder: 24209:24224 unknown command 0
03:35:57 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x4000, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:57 executing program 5:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
syncfs(r0)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)
syz_open_dev$vivid(&(0x7f00000000c0)='/dev/video#\x00', 0x3, 0x2)
recvfrom$rxrpc(r1, 0xfffffffffffffffe, 0x0, 0x2042, &(0x7f0000000080)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x6, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x29}}, 0x7}}, 0x24)

[  468.305813][T24217] block nbd0: shutting down sockets
[  468.306589][T24224] binder: 24209:24224 ioctl c0306201 20000440 returned -22
03:35:57 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x1200}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:57 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x8, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  468.491326][T24217] block nbd0: shutting down sockets
03:35:57 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0045878, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

03:35:57 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x4800, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:57 executing program 5:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)
write$P9_RRENAME(r1, &(0x7f0000000080)={0x7, 0x15, 0x2}, 0x7)

[  468.551388][T24240] binder: 24238:24240 unknown command 0
[  468.583317][T24240] binder: 24238:24240 ioctl c0306201 20000440 returned -22
03:35:57 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0x1276, r0)

[  468.617252][T24243] binder: BINDER_SET_CONTEXT_MGR already set
[  468.654817][T24248] binder: 24238:24248 unknown command 0
[  468.660432][T24248] binder: 24238:24248 ioctl c0306201 20000440 returned -22
03:35:57 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0045878, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

[  468.691674][T24243] binder: 24239:24243 ioctl 40046207 0 returned -16
03:35:57 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x3000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:57 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x12, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:57 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x5800, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  468.839757][T24254] block nbd0: shutting down sockets
03:35:57 executing program 5:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000080)={r1, 0x0, 0x7, 0x0, 0x400})
flock(r0, 0x8)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)

[  468.913580][T24254] block nbd0: shutting down sockets
03:35:57 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x3800}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:57 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc00c5512, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

03:35:57 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0x1277, r0)

03:35:57 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x6800, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  469.014580][T24274] binder: 24268:24274 unknown command 0
[  469.134868][T24274] binder: 24268:24274 ioctl c0306201 20000440 returned -22
03:35:58 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x4000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  469.222089][T24282] block nbd0: shutting down sockets
[  469.235349][T24289] binder: 24268:24289 unknown command 0
[  469.259198][T24289] binder: 24268:24289 ioctl c0306201 20000440 returned -22
03:35:58 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x300, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:58 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x1000000, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:58 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

[  469.299765][T24282] block nbd0: shutting down sockets
03:35:58 executing program 5:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x6, &(0x7f00000000c0)="11dca5055e0bcfec7be0703daf7f4b1d93d855e3923c23c1efe5bbd5a1fee633d0acf0")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)

03:35:58 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0x1278, r0)

03:35:58 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x4800}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:58 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x2000000, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:58 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x500, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:58 executing program 5:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001740)='/dev/autofs\x00', 0x0, 0x0)
setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000001780)=0x7, 0x4)
r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000001640)='/selinux/status\x00', 0x0, 0x0)
ioctl$VIDIOC_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000001680)={0x0, @reserved})
r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
recvmmsg(r3, &(0x7f0000001580)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/130, 0x82}, {&(0x7f00000011c0)=""/244, 0xf4}, {&(0x7f00000012c0)=""/58, 0x3a}, {&(0x7f0000001300)=""/248, 0xf8}, {&(0x7f0000001400)=""/140, 0x8c}], 0x6, &(0x7f0000001540)=""/19, 0x13}, 0x7ff}], 0x1, 0x100, &(0x7f00000015c0))
tee(r3, 0xffffffffffffffff, 0x10000, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file1\x00', 0x0, 0x18}, 0x10)
syz_open_dev$audion(&(0x7f0000001600)='/dev/audio#\x00', 0x5, 0x1)

[  469.679593][T24314] binder: BINDER_SET_CONTEXT_MGR already set
[  469.709172][T24313] block nbd0: shutting down sockets
03:35:58 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105502, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

[  469.752420][T24314] binder: 24311:24314 ioctl 40046207 0 returned -16
[  469.813576][T24313] block nbd0: shutting down sockets
03:35:58 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x5800}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:58 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0x1279, r0)

03:35:58 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x600, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:58 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105512, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

03:35:58 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x3000000, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  470.068736][T24335] block nbd0: shutting down sockets
03:35:58 executing program 5:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
epoll_pwait(r1, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}], 0x6, 0x400, &(0x7f0000000180)={0x2}, 0x8)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x3)
setrlimit(0xd, &(0x7f0000000080)={0x3f, 0x80})
tee(r2, 0xffffffffffffffff, 0x10000, 0x0)

[  470.143697][T24335] block nbd0: shutting down sockets
03:35:59 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x6800}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:59 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x700, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:59 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0x127a, r0)

03:35:59 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185502, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

03:35:59 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x4000000, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  470.437647][T24357] block nbd0: shutting down sockets
03:35:59 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x1200, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:59 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x1000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  470.523816][T24357] block nbd0: shutting down sockets
03:35:59 executing program 5:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x20002, 0x0)
ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f00000000c0)={0x8, 0x8, 0x100000000})
unshare(0x600)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r2, 0xffffffffffffffff, 0x10000, 0x0)

03:35:59 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0x127b, r0)

[  470.788143][T24374] block nbd0: shutting down sockets
03:35:59 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185503, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

03:35:59 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x2000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  470.894413][T24374] block nbd0: shutting down sockets
03:35:59 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x4000, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:59 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x5000000, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:59 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0x127c, r0)

03:35:59 executing program 5:
unshare(0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)

03:35:59 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185504, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

03:35:59 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x6000000, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:35:59 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0xff00, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  471.177425][T24404] block nbd0: shutting down sockets
03:36:00 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x3000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  471.273989][T24404] block nbd0: shutting down sockets
03:36:00 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185505, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

03:36:00 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0x127d, r0)

03:36:00 executing program 5:
unshare(0x10000000)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)

03:36:00 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x7000000, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:00 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x4000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:00 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x1000000, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  471.471053][T24425] block nbd0: shutting down sockets
03:36:00 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185506, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

03:36:00 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x2000000, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:00 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x12000000, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  471.623639][T24425] block nbd0: shutting down sockets
03:36:00 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x5000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:00 executing program 5:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80000, 0x0)
ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f00000000c0)=""/93)
unshare(0x600)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-twofish-3way\x00'}, 0x58)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r2, 0xffffffffffffffff, 0x10000, 0x0)

03:36:00 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0x127e, r0)

03:36:00 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185507, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

03:36:00 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x3000000, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  471.890062][T24457] block nbd0: shutting down sockets
03:36:00 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x30000000, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:00 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x6000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  471.993909][T24457] block nbd0: shutting down sockets
03:36:00 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185508, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

03:36:00 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0x127f, r0)

03:36:00 executing program 5:
unshare(0x0)
r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x428000)
r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2)
move_mount(r0, &(0x7f0000000200)='./file0\x00', r0, &(0x7f0000000240)='./file2\x00', 0x4)
renameat2(r0, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x5)
symlinkat(&(0x7f0000000140)='./file0\x00', r0, &(0x7f00000001c0)='./file1\x00')
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0)
ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000280)={0x12, 0x10, 0xfa00, {&(0x7f0000000180), 0xffffffffffffffff, r1}}, 0x18)
recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000001640)={&(0x7f00000002c0)=@pppol2tpv3, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/141, 0x8d}, {&(0x7f0000001400)=""/244, 0xf4}, {&(0x7f0000001500)=""/178, 0xb2}], 0x4, &(0x7f0000001600)=""/50, 0x32}, 0x100)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x10000, 0x0)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

03:36:00 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x4000000, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:01 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x38000000, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  472.216795][T24484] block nbd0: shutting down sockets
03:36:01 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x7000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:01 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185d00, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

[  472.323681][T24484] block nbd0: shutting down sockets
03:36:01 executing program 5:
unshare(0x200)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)

03:36:01 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x5000000, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:01 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0x4b47, r0)

03:36:01 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x40000000, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:01 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x12000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  472.578417][T24508] block nbd0: shutting down sockets
03:36:01 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0189436, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

03:36:01 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x6000000, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:01 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x30000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:01 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x48000000, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  472.718941][T24508] block nbd0: shutting down sockets
03:36:01 executing program 5:
unshare(0x600)
syz_mount_image$msdos(&(0x7f0000000480)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x7, 0x3, &(0x7f0000000340)=[{&(0x7f00000000c0)="a6189e1a1901bd856fe4d05e998b45", 0xf, 0x706d}, {&(0x7f00000001c0)="0367fbcfe415075ab92d3afa36b84844c327d8270b6bb4cb2c11c0770e7da6b44af1b2dedda8e4be36061348f6fc5361b9cdb8924a63895953a777597b12bff8e81e712a15c0e60585383dce41e707a79246c41d152e0d496aa6b10fb1ce4afb85bd9999e973be7b904fec", 0x6b, 0x8000}, {&(0x7f0000000240)="93f2f756c269004366eaa3ecefc7ade7f6bd3d68adf1fece8a78b6fe02e85ed8148f818e00aae9fdeb43b848f6850f153ba6e94a0297ccc526daac4cff766cca525b98d1ff60870764785878587520b4905d968feb8b78c124e2e447fdef02bcc93107017197fda928fe87183d201a2720529c00673028194213375bf60350dc4c93c715b702604f239d61f75b6c4c0e8cfbc6db54231489da25ecea11c167fb73b4a4d0db69c1f2523c5139ec65f36b51e6d0303230673a9908402462a75f738d09674f46abfa", 0xc7, 0x7}], 0x80008, &(0x7f00000003c0)=ANY=[@ANYBLOB="6e6f646f74732c6e66732c6e6f646f74732c6e6f646f74732c63686503000000656c617865642c736d61636b66736465663d2f6465762f696e7075839f6d696365002c726f6f74636f6e746578743d726f6f742c636f6e746578743d73797374656d5f752c6f626a5f757365723d2f6465762f696e7075742f6d696365002c646f6e745f6d6561737572652c6673636f6e746578743d756e636f6e66696e65645f752c61707072616973655f747970653d696d617369672c00"])
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0xe1a, &(0x7f0000000100)="b30436000376aa93974aa955cdc6b59784d844b9786ca5c7c99093080600fc9e25e22ec7ece66a02232048ab5c31485d8e0b2fb4e2f9e2a04a01331999c3336b1737ea6ede7889f7c7c293254e122155167c00a4a362aaad4d78fb5055377133a011a2e65cb9dcb5254380b2f8f24852e1b01f009cff30f155d7f7b27c617cd0b52afdec4cc14e562638025ce6898c81118caf50ef2a04169128e589b3643bd0c9edaa909e50dda0ac328d494368425dea5f")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r1, r1, 0x10000, 0x0)

03:36:01 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc018ff00, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

03:36:01 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0x4b49, r0)

03:36:01 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x7000000, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:01 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x58000000, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:01 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x38000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:01 executing program 5:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x80)
ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f00000000c0))
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r2, 0xffffffffffffffff, 0x10000, 0x0)
socketpair$tipc(0x1e, 0x7, 0x0, &(0x7f0000000280))

[  473.071891][T24549] block nbd0: shutting down sockets
03:36:01 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0205648, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

03:36:01 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x68000000, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  473.163795][T24549] block nbd0: shutting down sockets
03:36:02 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x40000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:02 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0x4c01, r0)

03:36:02 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x8000000, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:02 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0xfdfdffff, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:02 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc020660b, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

[  473.421214][T24575] block nbd0: shutting down sockets
03:36:02 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x48000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  473.485016][T24575] block nbd0: shutting down sockets
03:36:02 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x12000000, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:02 executing program 5:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f00000000c0)={0x0, {0x8, 0x7808}})
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{<r2=>0x0}, {}, {}, {}]})
ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000180)={r2})
r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r3, 0xffffffffffffffff, 0x10000, 0x0)

03:36:02 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0x5414, r0)

03:36:02 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0306201, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

03:36:02 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0xfffffdfd, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:02 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x58000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  473.801628][T24601] block nbd0: shutting down sockets
[  473.853657][T24601] block nbd0: shutting down sockets
03:36:02 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc040563e, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})

03:36:02 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x100000000000000, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:02 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x40000000, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:02 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x68000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:02 executing program 5:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
write$vnet(r1, &(0x7f0000000180)={0x1, {&(0x7f0000000080)=""/32, 0x20, &(0x7f00000002c0)=""/142, 0x2, 0x1}}, 0x68)
ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000000c0)="0b65991a5d2f94ff4bcc1becc0cd8f4791a9263ec6cb62a7fd9896f2a2e3276da6220ae0043df8a35436a447e971070dd5a3c829851eca51d18335a32dd94b99f5fb40730c604df508902faf8edd66a2c44dbb01c385b323dbf87f503dbc0f005baa9176c35a8abfd80c286ad9480f7b9613487f2ea147bc57b4f170e38262c70eaa815974fe371e5b5375db3eb8b8023c38713bf3ded86078d245b4c2771fd42f8d750a9e5038e57476a62517bbd8")
tee(r1, r0, 0x10004, 0x4)

03:36:02 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0x541b, r0)

03:36:02 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x2})

03:36:02 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0xfdfdffff, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:02 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0xfdfdffff}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:03 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x200000000000000, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  474.201233][T24633] block nbd0: shutting down sockets
03:36:03 executing program 5:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
rt_sigreturn()
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)

03:36:03 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x3})

[  474.333690][T24633] block nbd0: shutting down sockets
[  474.383545][T24646] binder: BINDER_SET_CONTEXT_MGR already set
03:36:03 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0xff000000, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:03 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x300000000000000, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:03 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x4})

03:36:03 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0x5421, r0)

[  474.451639][T24646] binder: 24641:24646 ioctl 40046207 0 returned -16
03:36:03 executing program 5:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xffffffffffffff05, 0xa0900)
tee(r1, 0xffffffffffffffff, 0x10000, 0x4)

03:36:03 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0xfffffdfd}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:03 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x400000000000000, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  474.651141][T24660] block nbd0: shutting down sockets
03:36:03 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0xfffffdfd, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:03 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x5})

[  474.761775][T24660] block nbd0: shutting down sockets
03:36:03 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x500000000000000, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:03 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x6})

[  474.848599][T24685] binder: BINDER_SET_CONTEXT_MGR already set
[  474.871780][T24685] binder: 24673:24685 ioctl 40046207 0 returned -16
03:36:03 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x100000000000000, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:03 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x100000000000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:03 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0x5450, r0)

03:36:03 executing program 5:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x3b3, 0x4000)
connect$llc(r1, &(0x7f00000000c0)={0x1a, 0x313, 0x7, 0x2, 0x3, 0xf4e, @remote}, 0x10)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r2, 0xffffffffffffffff, 0x10000, 0x0)

03:36:03 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x7})

[  475.116574][T24697] block nbd0: shutting down sockets
03:36:03 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x600000000000000, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  475.164347][T24707] binder: BINDER_SET_CONTEXT_MGR already set
[  475.199124][T24707] binder: 24698:24707 ioctl 40046207 0 returned -16
[  475.233568][T24697] block nbd0: shutting down sockets
03:36:04 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x200000000000000, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:04 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x8})

03:36:04 executing program 5:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x103040)
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000100)={'broute\x00', 0x0, 0x0, 0x0, [], 0x3, &(0x7f00000000c0)=[{}, {}], 0x0, [{}, {}, {}]}, 0xa8)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)

03:36:04 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x200000000000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:04 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0x5451, r0)

03:36:04 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x700000000000000, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:04 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x300000000000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:04 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x300000000000000, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:04 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x300})

03:36:04 executing program 5:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000200)=0x3)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)

[  475.606641][T24734] block nbd0: shutting down sockets
[  475.655325][T24745] binder: BINDER_SET_CONTEXT_MGR already set
[  475.661385][T24745] binder: 24739:24745 ioctl 40046207 0 returned -16
03:36:04 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x1200000000000000, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  475.713844][T24734] block nbd0: shutting down sockets
03:36:04 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x400000000000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:04 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x400000000000000, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:04 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0x5452, r0)

03:36:04 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x3000000000000000, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:04 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x500})

03:36:04 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x500000000000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  475.976749][T24764] block nbd0: shutting down sockets
03:36:04 executing program 5:
unshare(0x800)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x800)
write$P9_RMKNOD(r1, &(0x7f0000000080)={0x14, 0x13, 0x2, {0x88, 0x2, 0x8}}, 0x14)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14)
ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000100)={0x8, &(0x7f00000000c0)=[{}, {}, {}, {}, {<r2=>0x0}, {}, {}, {}]})
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000140)={r2, 0x2})

[  476.100039][T24764] block nbd0: shutting down sockets
03:36:04 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x500000000000000, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:04 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x600})

03:36:05 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0x5460, r0)

03:36:05 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x3800000000000000, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:05 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x600000000000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  476.367328][T24790] block nbd0: shutting down sockets
03:36:05 executing program 5:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000080)={0x3, 0x34, "679091e4d2a317107061264fa5cb26e1ded126e390d2e54872ab7db27a9f07142f85932b84270a8dae61d2c25a882b59134a31d9"})
r1 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x804f, 0x420002)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000100)={<r2=>0x0, 0x68a}, &(0x7f0000000140)=0x8)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000180)={r2, 0x8000, 0x4, [0xd05a, 0xfffffffffffffffb, 0x0, 0x4]}, &(0x7f00000001c0)=0x10)
r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r3, 0xffffffffffffffff, 0x10000, 0x0)
write$FUSE_INIT(r3, &(0x7f0000000200)={0x50, 0x0, 0x6, {0x7, 0x1f, 0x100000001, 0x10000, 0x7f, 0x6, 0x4, 0x7fff}}, 0x50)

03:36:05 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x600000000000000, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:05 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x700})

03:36:05 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x4000000000000000, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:05 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x700000000000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  476.487117][T24790] block nbd0: shutting down sockets
03:36:05 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0x6364, r0)

03:36:05 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x1200000000000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:05 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x4000})

03:36:05 executing program 5:
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x42000, 0x0)
unshare(0x600)
ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f00000000c0)={0x9, 0x3, 0x2, 0x40})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r2 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0)
tee(r2, 0xffffffffffffffff, 0x10000, 0x0)

[  476.725962][T24820] block nbd0: shutting down sockets
03:36:05 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x4800000000000000, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:05 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x700000000000000, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  476.817329][T24826] Unknown ioctl 1075343564
[  476.833516][T24820] block nbd0: shutting down sockets
03:36:05 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x3000000000000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:05 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0xff00})

03:36:05 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0x8912, r0)

03:36:05 executing program 5:
unshare(0x800000003fffffe)
r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x2, 0x400000)
getsockopt$netlink(r0, 0x10e, 0x2, &(0x7f00000000c0)=""/54, &(0x7f0000000100)=0x36)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
ioctl$FS_IOC_ENABLE_VERITY(r1, 0x6685)
getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000140))
ioctl$TUNSETLINK(r2, 0x400454cd, 0x7)
ioctl$LOOP_CLR_FD(r2, 0x4c01)
tee(r2, 0xffffffffffffffff, 0x10000, 0x0)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000200)={0xfff}, 0x4)

03:36:05 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x5800000000000000, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  477.100822][T24844] block nbd0: shutting down sockets
03:36:05 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x800000000000000, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:05 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x3800000000000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  477.183757][T24844] block nbd0: shutting down sockets
03:36:06 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x1000000})

03:36:06 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0x8933, r0)

03:36:06 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x6800000000000000, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:06 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x4000000000000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:06 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x1200000000000000, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:06 executing program 5:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x100000005, &(0x7f0000000040)="11d899019a6395a8f17ae8db42d32e032c152c0c3d4787f10581d99a7a1077070079f07742eacac11272f17979f132318eb8374454ced2bdfa27bb9370fc0427047dc10f2e7e7a2fa8f7d8de2b5add5fd70096198ae94abaf1157016ecfb8ae1e34b989b703bd44f80fecb24ab72af0af07624a75b3812ca633c9eb286aeead48e7da7ab62ae1ed627a99ad2861679e74999d78fd9f9e9e03c7e56e0992630bfc951be9f22f620772cfa239ed8e073c020798abd1d69efc882467685465aff6de5cb6955c15676c007e25145bf92c98ec6718800d6ae9b0bf0817825ce3b9696641532a8f4a6e500d1b8da048bcfd9b8a8744fd7d92f89")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
getpeername$tipc(r1, &(0x7f0000000140)=@name, &(0x7f0000000180)=0x10)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)
socket$inet(0x2, 0x6, 0x5)

03:36:06 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x2000000})

[  477.425536][T24870] block nbd0: shutting down sockets
03:36:06 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x4000000000000000, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  477.563458][T24870] block nbd0: shutting down sockets
[  477.575647][T24886] binder: BINDER_SET_CONTEXT_MGR already set
03:36:06 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x8000000000000000, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  477.604897][T24886] binder: 24878:24886 ioctl 40046207 0 returned -16
03:36:06 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab01, r0)

03:36:06 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x3000000})

03:36:06 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x4800000000000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:06 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0xfdfdffff00000000, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:06 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0xfdfdffff00000000, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:06 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x4000000})

03:36:06 executing program 5:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
write$apparmor_current(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x8f)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40405515, &(0x7f0000000240)={0x2, 0x1, 0x1, 0x80000001, '\x00', 0xffffffff})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40405515, &(0x7f0000000280)={0x2, 0x5, 0x7, 0x6, '\x00', 0x3f})
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)
ioctl$FIBMAP(r0, 0x1, &(0x7f00000002c0)=0x1000)
setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000001c0)=0x5, 0x4)
r2 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0xcec, 0x400)
ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)=<r3=>0x0)
openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/validatetrans\x00', 0x1, 0x0)
ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000300)=0x4)
getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000140)=0x4)
write$FUSE_LK(r1, &(0x7f00000000c0)={0x28, 0xffffffffffffffff, 0x2, {{0x899, 0xffff, 0x0, r3}}}, 0x28)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={<r4=>0x0}, &(0x7f0000000380)=0xc)
kcmp(r4, r3, 0x5, r0, r2)

03:36:06 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x5800000000000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:06 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab02, r0)

03:36:06 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:06 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0xff00000000000000, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:07 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x5000000})

[  478.196401][T24928] block nbd0: shutting down sockets
03:36:07 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x6800000000000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:07 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x400, 0x100)
ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000080)={0xfffffffffffff000, 0x4, 0x2})
unshare(0x600)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11eb9a05702bcfec7be070")
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r2, 0xffffffffffffffff, 0x10000, 0x0)

[  478.264438][T24939] binder: 24936:24939 unknown command 0
[  478.293966][T24928] block nbd0: shutting down sockets
[  478.326440][T24939] binder: 24936:24939 ioctl c0306201 20000440 returned -22
03:36:07 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab03, r0)

03:36:07 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x6000000})

03:36:07 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  478.390428][T24948] binder: 24936:24948 unknown command 0
[  478.396259][T24948] binder: 24936:24948 ioctl c0306201 20000440 returned -22
03:36:07 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x630c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  478.475677][T24950] binder: BINDER_SET_CONTEXT_MGR already set
[  478.541573][T24950] binder: 24946:24950 ioctl 40046207 0 returned -16
[  478.568130][T11776] block nbd0: Receive control failed (result -22)
03:36:07 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x8000000000000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  478.592624][T24962] binder: 24958:24962 unknown command 0
[  478.612740][T24962] binder: 24958:24962 ioctl c0306201 20000440 returned -22
[  478.633629][T24963] binder: 24961:24963 unknown command 0
03:36:07 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x7000000})

03:36:07 executing program 5:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)
syz_open_dev$midi(&(0x7f0000002c80)='/dev/midi#\x00', 0x2, 0x40)
write$binfmt_elf64(r1, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x7, 0x3, 0x5, 0x8, 0x3, 0x3f, 0x0, 0x388, 0x40, 0x350, 0x5, 0x8f, 0x38, 0x2, 0x0, 0x0, 0x8}, [{0x7, 0x1, 0x6, 0x4000000000, 0x5f4, 0x3, 0x1, 0x9}, {0x6, 0x6, 0x4, 0x9, 0x100000000, 0x6, 0x3, 0x3}], "15be28d5fdb4", [[], [], [], [], [], [], [], []]}, 0x8b6)
accept4$packet(r1, &(0x7f0000000940)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000980)=0x14, 0x80800)
sendmsg$xdp(r1, &(0x7f0000002c40)={&(0x7f00000009c0)={0x2c, 0x4, r2, 0x26}, 0x10, &(0x7f0000002bc0)=[{&(0x7f0000000a00)="70d80ee618b40de05c15f43dadedb56db4bee048e235543006c573e3492b65d4e61cccc24aafb48d391e8b7e3d1461b16ee6203b45b528b7fe0bc60039f9b2c9af4ebbfdbdd93850a1532eabe14559", 0x4f}, {&(0x7f0000000a80)="ebc96f7ad58354f9d8822d1586f0d4b288121f6395fa260119686d09591c2a03929392f6feda6b612a87c16a4f5641ebb62e4cf6f69ce2fb3f16c3d6b497bf5cb0fc600fcc16779abc0af874d1dbe4eed5e92a62b50907bf261290a68f2501dde667a7192363d266035cc02133b28ce98933598ce2ba70e96d71742bdcd61c073785d15a9bef50ea2e83c9976770f728e733d89a7d6b6799e4a33778a5d8305c8c9e770df3c73ebf723924dc0e56d2d4548b", 0xb2}, {&(0x7f0000000b40)="6f00534ce04c0d6cac9e0945282a973286b4b9a0144803b123f1ba5743ac7c6e2061196222e8e97f483711e691625f5cc1540ead657c1d02bca049dc1de15b176312b1", 0x43}, {&(0x7f0000000bc0)="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", 0x1000}, {&(0x7f0000001bc0)="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", 0x1000}], 0x5, 0x0, 0x0, 0x8080}, 0x1)

[  478.641329][T24956] block nbd0: shutting down sockets
[  478.644808][T24964] binder: 24958:24964 unknown command 0
[  478.691380][T24964] binder: 24958:24964 ioctl c0306201 20000440 returned -22
[  478.702000][T24963] binder: 24961:24963 ioctl c0306201 20000440 returned -22
[  478.752446][T24973] binder: 24961:24973 unknown command 0
[  478.758242][T24973] binder: 24961:24973 ioctl c0306201 20000440 returned -22
03:36:07 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x630c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:07 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab04, r0)

03:36:07 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x8000000})

03:36:07 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0xfdfdffff00000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:07 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x630d, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  478.903919][T24981] binder: 24980:24981 unknown command 0
[  478.931860][T24981] binder: 24980:24981 ioctl c0306201 20000440 returned -22
[  478.989028][T24987] binder: 24980:24987 unknown command 0
[  478.996617][T24986] block nbd0: shutting down sockets
03:36:07 executing program 5:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x94597f47fad814fd)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00')
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100440c}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, r2, 0x500, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe244}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x635a}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x40000)
r3 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$RTC_AIE_OFF(r3, 0x7002)
tee(r3, 0xffffffffffffffff, 0x10000, 0x0)

[  479.031567][T24987] binder: 24980:24987 ioctl c0306201 20000440 returned -22
03:36:07 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x40000000})

[  479.095422][T24994] binder: 24989:24994 unknown command 0
[  479.104114][T24995] block nbd0: shutting down sockets
[  479.131668][T24994] binder: 24989:24994 ioctl c0306201 20000440 returned -22
03:36:07 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x630d, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  479.160117][T24996] binder: BINDER_SET_CONTEXT_MGR already set
[  479.173599][T24996] binder: 24991:24996 ioctl 40046207 0 returned -16
03:36:08 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab05, r0)

03:36:08 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0xffffffff00000000}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:08 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0xff000000})

[  479.202682][T25003] binder: 24989:25003 unknown command 0
[  479.229663][T25003] binder: 24989:25003 ioctl c0306201 20000440 returned -22
03:36:08 executing program 5:
unshare(0x17fffffd)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
getpeername$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x6, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x26}, @initr0={0x18, 0x0, 0x0, 0x0, 0x66, 0x0, 0x0, 0x0, 0x7ff}, @jmp={0x5, 0x4f, 0xf, 0x9, 0x9, 0x0, 0xfffffffffffffffc}, @generic={0x0, 0x9e9, 0x0, 0x7f, 0xffffffff}, @alu={0x7, 0xe0f, 0xb, 0xa, 0x7, 0xfffffffffffffffe, 0xffffffffffffffff}], &(0x7f00000000c0)='GPL\x00', 0x1, 0xe3, &(0x7f0000000100)=""/227, 0x41100, 0x3, [], r2, 0xa, r1, 0x8, &(0x7f0000000280)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0x5, 0x6, 0xeaa}, 0x10}, 0x70)
ioctl(r1, 0x8000, &(0x7f0000000380)="ecaed0de6e2a1fb31fdc704bfc34e63e4908bdcd6640b2b6838dafdd")
tee(r0, r1, 0x800, 0xa)
accept$inet(r1, 0x0, &(0x7f00000003c0))
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)

03:36:08 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40046302, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  479.322163][T25005] binder: 25004:25005 unknown command 0
[  479.401883][T25005] binder: 25004:25005 ioctl c0306201 20000440 returned -22
[  479.445547][T25013] block nbd0: shutting down sockets
03:36:08 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66642a85, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:08 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x100000000000000})

[  479.487200][T25021] binder: 25004:25021 unknown command 0
[  479.497383][T25021] binder: 25004:25021 ioctl c0306201 20000440 returned -22
[  479.516535][T25022] binder: BC_ACQUIRE_RESULT not supported
[  479.538195][T25022] binder: 25018:25022 ioctl c0306201 20000440 returned -22
[  479.543511][T25013] block nbd0: shutting down sockets
[  479.590614][T25030] binder: BC_ACQUIRE_RESULT not supported
03:36:08 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40046302, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:08 executing program 5:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)
bind$bt_sco(r1, &(0x7f0000000080)={0x1f, {0x43b54e8e, 0x9, 0x800, 0xfbd, 0x1, 0x54be}}, 0x8)

03:36:08 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x70742a85, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:08 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab06, r0)

[  479.644175][T25030] binder: 25018:25030 ioctl c0306201 20000440 returned -22
03:36:08 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x200000000000000})

03:36:08 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40046304, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  479.765159][T25035] binder: BC_ACQUIRE_RESULT not supported
[  479.770952][T25035] binder: 25034:25035 ioctl c0306201 20000440 returned -22
[  479.848821][T25039] block nbd0: shutting down sockets
03:36:08 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  479.884639][T25048] binder: BC_ACQUIRE_RESULT not supported
[  479.904829][T25048] binder: 25034:25048 ioctl c0306201 20000440 returned -22
[  479.923712][T25039] block nbd0: shutting down sockets
03:36:08 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x300000000000000})

[  479.967060][T25053] binder: 25049:25053 unknown command 0
03:36:08 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab07, r0)

[  480.026267][T25053] binder: 25049:25053 ioctl c0306201 20000440 returned -22
03:36:08 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40046304, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:08 executing program 5:
unshare(0x600)
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x4000, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000180)={<r3=>0x0, 0x0, 0x30, 0x9, 0xd2}, &(0x7f00000001c0)=0x18)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={r3, @in={{0x2, 0x4e22, @empty}}, 0xffffffffffffffff, 0x400, 0x8, 0xb86e}, 0x98)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x4000, 0x0)
tee(r2, 0xffffffffffffffff, 0x10000, 0x0)
getdents(r2, &(0x7f00000000c0)=""/72, 0x48)

[  480.071183][T25058] binder: 25049:25058 unknown command 0
03:36:08 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x73682a85, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  480.128269][T25058] binder: 25049:25058 ioctl c0306201 20000440 returned -22
[  480.194311][T25060] block nbd0: shutting down sockets
03:36:09 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40046307, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:09 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x400000000000000})

[  480.242173][T25060] block nbd0: shutting down sockets
[  480.262497][T25069] binder: 25065:25069 unknown command 0
[  480.286244][T25069] binder: 25065:25069 ioctl c0306201 20000440 returned -22
03:36:09 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab08, r0)

[  480.354477][T25076] binder: 25065:25076 unknown command 0
03:36:09 executing program 5:
r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00')
sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10100041}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r1, 0x330, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1d}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x2}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x64}}, 0x0)
unshare(0x600)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000280)={0x80, 0x1, 0x6, 0x9, 0x9, 0x19, 0xffff, 0x7f, <r3=>0x0}, &(0x7f00000002c0)=0x20)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000300)={r3, 0xfffffffffffffff8, 0x30, 0x3, 0x4}, &(0x7f0000000340)=0x18)
r4 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r4, 0xffffffffffffffff, 0x10000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r4, 0xc0605345, &(0x7f0000000080)={0x9, 0x2, {0x2, 0x2, 0x4, 0x3, 0x80000001}})

03:36:09 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40046307, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  480.417558][T25076] binder: 25065:25076 ioctl c0306201 20000440 returned -22
[  480.433339][T25081] binder: 25075:25081 unknown command 0
[  480.456768][T25081] binder: 25075:25081 ioctl c0306201 20000440 returned -22
03:36:09 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x77622a85, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:09 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x500000000000000})

[  480.498724][T25086] binder: 25075:25086 unknown command 0
[  480.504825][T25082] block nbd0: NBD_DISCONNECT
[  480.509531][T25082] block nbd0: Send disconnect failed -6
[  480.557831][T25086] binder: 25075:25086 ioctl c0306201 20000440 returned -22
[  480.582964][T25080] block nbd0: Disconnected due to user request.
[  480.615895][T25093] binder: 25088:25093 unknown command 0
[  480.639907][T25080] block nbd0: shutting down sockets
[  480.643674][T25093] binder: 25088:25093 ioctl c0306201 20000440 returned -22
03:36:09 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:09 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x600000000000000})

[  480.676354][T25099] binder: 25088:25099 unknown command 0
[  480.687601][T25099] binder: 25088:25099 ioctl c0306201 20000440 returned -22
03:36:09 executing program 5:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)=<r2=>0x0)
sched_setscheduler(r2, 0x5, &(0x7f00000000c0)=0x1)
dup3(r0, r0, 0x80000)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)

03:36:09 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:09 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x77682a85, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  480.772094][T25104] block nbd0: NBD_DISCONNECT
[  480.783370][T25104] block nbd0: Send disconnect failed -6
[  480.804670][T25080] block nbd0: Disconnected due to user request.
[  480.846513][T25103] binder: 25102:25103 unknown command 0
[  480.863500][T25080] block nbd0: shutting down sockets
03:36:09 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x700000000000000})

[  480.906235][T25103] binder: 25102:25103 ioctl c0306201 20000440 returned -22
[  480.932657][T25108] binder: 25102:25108 unknown command 0
[  480.941166][T25108] binder: 25102:25108 ioctl c0306201 20000440 returned -22
03:36:09 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab09, r0)

[  480.996272][T25117] binder: 25113:25117 unknown command 0
[  481.030109][T25117] binder: 25113:25117 ioctl c0306201 20000440 returned -22
03:36:09 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x4008630a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:09 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x2, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:09 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x800000000000000})

[  481.061049][T25124] binder: 25113:25124 unknown command 0
[  481.086449][T25124] binder: 25113:25124 ioctl c0306201 20000440 returned -22
03:36:09 executing program 5:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x181000)
ioctl$TCSETSW(r1, 0x5403, &(0x7f00000000c0)={0x0, 0x81, 0x100000000, 0xe5, 0x2, 0x8001, 0x2, 0x100000000, 0xfff, 0xaff7, 0x80000000, 0x6})
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r2, 0xffffffffffffffff, 0x10003, 0x0)

[  481.163155][T25123] block nbd0: shutting down sockets
03:36:10 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x4008630a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  481.251440][T25135] binder: BC_ATTEMPT_ACQUIRE not supported
[  481.263563][T25123] block nbd0: shutting down sockets
[  481.284214][T25138] binder_alloc: 25127: binder_alloc_buf, no vma
[  481.296434][T25135] binder: 25130:25135 ioctl c0306201 20000440 returned -22
03:36:10 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x4000000000000000})

[  481.321914][T25141] binder: BC_ATTEMPT_ACQUIRE not supported
[  481.332779][T25141] binder: 25130:25141 ioctl c0306201 20000440 returned -22
03:36:10 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab0a, r0)

03:36:10 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x3, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:10 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40086310, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  481.363613][T25142] binder: BC_ATTEMPT_ACQUIRE not supported
[  481.378152][T25142] binder: 25137:25142 ioctl c0306201 20000440 returned -22
[  481.426730][T25145] binder: BC_ATTEMPT_ACQUIRE not supported
[  481.492165][T25145] binder: 25137:25145 ioctl c0306201 20000440 returned -22
03:36:10 executing program 5:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)
getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000100), &(0x7f00000000c0)=0x4)

03:36:10 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0xff00000000000000})

03:36:10 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40086310, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  481.573726][T25152] binder: BINDER_SET_CONTEXT_MGR already set
[  481.581918][T25156] binder: 25150:25156 unknown command 0
[  481.608906][T25152] binder: 25149:25152 ioctl 40046207 0 returned -16
[  481.638909][T25156] binder: 25150:25156 ioctl c0306201 20000440 returned -22
[  481.647811][T25153] block nbd0: shutting down sockets
03:36:10 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x4, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  481.694949][T25164] binder: 25150:25164 unknown command 0
[  481.718641][T25164] binder: 25150:25164 ioctl c0306201 20000440 returned -22
[  481.735799][T25166] binder: 25165:25166 unknown command 0
[  481.753618][T25153] block nbd0: shutting down sockets
03:36:10 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x2})

03:36:10 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x400c630e, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  481.784447][T25166] binder: 25165:25166 ioctl c0306201 20000440 returned -22
[  481.817459][T25171] binder: 25165:25171 unknown command 0
03:36:10 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0x40045431, r0)

03:36:10 executing program 5:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x400, 0x0)
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)

[  481.861713][T25171] binder: 25165:25171 ioctl c0306201 20000440 returned -22
03:36:10 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x5, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:10 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x400c630e, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  482.002935][T25177] binder: 25176:25177 unknown command 0
[  482.008933][T25177] binder: 25176:25177 ioctl c0306201 20000440 returned -22
03:36:10 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x3})

[  482.053519][T25186] binder: 25176:25186 unknown command 0
[  482.072846][T25175] block nbd0: shutting down sockets
[  482.080594][T25186] binder: 25176:25186 ioctl c0306201 20000440 returned -22
03:36:10 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x400c630f, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:11 executing program 5:
io_setup(0x2, &(0x7f00000000c0)=<r0=>0x0)
socketpair(0x15, 0x2, 0x100000, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
r2 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x1, 0x80)
io_cancel(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000140)="741b7506f127c7b32e03b1b993d0b493df1b74b7c0d913769999ebc8b7ad01ff9337efa8a55690afdcaa8b986bd1f05d3bc89703122da21f3a5f515b177e2362fd95a83f4bc2979272cd3e7ac9a3903de659e28f079e9ba306eda0d488c4918c2b52994829e79796ff5de7113d0ea18409ded400ec4d5a9bdebb76", 0x7b, 0x2, 0x0, 0x3, r2}, &(0x7f0000000240))
unshare(0x600)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r4 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r4, 0x118, 0x1, &(0x7f0000000080)=0x100000001, 0x4)
tee(r4, 0xffffffffffffffff, 0x10000, 0x0)

03:36:11 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x6, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  482.163600][T25175] block nbd0: shutting down sockets
[  482.174683][T25191] binder: 25188:25191 unknown command 0
[  482.203670][T25191] binder: 25188:25191 ioctl c0306201 20000440 returned -22
[  482.243704][T25197] binder: 25188:25197 unknown command 0
[  482.272114][T25197] binder: 25188:25197 ioctl c0306201 20000440 returned -22
03:36:11 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0x400454ca, r0)

03:36:11 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x400c630f, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:11 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x4})

[  482.340120][T25203] binder: 25196:25203 unknown command 0
[  482.404356][T25203] binder: 25196:25203 ioctl c0306201 20000440 returned -22
[  482.428447][T25205] block nbd0: shutting down sockets
[  482.454172][T25211] binder: 25196:25211 unknown command 0
03:36:11 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)

[  482.476251][T25211] binder: 25196:25211 ioctl c0306201 20000440 returned -22
[  482.503883][T25205] block nbd0: shutting down sockets
03:36:11 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x5})

03:36:11 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x7, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  482.544054][T25212] binder: 25208:25212 unknown command 0
[  482.550081][T25212] binder: 25208:25212 ioctl c0306201 20000440 returned -22
03:36:11 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0x40049409, r0)

03:36:11 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  482.616967][T25217] binder: 25208:25217 unknown command 0
[  482.656888][T25217] binder: 25208:25217 ioctl c0306201 20000440 returned -22
03:36:11 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x6})

03:36:11 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  482.745410][T25225] binder: BINDER_SET_CONTEXT_MGR already set
[  482.751466][T25225] binder: 25224:25225 ioctl 40046207 0 returned -16
[  482.765524][T25226] block nbd0: shutting down sockets
03:36:11 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x12, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  482.824386][T25233] binder: 25230:25233 unknown command 0
[  482.830036][T25233] binder: 25230:25233 ioctl c0306201 20000440 returned -22
[  482.873636][T25226] block nbd0: shutting down sockets
03:36:11 executing program 5:
unshare(0x600)
r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff)
write$P9_RSTAT(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="700000007d02000000690001040700000080010000000500000000000000d0b12db8bd7e3923b807000020010200000005000000b30000000000000010002f6465762f696e7075742f6d6963650010002f6465762f696e7075742f6d6963650010002f6465762f696e7075742f6d6963650006002a626465762c913a3bbdb36b60e10c58a9279f184114cbc59a2a0ceb776668bbc3c6b7b424ef7fd36011fe2987aa002dc38e67c605ddc80866587f637f915535fccdddacc5796680a6bbbf5b497412da4bfebbd35548852e3db6d39e6f87852a6b98a8b8d256d5027105c03de237a421a949d4"], 0x70)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r2, 0xffffffffffffffff, 0x10000, 0x0)

[  482.914709][T25237] binder: 25235:25237 unknown command 0
[  482.920726][T25240] binder: 25230:25240 unknown command 0
[  482.942098][T25237] binder: 25235:25237 ioctl c0306201 20000440 returned -22
[  482.952419][T25240] binder: 25230:25240 ioctl c0306201 20000440 returned -22
03:36:11 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0x40081271, r0)

[  482.987111][T25243] binder: 25235:25243 unknown command 0
03:36:11 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40106309, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:11 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x7})

[  483.061993][T25243] binder: 25235:25243 ioctl c0306201 20000440 returned -22
03:36:11 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x30, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  483.110596][T25250] block nbd0: shutting down sockets
03:36:12 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40106309, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:12 executing program 5:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)
prctl$PR_SET_ENDIAN(0x14, 0x3)
ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x9, @raw_data="b673ed757405d230fda11bc5dfe00722b863cb455c468cf404eb7a9e7aa6c8e92e9b2dd17a3c59af8a0b5a0e93fc47f5ed8e226fb4488e59edc13c041e0a6fbe1b48769f487495c7a172d9d8c54b5eb3091eec6a9f001a9aa972e3dc53f6f7b398236716629353b7be5237603ff3307793c9426f8f493fedfc004acf79d8d9106f85d24e4f13799ea21f061eeb561bf5098f829b360c12439b050cf5d6e154455f642f3754bdbeef8164ba7fa18f6baf00d31d990fa631d9381f893d993ac8f232a8301af029233b"})
epoll_create(0x5)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612)

[  483.200545][T25259] binder: 25255:25259 unknown command 0
[  483.218681][T25250] block nbd0: shutting down sockets
03:36:12 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x8})

03:36:12 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x38, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:12 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0x40086602, r0)

[  483.276976][T25259] binder: 25255:25259 ioctl c0306201 20000440 returned -22
[  483.323421][T25266] binder: 25255:25266 unknown command 0
[  483.337856][T25266] binder: 25255:25266 ioctl c0306201 20000440 returned -22
[  483.346007][T25265] binder: 25264:25265 unknown command 0
[  483.390770][T25265] binder: 25264:25265 ioctl c0306201 20000440 returned -22
03:36:12 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:12 executing program 5:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc008e389eacf5bab4dec7dec42ad66d8aef9d7ba9ca9e970000e26eff2cc89345de1194883e7616e361142303857eea27354f6cd20e9b6931c211a16200d0291c379ae059629570bfca4bd4bf791cb522a9b65eb7a95b49f416379219f7e48dff31143a408347d94140365dbcb80dc5ed9c8c89fc3440126f21ecb0c9b7a7f32b40204b1c40fb6e6434434f97de286a94013c70e1867e976033c9efca917cbebd14a415bc44d699a0eceabf1e9ffbd90de11ebad07f7bc56d47a6fa1e9842f4e24ff54d5eb7720609421819b0cd3ba5a473d432e6453e9ef3c3ed6c944bbeb1ea81f3f5c6cd6c231b000000")
getsockname$unix(r0, &(0x7f0000000040)=@abs, &(0x7f00000001c0)=0x6e)
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000002c0), 0x13f, 0x9}}, 0x20)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000380)=<r2=>0x0)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={[], 0x6, 0x2, 0x263, 0x8000, 0x7ae, r2})

[  483.467951][T25276] binder: 25264:25276 unknown command 0
[  483.499063][T25276] binder: 25264:25276 ioctl c0306201 20000440 returned -22
[  483.539065][T25275] block nbd0: shutting down sockets
03:36:12 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x300})

03:36:12 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406302, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:12 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  483.603729][T25275] block nbd0: shutting down sockets
03:36:12 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x48, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:12 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0x40087602, r0)

03:36:12 executing program 5:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca5055e0bcfecabbc7d900c46c367d48099d47eeac3627be070")
syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x501000)
r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x8042)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x1f0, r2, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa6f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000001}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x82}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_LINK={0xb0, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x20000004}, 0x800)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)

[  483.785130][T25298] binder: 25294:25298 unknown command 1077961474
[  483.807579][T25301] binder_alloc: 25296: binder_alloc_buf, no vma
[  483.816011][T25298] binder: 25294:25298 ioctl c0306201 20000440 returned -22
03:36:12 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x500})

[  483.829126][T25303] binder: 25294:25303 unknown command 1077961474
[  483.838155][T25303] binder: 25294:25303 ioctl c0306201 20000440 returned -22
[  483.871933][T25302] block nbd0: shutting down sockets
03:36:12 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406302, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:12 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x58, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:12 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  483.943793][T25302] block nbd0: shutting down sockets
[  484.050422][T25319] binder: 25313:25319 unknown command 1077961474
03:36:12 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x600})

03:36:12 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0x40101283, r0)

[  484.101751][T25319] binder: 25313:25319 ioctl c0306201 20000440 returned -22
[  484.112872][T25318] binder: 25316:25318 unknown command 1077961475
[  484.134441][T25318] binder: 25316:25318 ioctl c0306201 20000440 returned -22
03:36:12 executing program 5:
unshare(0x800)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)

03:36:12 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x68, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  484.152123][T25323] binder: 25313:25323 unknown command 1077961474
[  484.157708][T25325] binder: 25316:25325 unknown command 1077961475
[  484.201634][T25325] binder: 25316:25325 ioctl c0306201 20000440 returned -22
[  484.233695][T25323] binder: 25313:25323 ioctl c0306201 20000440 returned -22
[  484.294840][T25329] block nbd0: shutting down sockets
03:36:13 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:13 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406304, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:13 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x700})

[  484.383993][T25329] block nbd0: shutting down sockets
03:36:13 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x300, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  484.443634][T25339] binder: 25337:25339 unknown command 1077961475
[  484.456179][T25339] binder: 25337:25339 ioctl c0306201 20000440 returned -22
[  484.465666][T25344] binder: 25341:25344 unknown command 1077961476
03:36:13 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0x401070c9, r0)

[  484.511077][T25348] binder: 25337:25348 unknown command 1077961475
[  484.525917][T25344] binder: 25341:25344 ioctl c0306201 20000440 returned -22
[  484.539973][T25348] binder: 25337:25348 ioctl c0306201 20000440 returned -22
03:36:13 executing program 5:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x200000, 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000100)=0x1000, &(0x7f00000001c0)=0x4)
unshare(0x600)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
setsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000000080)=0x1, 0x4)
tee(r2, 0xffffffffffffffff, 0x10000, 0x0)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000140)={<r3=>0x0, 0x9}, &(0x7f0000000180)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000200)={r3, 0x4, 0x45, "c7663a594218b5143fb496a34347ab051a7523f2773c35422bcffed892f39743d449955e0feafcc25d098d11fe9558cf379469244f464c8e85b9c39d6dc31c828562362994"}, 0x4d)
socket$inet(0x2, 0x3, 0x8)

03:36:13 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x4000})

[  484.569440][T25351] binder: 25341:25351 unknown command 1077961476
03:36:13 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x500, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  484.662226][T25351] binder: 25341:25351 ioctl c0306201 20000440 returned -22
[  484.680683][T25352] block nbd0: shutting down sockets
03:36:13 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406304, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:13 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406305, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:13 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0xff00})

[  484.834608][T25352] block nbd0: shutting down sockets
03:36:13 executing program 5:
unshare(0x600)
r0 = shmget(0x1, 0x3000, 0x8, &(0x7f0000ffc000/0x3000)=nil)
shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x1000)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r2, 0xffffffffffffffff, 0x10000, 0x0)

03:36:13 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x600, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  484.886193][T25372] binder: 25367:25372 unknown command 1077961477
[  484.909220][T25372] binder: 25367:25372 ioctl c0306201 20000440 returned -22
[  484.955673][T25371] binder: 25370:25371 unknown command 1077961476
[  484.993546][T25380] binder: 25367:25380 unknown command 1077961477
03:36:13 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0x401070ca, r0)

[  484.994438][T25371] binder: 25370:25371 ioctl c0306201 20000440 returned -22
03:36:13 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x1000000})

[  485.044618][T25380] binder: 25367:25380 ioctl c0306201 20000440 returned -22
03:36:13 executing program 5:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0xa0)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)

[  485.085862][T25384] binder: 25370:25384 unknown command 1077961476
03:36:13 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  485.131884][T25384] binder: 25370:25384 ioctl c0306201 20000440 returned -22
[  485.182331][T25385] block nbd0: shutting down sockets
03:36:14 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406305, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:14 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x700, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  485.274188][T25385] block nbd0: shutting down sockets
03:36:14 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x2000000})

[  485.304773][T25398] binder: 25396:25398 unknown command 1077961478
[  485.313371][T25398] binder: 25396:25398 ioctl c0306201 20000440 returned -22
[  485.342183][T25400] binder: 25396:25400 unknown command 1077961478
03:36:14 executing program 5:
unshare(0x604)
r0 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x7fff, 0x2001)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000200)=0xccc3)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000240)={'NETMAP\x00'}, &(0x7f0000000280)=0x1e)
tee(r2, 0xffffffffffffffff, 0x10000, 0x0)
writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)="00dc919b24961b128a3628e6bb421813b7c198ca00b1b14629fb922759267439f0b0e4a74325d3bfeb96cf0d700e1ace988332216ab445ed6d38d859c2160ef5f11459984f99ff66411f9dcfcff1ae75e8982dfec3db344a56abbf9717c9a79d92970574931494b6f1bdc38e367c26c00a6f64dd9123e5f64a01917357cda7830d4e04fc1c7c1256724911153cd044446b9bf02465d4e7f890c9255195e360fc5f9143fbe24d0dca7a24f1512b5bc2246f3d7e29f2939551b43ea38b4b5656c4d2eed799ded4e899f6c1174d0e35ae2439fe6bcc0f0c1b60babb6c8ef8c99c34b797", 0xe2}], 0x1)

03:36:14 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0x401070cd, r0)

[  485.373306][T25400] binder: 25396:25400 ioctl c0306201 20000440 returned -22
[  485.411212][T25404] binder: 25399:25404 unknown command 1077961477
03:36:14 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406307, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:14 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x3000000})

[  485.450957][T25404] binder: 25399:25404 ioctl c0306201 20000440 returned -22
03:36:14 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x1200, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  485.531209][T25413] binder: 25399:25413 unknown command 1077961477
[  485.571785][T25413] binder: 25399:25413 ioctl c0306201 20000440 returned -22
[  485.626586][T25414] block nbd0: shutting down sockets
[  485.645904][T25422] binder: 25416:25422 unknown command 1077961479
03:36:14 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  485.686598][T25422] binder: 25416:25422 ioctl c0306201 20000440 returned -22
[  485.705971][T25427] binder: 25416:25427 unknown command 1077961479
[  485.724045][T25427] binder: 25416:25427 ioctl c0306201 20000440 returned -22
03:36:14 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x4000000})

03:36:14 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x3000, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  485.735579][T25414] block nbd0: shutting down sockets
03:36:14 executing program 5:
unshare(0x20403)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)
getpeername$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000100)=0x1c)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000140)=0xfffffffffffffff7, 0x4)
ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000080)=""/33)

03:36:14 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  485.815340][T25431] binder: 25430:25431 unknown command 1077961478
[  485.830982][T25431] binder: 25430:25431 ioctl c0306201 20000440 returned -22
03:36:14 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0x401870c8, r0)

[  485.879865][T25438] binder: 25430:25438 unknown command 1077961478
[  485.937042][T25438] binder: 25430:25438 ioctl c0306201 20000440 returned -22
03:36:14 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x5000000})

03:36:14 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406307, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  485.984114][T25444] binder: 25436:25444 unknown command 1077961490
[  485.995161][T25447] binder: BINDER_SET_CONTEXT_MGR already set
[  486.001212][T25447] binder: 25439:25447 ioctl 40046207 0 returned -16
[  486.007862][T25444] binder: 25436:25444 ioctl c0306201 20000440 returned -22
[  486.053055][T25450] binder: 25436:25450 unknown command 1077961490
[  486.060614][T25446] block nbd0: shutting down sockets
[  486.083343][T25450] binder: 25436:25450 ioctl c0306201 20000440 returned -22
03:36:14 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x3800, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:14 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406330, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  486.144403][T25446] block nbd0: shutting down sockets
[  486.172418][T25457] binder: 25455:25457 unknown command 1077961479
03:36:14 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x6000000})

03:36:15 executing program 5:
unshare(0x600)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffff9c, 0xae41, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000001840)='/dev/input/event#\x00', 0x4, 0x400)
r3 = socket$bt_cmtp(0x1f, 0x3, 0x5)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
r5 = socket(0xa, 0x5, 0x4)
r6 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000001880)='/proc/self/attr/exec\x00', 0x2, 0x0)
r7 = openat$vfio(0xffffffffffffff9c, &(0x7f00000018c0)='/dev/vfio/vfio\x00', 0xc0201, 0x0)
r8 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x5)
r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001d80)='/dev/rfkill\x00', 0x2, 0x0)
r10 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001940)='/dev/vhost-vsock\x00', 0x2, 0x0)
r11 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001980)='/selinux/enforce\x00', 0x200002, 0x0)
r12 = syz_open_dev$mouse(&(0x7f00000019c0)='/dev/input/mouse#\x00', 0x99, 0x8000)
r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001a40)={&(0x7f0000001a00)='./file0\x00', 0x0, 0x10}, 0x10)
r14 = open$dir(&(0x7f0000001a80)='./file0\x00', 0x2501, 0x54)
r15 = mq_open(&(0x7f0000001ac0)='/dev/input/mice\x00', 0x42, 0x4, &(0x7f0000001b00)={0x6, 0x9, 0x6, 0xfffffffffffffff8, 0x3, 0x0, 0x1, 0x4})
r16 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001b40)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0)
r17 = getpid()
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000001b80)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000001c80)=0xe8)
lstat(&(0x7f0000001cc0)='./file0\x00', &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x0, 0x0, <r19=>0x0})
r20 = accept4$alg(0xffffffffffffff9c, 0x0, 0x0, 0x80000)
r21 = fsmount(0xffffffffffffffff, 0x1, 0x0)
r22 = socket$inet_tcp(0x2, 0x1, 0x0)
r23 = accept(r0, 0x0, &(0x7f0000001f80)=0xffffffffffffffbf)
r24 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000001fc0)='/selinux/relabel\x00', 0x2, 0x0)
sendmsg$unix(r0, &(0x7f0000002100)={&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001780)=[{&(0x7f0000000140)="efbfe2a4d0392ebad2652feb008b2d708d44d613a1063ca210c89d6764a2be3cb81e5b8d3231067201fc988e39a82ea6d0d51ce952b290b007eaa3ecd8926b8cdc3e6c1d678458a19b7634aef8df0af3f3ae52b062425ffa44a19432b6558251809261709cc3173e396da60af25959571a5e965260952e8d05388c7c6c5371b55d171957b22e5d7fa9c2afd00b30498e9d71c3e1e37ef9709a0ff27c9f2995b8c1c286c852d6cb40b57251dc74728c9266e6a9fb3bc17421edb5f1dcf3c7903c3689759fec8985d46dca8d3a9c2a08ab6b832b0dadfc95c5209be1d13bfa107e28ef67e62e8d566fbc9091eaebd256b6", 0xf0}, {&(0x7f0000000240)="b7c52a45ead2fc7ee6fe2b27abfd526acf6aa200ec406c4ec5472528c4108c8eb1957eaf1652", 0x26}, {&(0x7f0000000280)="c634d5841b4ddceddd48a4ce39153d307cf958b0fa7cad920a59f110e265da2ab11f9f79a8614973b7f9359eff0ce7c068ebe8ddd6ee53a9edacc8c43d8c9b9982e0d79abd18ffe893c33ebe8c879d777fc41ffc7572e48dcb5ee8877bb797999e88ab0e96bee9e1a9b65a007cddd16a5155ed68767464278d6152977e158fbedc2790044909ffbcab80b2b1080a673e71dfab92c26227b5766cc0f29931dff2732e1e270b35c0dcf3a03224813fc5632b19a799df0715379202bd13cd03616ddd67de9b7033faec38f0193b2c2d7ecbe11b56d68d84bd84c5f7e25f264348bca0865df4c308edd0b7e109e168fd73afaaf0", 0xf2}, {&(0x7f0000000380)="dd1833723e333ade55715cbc685a820961f87233a4ddb22d238aadbd1b6232c4a856f50b5c5451b8e0dc3cc647274dc94033bd095ca7bb6e5eafc064efe4198bb4b6de7fb224485375b90d83ebdbd89cb89323e21b669b2a6c779b24b05064df942ca1efcf654f8629ee01193d01d81bd1ff16bed2d1e9841446d042cd2f7be3b3a73b93396761eb1fcaaafdbce1caa6e391ccabe503ee0db2c3889ee61b83b39cba61fe0a7bf6539c3c1d93f3302c25", 0xb0}, {&(0x7f0000000440)="798eabf9603f3cd24bcc853985a1882072212d385d0dbb32b79dce04b1f95fc865ef8166d67cd36d9d27f57b0d3315de6a3261b44a1eaa1ef476d41898144c105b903898d27820bc2e2c19c3da6d0429922b02f79759d966763b2c4917267d05bdf812a0046c8f0d86c414c506346fa56fc96afe4d0ef4c6a7ce998a212b8e848361cc10e24acbc70f1cfeec12eff7f8e74f477ab7ed45aeeb8b9ae16cf68420807f9e65b4a23b0032abafeb642b6928a29132b99b8e5f3ed0fa346cb2bb8109ea939d", 0xc3}, {&(0x7f0000000540)="596afa72eefb54c8630a70b0e3b34e5e3ff7efe146d7dd2d275e35c9d8666dd2e03295e599b8b9f98c7e7874aa407ba84c46687581d99cb3844d253dc9077df013bbe1b3f0a59e09b19d22611627b1f7d8db5af6da1cf76f8331d7cc21a9162f780c87a50545791521ec2ab886007b653baf942d2c3f850cf0c05e1de36abeb15c1bfda009967abfcac37c1b83d1cab26a93ea4d5324f99b49f7c9c55083365cbd05801ed50c512d5e0f077a0cdfa365d96d75656084f80020a7968804962cccdad6e1fe", 0xc4}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000001640)="db3cf0507d364df6318363f0b3ec635faf2e368b928492209200b035d2318a34594a5b5445c900521a753dc17ea583f84ed2eefc810dd9d964b2737aa28941a32b464e33a780c616585bd6e9e75d7226db568657dcfb0425fb2ea9e2a01a17f1436d2cda0f5e3a8dc403a6b53b22a70354e301b1022126957fdeb7738bc5937ea6a2fb2c57af690a88942f3de6c0985123186f7f8674c64c5f815c2809373ea6d805864198447b44c3b5e1099bf1aa252ff709c731a0a5e1bb38930c075f4e08b29d64f3aa1dd43be0ab07874304b58e1c5e3304207cf6fe36fa1bd40360370d9630b3366e41086b576f0aaf9e66feeb66528a57eb", 0xf5}, {&(0x7f0000001740)="5a4a5b2e8bc3a6d8432ec281abf71cb9c0566acc966cba8dca972563a082e583ec255a3fb7573c9e7e9f2e2beddcfcd8cc2c82a27b45577508d2cf", 0x3b}], 0x9, &(0x7f0000002000)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0000000024000000e6ffff00000000", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r13, @ANYRES32=r14, @ANYRES32=r15, @ANYRES32=r16, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r17, @ANYRES32=r18, @ANYRES32=r19, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r20, @ANYRES32=r21, @ANYRES32=r22, @ANYBLOB="0000000100"/20, @ANYRES32, @ANYRES32=r23, @ANYRES32=r24, @ANYBLOB='\x00\x00\x00\x00'], 0xd8, 0x40000}, 0x4000)
r25 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r25, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r26 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r26, 0xffffffffffffffff, 0x10000, 0x0)

[  486.191335][T25457] binder: 25455:25457 ioctl c0306201 20000440 returned -22
[  486.260278][T25462] binder: 25455:25462 unknown command 1077961479
03:36:15 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0x401870cb, r0)

[  486.312196][T25462] binder: 25455:25462 ioctl c0306201 20000440 returned -22
[  486.332907][T25468] binder: 25465:25468 unknown command 1077961520
[  486.339336][T25468] binder: 25465:25468 ioctl c0306201 20000440 returned -22
03:36:15 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  486.407676][T25475] binder: BINDER_SET_CONTEXT_MGR already set
[  486.435254][T25475] binder: 25464:25475 ioctl 40046207 0 returned -16
03:36:15 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x7000000})

[  486.467171][T25474] block nbd0: shutting down sockets
03:36:15 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x4000, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  486.539586][T25483] binder: 25481:25483 unknown command 1077961480
[  486.561970][T25483] binder: 25481:25483 ioctl c0306201 20000440 returned -22
03:36:15 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406338, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  486.588670][T25491] binder: 25481:25491 unknown command 1077961480
[  486.597973][T25474] block nbd0: shutting down sockets
03:36:15 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x8000000})

[  486.637778][T25491] binder: 25481:25491 ioctl c0306201 20000440 returned -22
03:36:15 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:15 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0x401870cc, r0)

[  486.790764][T25502] binder: 25498:25502 unknown command 1077961528
03:36:15 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x4800, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:15 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x40000000})

[  486.851633][T25502] binder: 25498:25502 ioctl c0306201 20000440 returned -22
[  486.890610][T25509] binder: 25506:25509 unknown command 1077961490
03:36:15 executing program 5:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
pause()
r1 = dup3(r0, r0, 0x0)
setsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000080)=0x8, 0x4)
syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r0, 0xffffffffffffffff, 0x706b, 0x10000)

[  486.933073][T25510] binder: 25498:25510 unknown command 1077961528
[  486.942965][T25509] binder: 25506:25509 ioctl c0306201 20000440 returned -22
[  486.960163][T25508] block nbd0: shutting down sockets
[  486.979804][T25510] binder: 25498:25510 ioctl c0306201 20000440 returned -22
[  486.987935][T25514] binder: 25506:25514 unknown command 1077961490
[  487.027671][T25514] binder: 25506:25514 ioctl c0306201 20000440 returned -22
[  487.043575][T25508] block nbd0: shutting down sockets
03:36:15 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406348, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:15 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x5800, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:15 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0xff000000})

03:36:15 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0x4020940d, r0)

03:36:15 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x4040ff00, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:16 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x100000000000000})

[  487.317776][T25536] binder: 25532:25536 unknown command 1078001408
[  487.321208][T25533] block nbd0: shutting down sockets
[  487.341692][T25535] binder: 25531:25535 unknown command 1077961544
[  487.342836][T25536] binder: 25532:25536 ioctl c0306201 20000440 returned -22
[  487.348092][T25535] binder: 25531:25535 ioctl c0306201 20000440 returned -22
[  487.364738][T25534] binder: BINDER_SET_CONTEXT_MGR already set
[  487.374165][T25539] binder: 25531:25539 unknown command 1077961544
[  487.386403][T25534] binder: 25530:25534 ioctl 40046207 0 returned -16
[  487.408439][T25539] binder: 25531:25539 ioctl c0306201 20000440 returned -22
[  487.417391][T25533] block nbd0: shutting down sockets
03:36:16 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x6800, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:16 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406358, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:16 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x200000000000000})

03:36:16 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0x80041284, r0)

03:36:16 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  487.700155][T25556] binder: 25551:25556 unknown command 1077961560
[  487.702126][T25554] block nbd0: shutting down sockets
[  487.732144][T25556] binder: 25551:25556 ioctl c0306201 20000440 returned -22
[  487.774494][T25562] binder: 25551:25562 unknown command 1077961560
[  487.799318][T25562] binder: 25551:25562 ioctl c0306201 20000440 returned -22
[  487.803584][T25554] block nbd0: shutting down sockets
03:36:16 executing program 5:
r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x0, 0x2)
setsockopt$inet_buf(r0, 0x0, 0x3d, &(0x7f0000000100)="0405a2e6d3221d7e127d7d7b110a6c16cc8006985bf66ccb17191c214f443969fa511b8fed5e032462c619790a649a9d27fd740be7ffcb92d7d0a607b6cf552ce862f10adc239d02d6792a6fdbe9d030e40b6b12721a8814bd4df0950d93c2d9056aebc87ed0992ffbd5f6acd878038704c57933095ea02822d902480c413bf4e7af50cc44565195449dfb1ccc030e119af8113eb419a51aaa41b6a07e408e99e5cfe48ea50768e6bee19df423ee0ad65f1a6acbdd6122e0dc70afef48641f51691f553a109a7185511f7f", 0xcb)
unshare(0x600)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
ioctl$TUNSETGROUP(r0, 0x400454ce, r2)

03:36:16 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x1000000, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:16 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x300000000000000})

03:36:16 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:16 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406368, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:16 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0x80041285, r0)

[  488.097380][T25568] block nbd0: shutting down sockets
[  488.101325][T25575] binder: 25572:25575 unknown command 1077961576
[  488.109207][T25575] binder: 25572:25575 ioctl c0306201 20000440 returned -22
03:36:16 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x2000000, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:16 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:16 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x400000000000000})

[  488.171193][T25583] binder: 25572:25583 unknown command 1077961576
[  488.193697][T25583] binder: 25572:25583 ioctl c0306201 20000440 returned -22
[  488.203386][T25568] block nbd0: shutting down sockets
03:36:17 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:17 executing program 5:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$FICLONE(r0, 0x40049409, r0)
r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000001c0)=@gcm_256={{0x303}, "a3b53382d65e90a5", "987bc9ca6856810f13fcee4fedde7afce96818988575c05ed63c5c18122ee688", "1711006b", "9cfec0413ec7d21f"}, 0x38)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
prctl$PR_GET_NAME(0x10, &(0x7f0000000080)=""/251)
r2 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x40000000)
setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000000), 0x4)
tee(r2, 0xffffffffffffffff, 0x10000, 0x0)

03:36:17 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0x80045430, r0)

03:36:17 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:17 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x3000000, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:17 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x500000000000000})

03:36:17 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  488.596006][T25603] block nbd0: shutting down sockets
03:36:17 executing program 5:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x200000)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000080)}}, 0x10)

[  488.662034][T25617] binder: BINDER_SET_CONTEXT_MGR already set
03:36:17 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x600000000000000})

[  488.709414][T25603] block nbd0: shutting down sockets
03:36:17 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  488.729706][T25617] binder: 25610:25617 ioctl 40046207 0 returned -16
03:36:17 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x4000000, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:17 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:17 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0x800454d2, r0)

03:36:17 executing program 5:
unshare(0x600)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/user\x00', 0x2, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x400, 0x82)
ioctl(r0, 0x1, &(0x7f0000000040)="11dca5055e0bcfec7be070")
syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x10003, 0x0)

03:36:17 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x700000000000000})

03:36:17 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:17 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  489.076260][T25641] binder: BINDER_SET_CONTEXT_MGR already set
[  489.084694][T25636] block nbd0: shutting down sockets
[  489.105593][T25641] binder: 25632:25641 ioctl 40046207 0 returned -16
[  489.180966][T25636] block nbd0: shutting down sockets
03:36:18 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:18 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x5000000, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:18 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x800000000000000})

03:36:18 executing program 5:
unshare(0x600)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x1, 0x0)
ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x9, 0x5e9, 0x81, 0x4, 0x6, 0x5, 0x9, 0x4, 0x200, 0x9, 0xb6e, 0xffffffffffff707b, 0x0, 0x7f, 0x9, 0xfffffffffffffff9, 0x8001, 0x6, 0x400, 0x7, 0x2, 0x1, 0x6, 0x9, 0x1f, 0x0, 0x1, 0x6e, 0x53c, 0x30000000, 0x38000, 0x80000001]})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000180)="11dca5055e0bcfec7be070")
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r2, 0xffffffffffffffff, 0x10000, 0x0)

03:36:18 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:18 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0x80081270, r0)

03:36:18 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  489.492162][T25674] block nbd0: shutting down sockets
03:36:18 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x6000000, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:18 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x4000000000000000})

03:36:18 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:18 executing program 5:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0)

[  489.594204][T25674] block nbd0: shutting down sockets
03:36:18 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:18 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0x80081272, r0)

03:36:18 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:18 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0xff00000000000000})

[  489.863401][T25696] block nbd0: shutting down sockets
03:36:18 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x7000000, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  489.933754][T25696] block nbd0: shutting down sockets
03:36:18 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:18 executing program 5:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$can_raw(0x1d, 0x3, 0x1)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)

03:36:18 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0x80086301, r0)

03:36:18 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:18 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x2})

03:36:18 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x12000000, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  490.232603][T25721] block nbd0: shutting down sockets
03:36:19 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:19 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:19 executing program 5:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup3(r0, r0, 0x80000)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000080)=0x1)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r2, r1, 0x4000000010000, 0x0)

[  490.343635][T25721] block nbd0: shutting down sockets
03:36:19 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x3})

03:36:19 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0x80086601, r0)

[  490.384654][T25736] binder: BINDER_SET_CONTEXT_MGR already set
[  490.417852][T25736] binder: 25735:25736 ioctl 40046207 0 returned -16
03:36:19 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x30000000, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:19 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:19 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x4})

03:36:19 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  490.598718][T25752] block nbd0: shutting down sockets
03:36:19 executing program 5:
unshare(0x600)
r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x101000)
ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f00000000c0)={0x8})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r2, 0xffffffffffffffff, 0x10000, 0x0)

[  490.677031][T25752] block nbd0: shutting down sockets
03:36:19 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0x80087601, r0)

[  490.800692][T25767] binder_alloc: 25755: binder_alloc_buf, no vma
03:36:19 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x38000000, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:19 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:19 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x5})

03:36:19 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:19 executing program 5:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x1f}, 0x8)
fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000080)='/dev/input/mice\x00', &(0x7f0000000100)='./file0\x00', r0)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r2, 0x25, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x24044800)

[  491.068152][T25780] block nbd0: shutting down sockets
03:36:19 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x6})

03:36:19 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:19 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x40000000, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  491.164559][T25780] block nbd0: shutting down sockets
03:36:20 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xc0045878, r0)

03:36:20 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:20 executing program 5:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r0, 0xffffffffffffffff, 0x10000, 0x0)

03:36:20 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:20 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x7})

[  491.449789][T25806] block nbd0: shutting down sockets
03:36:20 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x48000000, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:20 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  491.567687][T25806] block nbd0: shutting down sockets
03:36:20 executing program 5:
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x64100, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f00000000c0)={0x1f, 0xfff, 0x8})
unshare(0x600)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r2, 0xffffffffffffffff, 0x10000, 0x0)

03:36:20 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xc0045878, r0)

03:36:20 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x8})

03:36:20 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  491.723158][T25832] binder_alloc: 25826: binder_alloc_buf, no vma
03:36:20 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:20 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x58000000, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  491.837040][T25837] block nbd0: shutting down sockets
03:36:20 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x300})

[  491.923652][T25837] block nbd0: shutting down sockets
03:36:20 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:20 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xc0101282, r0)

03:36:20 executing program 5:
unshare(0x600)
r0 = syz_init_net_socket$ax25(0x3, 0x7, 0xf1)
pwrite64(r0, &(0x7f0000002440)="c6e3fb1aad96d5aa5ab499a70544839c2ef5dbbcc0f7b2aa7f576cd472315df96d9da9a7476bf23cd97e487d485a73341853a8ca3c011dbe1a72aecde32de8a82f1b4157bf5edb8350eee0a05ebaf5a1c49d7481e0d797c96e68423aed66187fca6e778131effad613392c49445c507858040d1048108c282f511fe78a3b02f500090ff6115f073f87f85c0e0b4454bff60a4b8922e44db73b8519536c45cb7e08cb7d85500330eb2a80108108ba3181a294d8ddb6466a94c3befe61975e269744c8f3f9fc77e60280c61c4715ddc575283e3973af3db024f740b4604c5ef3d564795723a0c5504aec", 0xe9, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$radio(&(0x7f00000010c0)='/dev/radio#\x00', 0x0, 0x2)
r3 = getpgrp(0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000002300)={{0x7, 0x0, 0x0, 0x58ed, 'syz1\x00', 0x7ff}, 0x6, 0x20, 0xfffffffffffffffa, r3, 0xa, 0xffff, 'syz1\x00', &(0x7f0000001100)=['\x00', '/dev/input/mice\x00', 'eth1bdev][bdev+cpuset\\^{\x00', '\xd2\x00', 'user\x00', ']\x00', '/dev/input/mice\x00', '/dev/input/mice\x00', '/dev/input/mice\x00', '/dev/input/mice\x00'], 0x73, [], [0x1, 0x100000001, 0x3, 0x2]})
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r4 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
write$UHID_INPUT(r1, &(0x7f0000001200)={0x8, "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", 0x1000}, 0x1006)
socket$inet_udplite(0x2, 0x2, 0x88)
pwritev(r4, &(0x7f0000001180)=[{&(0x7f0000000080)="93718686988803b3bffe232041f0e8186f801d51bfdd8751ced2e2e64057403f3420853e19343e30a0d73caa2b40fd2df1563bd8cb991f53f94fa36592e0b5b5462fad37e62195714f115b131b2c01e64a8ed1099798de59667e025ebfd16b4211dbc01973b3a209f479a10a0ea233f0efa4c845189c94b5a6fbae04edf04864f35f6744166693698cf8a6b5006ff1d6df3b3b4c0e222acc504e3f021fd4c4dc335c2391353f303c87311ef941574bf03e7c804e11bf22848942e54c5b7b7fe13b7eb7891791c22b53e53102d1343b25ae1c285ba5f3ff08e0e68b355b32a630bc97dc3a39929fdd956aebaa12580237dbc49987c77e6157265eb2f44a505ba0210811fa2ef86c581419a63f45f2403732f268293abd0ea522e4841aad9f5ac470e665482890dbdbc3d9a02fec8c81ab222d63553c9b05bca4d278a0a1143c9b7078a8a54ad0f695fd25803396a5a31df71bc81360443419037d93081d503084d7910e880e1c649abe9a9f17980e16251bef75fa525b92b4cb77ebcb756520aadbdd7ec13cb2ffc15d9e53d2bb4c295c7c9c18702bed34fc909965d4f96ea70a4f84752b48049c94fcb1b3b263d8d44bb9657e3cbf77cc04b735faddae5797cbd9321564f7d60e44506469814f8d54cb4800a40e96f8057193cf4dc9f6993a1bd22114ac8df0d3313aa19dc993b16ff2d49110e0b67a02e0b843473c22b3cec7a87613aee82caba0a1b0df3e22a5cbc2aa0139cf8e14c98b861191642ab220a7e43be18b808bdf5488d0d1dc2fdc3dac21063d184b50d5530e71134ed4094e0543467e056427b1dfccd3dae619ac1672c5131ce704a3cf21fb4f415c1d203a378f7da2619c64f7f317269ed5f806699f05f4e3ce65966e326da181e06ed94e4b45a02d8e2e908c338b0821170c7292120116b5495a5c05f9110004e5b271026f8c2ad4ff91c15e830debad8001fa54f299218e0cc4275e0212ff107383cf1ae527797ef2ef6180c07d5840087fe247866fa1782d018b8bb53ffe68567298f2482aaf44bb742962916a39854d39e86f19560d6d23cfb7bd248079a3bc9d588ea34ef822451fe7b68912d73c88936ea30d4429c5256e0bb134e286fc3ab9a1870640628b506051401c70b814639866d8cfc30c96867f8094c03b14062d0ed60df943fd4077abea2d6abdf91c25a7d7402acaddce4684c57ed73d7ec72437754d387ad60d4adf70fbe43aa28e874f5e576d29f7a7dd1eaa0919d89c404b7553cbda866b3d0b5e4171310c0dd06d6cef847078a9f56a2a344d300504a8c22c480d038aa9bc001a51f1031e91349a8b568ff98b553d3443c6da6100a1f4cad1317f2b83a8a99c2828c21c9db216a8819af435d59c74d04e81154c376924b56da08c2364ed63b4e0014ce95493d024a39bf46ee442206fa8a825f32bcf0e7ebce1f3bf9dcb39b6286b4cb9d5332c079572a44808cd34e1bdebeb6dbf0db5ebe02b397d3f598ebcfc7d4f01984b084cc70e6dcf06e570214966c3d3ecbd810afcd381abf0d8b9247752b2ce61d8de99de7ec8e28a53def7f1adcbe6ae05353ed9769fe9a1de8cb672306620881cbceac90337f839b3a59c5fa9fb82f6cc07b93a6f053ca90a822869feff92eaa9787028b2ffece0c384885c349580a3205ba477bbf5c7b6f7af5992db131903dfebc26f42bbd216a791c0a4ea72ed5360ed52bbc68e1e762eb6d9993abaf2889e77edd13ad1841f66760f32965b2fbd1e928481cfe539d5032ba361dab4a1545981302700b28d3a1a36be10e6fa5de958798395a60b8198b941b130072c33ded94f0f7910d38ce12cd8fdde866d5fb9e5a6b0d6af57cbc286c024423eac69c6ff1535cd27b2a81fb7878f4887328e0001a27ae4b956977e4aa1e54babf82d0d720bbaf36cecd8b95efb88db3476324704957cf26d2217daad99fddea737debeeb8dc9ac7d83e3126603fac1246448a68557768c500a785ac50405ed9fc56c3a0a2fa020133fc848409002a8fdbe3aa6f0d6874636ab43ea213a2f738a9f5279bf45037bb7e5bfa4843d331f10b35097cb032237bc7b35a824f17131a0cead90e2e73cb01333b7151e0bd584a354928ec9eaec409c1557f05c72d551a4c8673c8d8cff7405405ee3cb6d55d7ae0abaa5fc1bad7935033d37f61a510f02e919ee1ef304da249f97d6d6ed84780b682dd5d3a42141f83b57358ac80025a0a20a11cf8e284acae42d6836570ea5588ae4d3eab582d55a4b1696826c679194708621d1264616d9283bda9fba498e719e23fd1cf0c79be62c8aa4f21523f328ee4c66740c2aee96b52be50e8e57e9ca14f6eb73d66df4e5fac23ca122ff771025fd94afd11e85f91f115ecbe64d6bb073b229bb152c73a2be30a0026407545acb1f13848ab5050e183696c8182bdd3f704d58aefe1e791ba0869e303bb06485313b6d54b6cd256fb4b4e94dc0511a2d22c479979b22acb54fddc1984674d383353e3c0739139e4088f61a74e5ce09e6246c87983203ba6acdf6569224ff31eac70e9990bf8bf0340719e4c9b7be3b81f03c7adc70afca684316c58daf87bf32fdf1cb4dc0755c127d5bbdab9afb9780cf6028a4540ff73004ba3093d9b9e95af9de3d541adc8288e88530cd407d4d8cf25adf9b55bbec215bc1f41b51eb50baa47dfd4c2c6ad86f730db67ceff4aa6187a7310c24e2d9466277b2a533d1959634daf600a8a495a78e197ac4316b87a99f26ff372ab6d8dc909e5bffb132f963de802435760899607b788e9c8a403bca8d1324a8007c222826f2e330c6f7d2141d2f38e578ab9bfcfeb3eda22bfcd4c8ced8c0c4cb421e2fe70e79ee53aef1e0995ccfa938bc35ec7e981d529aee7292bddb2f138e80494a83721755a45858a8399e2ccd9baebaa02a727b93c64410e43b5fda9db3f6476b6ab03ed63ae85f092e801e621920c2fe205934d162332a13c48cbab6390111716a6db73080eba060e80ceeb5a3c915378ee7859de9b067f4159fdb5902931286c6207b4b1e4f7f37a5e179d29f2fe08bb83197e2a0c9f6b9e77a51a16e6d6213c6a8987f7d15944c6c9976c0356eadbe73caae09b4d8291f7a07c4ab837effe0bd259ce62bc200f830c1f7257d409001176b3d16493fa39887db9d15fd11efc5ea1f6aa4c07e682a16f38730d2ee13d8530b017287b0c2e70b09a20f536d9196be3b540fa2a30dfac6638792e3513b3d4046da603cbf5f6492c318e4d5ab5ff31c1f9a8259ef493db1d060b9c9948f61811a3a30818197c9f6914c2aec15c95b26c8a3b7442ac9411fa8b4906bd866fb2053fefe27551581cea718ba84c6d612dbe1f27b4635b75f510193f4c9d842996785e29dfe8ad1c5cd70a521b85e33e32ee57aaa9d1a9b2f02af2f9ae4f2c81aa0aae9320a59d16f7320bee9816a9824a27dbe476960fbf4abb3c71116ca80df6f8454337a159564ad953ecbd02c9fb279a35d87c29e3323feb85cdf880606e865eef2dd64794ef2530f5c4ce16961ebc20b878e0199fa48168528c97fd58162d3a09c5a986ae0f0d14800ab13ac35754f05b134431c46f6c1010a4bb3e9141fb039ff857b294dac20c59ab148bc2dccdc9c458b9336233de5b6f88eed6e0bda6babbb25c295bad650d6796035ebbcb554654a01285496b5f82e76c5d68811c80e136acfb419f39819e06c80d289084e0a9a4151ad1935aede9d515076b9b255abf9338d6ab8c7753b811422741323c50b7fda86f557320a63f93d41cf72fe5e56aa7840eeadffd68fdc4ce2912c5d32cade81241b6963fff09282d7094469b87dd74f207b9373c08165690113283beb4d26b4d41e1a767e719b4ae194e5642e99fe4147382a9249c2d9125e739a8ccc08e139102de4b0f4d4cce1fc7cc1f51a1d5aed2858f853e2c268269636e1e9470b6c2019702db74c8a4808351ac16ba83ffd0f660d6d3cc1fd86ad8ec9b3c9d2444d202b477b227d6d18ea18f2d9bd44371ab38eca36cfaa1982cbf6a0dc34f6fad64f7ba42bbfd1cad8074c4f49c410c056d7d2b1ea3ba1bf9a3dca32671ed00363230c72c113b9fba17250d10ec74994e5fa7d110c7ec771f78226fcd5adce74457b8d7cb3f579469c3addb60375a4e046af5c078d20299caf242a5699ce2527f962bd6ab8ef1f7f436cb8bbf7277d85c9dda97930eb31a7094c069de056459a6f52955632f3c5c1145a33d955c1a3702fc4b35ef0e043ee16bc023fc8c9931314a9df62d35a95f8f274f6503bb42c77f2144369fe54241492b5636715e59898dca1578853ecff958a793d60b7c158cc5f9f9a2f059264e1c813d861b973e44c9d85d20441903a795a663594cf9b2fc0372a84a5966d768cca64cb8154c58050bfa9b428c57ee52f414b4acb213f08979631e7e6841c9119ca831af884be1316718a1beef8e0fda3c9e6f1b34687cf0903e89e36bf6e347f9653bb0cfedba3e6da708db3344a637d6a866f9507b01979306b3e23368a4650bffd70c973b9c9092b48d8b09d4318571375fbb26761dc3892c816d75e5009ffebc43f41c4453217c71a8ac2aedfcacff859c3bf4f35023ecefcbc4d1ea72f46d637cf47fd1bcd234bb5b90a91fa433d2b588c753e271f3e8c54978d61aae97145d50523ae6d7f0bf9162fadcdfe44b69669bfa7d0cd636fe7fc1cebfb136d64ff8b8d659ca20f7f8134bdb5a58303002baaa8bec6e70de38ee4bdfd968a53138bb8d9d0219ca411f9475868558a42436ec6e18d776ee2da3ee701ad7ca7414d56d8822cb4694a74b7b0a1159dd0a6d922ff9edc632dfd1126d798882ab9de835057afa47d18cc1c292e301a593cdc4c6aae4595c94312be99693bc482df63e64960264ccafdaaefc8ac0f69e307541f570b4cb98d837920e1fdf9c2eb3e02b395dda762d137643f5c9e3ad7eb184caa723b954d080dda1712452c97407550c1521f55996d1daa47ba5b79704397edcb80b4edd2bca1fb14d3a7bd472aba96f36256ae2543634e18a049bf507c81292ddefd91fd4b2bf348e8a28f6098ffa64d039c07a0fe1567d2c17d534edfc1d582bf3365e22740123e433493ad95e9721abc2eea71885afb218c6d4691572b824587820815854e1496253db157bc7a9ed4f8d22df6730f07bf7b956f54997b3ccbc7943939ed0c35aa1451dfa7a701b26eedfb61584f47799a97f9dcd918643239ea86ec7f40acd90347add4c687cfc9a6b13630995a4a93d2674e910043680fa532942b488bd2944021b092938574211fa37204d177a19aebaafcecf1a3e8e2cb998791eee9a0406728fbd5fa461f98e3fd2d489428acf3b488a0f960e1a4f3bb47c2b55d498697dbb3f87faffa8ae7adc8f17d608c86ab275cab575a8a4312a9685d081586209ce0e1b6201da1868015f11d3f55437d43bb6373653d3f62cf9fa7c65c56d6005436cf7eca71f60e07acb98e7a62fef5645ef4fd3e24a8d8269e7249a32898a798877524faa83c409dc81b8da5b78304590dac55ea7e560130353eb87afec3d67eeebb98806b6807e03c5755f9d6dcfc8cb6ded207842aab01dd1995ba27405d2b077f55f673646b78bef1c3570d1ce4bdd34aa0162951ca12386d92c4a7073d24d1b968fb0ea784b6657eb4c0e0b1d6474cf0c2c62f642c4e441e414e67fe75b3c0c3438417aa826c3223492c0e06b5bd6a9659152e37226c029142c212d73b6a8d1dc3657c40458b3d1b6e0e7f5bf4766088c26162b74fa93fb915aa0be406a68d24566d43998cf6a8870fbfda4deb5ff97f", 0x1000}, {&(0x7f00000011c0)="0600100000000000001600", 0xb}, {&(0x7f0000002240)="0aa6b38f2321befc60c97480480e9248ee0e09e4da8860a7613704fa0a3705b14469df3fcb88f4206ee78be6c039d135747729666d7cc5ac8bf0e2764d41af3cb5827efc4e33d1455979142ba9406b0fe7602c3e8a9f6fbd372117ee3bcfea71809d6d9dc5be0c030742823b7eb775c6e74d9fe7b10040fad9dc5b307be310fcf7d2a4ef9e0b0b9b8837b70ffca066", 0x8f}], 0x3, 0x0)
tee(r4, 0xffffffffffffffff, 0xbd, 0x10000000)
ioctl$TCSETSW(r4, 0x5403, &(0x7f0000001080)={0x8, 0x8, 0x7, 0x5, 0x5, 0x100000000, 0xffffffff, 0x5, 0x8, 0x9, 0x1000, 0x7f})

03:36:20 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0xff00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  492.114168][T25854] binder: BINDER_SET_CONTEXT_MGR already set
[  492.171278][T25854] binder: 25850:25854 ioctl 40046207 0 returned -16
[  492.182838][T25860] block nbd0: shutting down sockets
03:36:21 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x500})

03:36:21 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x68000000, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:21 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  492.293869][T25860] block nbd0: shutting down sockets
03:36:21 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:21 executing program 5:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000009912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$mice(&(0x7f0000000500)='/dev/input/mice\x00', 0x0, 0x1000000000000000)
setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000100)=0x4000, 0x4)
accept4$unix(r1, &(0x7f0000000140)=@abs, &(0x7f0000000080)=0x6e, 0x800)
r2 = socket$inet6(0xa, 0x6, 0x4)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000200)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f0000000300)=0xe8)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x48000, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x300000d, 0x11, r2, 0x0)
fsmount(r1, 0x1, 0x2)
getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000400), &(0x7f0000000440)=0x4)
sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001600000026bd7000fedbdf2502080200", @ANYRES32=r3, @ANYBLOB="08000100ac1414bb14000300666f6e645f736c6176655f3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4005}, 0x4040090)

03:36:21 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xc0189436, r0)

03:36:21 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x600})

03:36:21 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0xfdfdffff, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:21 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  492.599504][T25882] block nbd0: shutting down sockets
03:36:21 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  492.674153][T25882] block nbd0: shutting down sockets
03:36:21 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x700})

03:36:21 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xc020660b, r0)

03:36:21 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0xfffffdfd, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:21 executing program 5:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000080)={0x28, 0x2, 0x0, {0x1, 0x4, 0x8}}, 0x28)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000000c0)=0x4, 0x4)
ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000100))

03:36:21 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:21 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  493.040997][T25913] block nbd0: shutting down sockets
03:36:21 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x4000})

03:36:21 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:21 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  493.133803][T25913] block nbd0: shutting down sockets
03:36:21 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x100000000000000, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:21 executing program 5:
unshare(0x600)
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x8000, 0x0)
ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f00000000c0)={0x6, 0x4, 0x3, 0xae63, 0x4, 0x3, 0x8, "9067176b87ecc25831f83c7f2f31ead2f0fb4a97", "dc2abf43f8a24305f637c962e4daaf5234899945"})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
mknodat(r0, &(0x7f0000000100)='./file0\x00', 0x200, 0x0)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
dup2(r1, r1)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r2, 0xffffffffffffffff, 0x10000, 0x0)
ioctl$KIOCSOUND(r2, 0x4b2f, 0x7)

03:36:22 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xc0481273, r0)

03:36:22 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0xff00})

03:36:22 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:22 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:22 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x200000000000000, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  493.448557][T25950] block nbd0: shutting down sockets
03:36:22 executing program 5:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = semget(0x0, 0x2, 0x6)
semctl$GETALL(r1, 0x0, 0xd, &(0x7f00000000c0)=""/4096)
prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000080))
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
creat(&(0x7f0000001100)='./file0\x00', 0x2)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f00000010c0)={0x1, 0x3, 0xdbc, 0x40, 0x6ac, 0x5, 0x2})
tee(r2, 0xffffffffffffffff, 0x10000, 0x0)
socket$pppoe(0x18, 0x1, 0x0)

[  493.534165][T25950] block nbd0: shutting down sockets
03:36:22 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x1000000})

03:36:22 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = syz_open_dev$ndb(0x0, 0x0, 0xfffffffffffffffd)
r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x200000, 0x0)
ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f0000000080)=0x1)
prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0xc)
ioctl$NBD_SET_SOCK(r2, 0xab00, r0)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x109080, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="3000004910000100000000000004e10000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001300", @ANYRES32=0x0, @ANYBLOB='\b\x00.\x00\x00\x00\x00\x00'], 0x30}}, 0x0)
ioctl$TUNSETNOCSUM(r4, 0x400454c8, 0x1)

03:36:22 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:22 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  493.757604][T25976] binder: BINDER_SET_CONTEXT_MGR already set
03:36:22 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x2000000})

[  493.799757][T25976] binder: 25965:25976 ioctl 40046207 0 returned -16
[  493.850815][T25974] block nbd0: shutting down sockets
03:36:22 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:22 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x300000000000000, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:22 executing program 5:
unshare(0x40000001)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0xa}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00'/248, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x14)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f00000001c0)={0x3, 0x1, {0x0, 0x8000, 0x6, {0x8, 0x89}, {0x1f00000, 0x256}, @cond=[{0x800, 0x1, 0x4, 0x0, 0x800, 0x81}, {0xcff, 0x0, 0x3, 0x5, 0xdf61, 0xffffffff}]}, {0x56, 0xf6, 0x7, {0x0, 0x8}, {0x77e}, @cond=[{0x8001, 0x9, 0x3, 0x40, 0x2}, {0x8000, 0x4a, 0x4, 0x80000001, 0x18b87fa4, 0x1}]}})
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
tee(r0, 0xffffffffffffffff, 0x10000, 0x0)
ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f0000000080))
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)

03:36:22 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x3000000})

[  493.956996][T25974] block nbd0: shutting down sockets
03:36:22 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:22 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)
fgetxattr(r0, &(0x7f0000000080)=@random={'security.', 'vmnet1:\xef(md5sum\x00'}, &(0x7f00000000c0)=""/247, 0xf7)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, r0)

03:36:23 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:23 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x400000000000000, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  494.226057][T26007] block nbd0: shutting down sockets
03:36:23 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x4000000})

03:36:23 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  494.323466][T26007] block nbd0: shutting down sockets
03:36:23 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000100)={0x404000, 0x2, 0x0, 0x9, 0x20, 0xfffffffffffffffe, 0x1})
r2 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, r0)
ioctl$TIOCSTI(r1, 0x5412, 0x4)
r3 = syz_open_dev$ndb(0x0, 0x0, 0x110000)
ioctl$NBD_SET_SOCK(r3, 0xab00, r0)
r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x400000, 0x0)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x4000, 0x0)
ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000080)=r5)
setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e24, 0x3ff, @mcast2}}, 0x0, 0x101, 0x0, "b53748439596f7fc9e00af4a5327c287cf731e98d49c3cfe10d416561e551a10872aeea90c77f44a295819f3089c39b80c85461c9bfa221e023e1c0fbc609581ca4b71991a0bb2a80a78722be117b215"}, 0xd8)

03:36:23 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x12000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:23 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x5000000})

03:36:23 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x500000000000000, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:23 executing program 5:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x82000, 0x0)
ioctl$KDSETLED(r1, 0x4b32, 0x2)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r2, 0xffffffffffffffff, 0x10000, 0x0)

03:36:23 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x5800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  494.653160][T26028] block nbd0: shutting down sockets
03:36:23 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  494.770011][T26028] block nbd0: shutting down sockets
03:36:23 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x6800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:23 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x600000000000000, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:23 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x6000000})

03:36:23 executing program 5:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x3)
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r1, r1, 0x400, 0x0)

03:36:23 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)

03:36:23 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:23 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x7000000})

[  495.044007][T26066] binder: BINDER_SET_CONTEXT_MGR already set
[  495.077087][T26066] binder: 26057:26066 ioctl 40046207 0 returned -16
03:36:23 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:23 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x700000000000000, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:24 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x8000000})

[  495.182654][T26063] block nbd0: shutting down sockets
03:36:24 executing program 5:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="708f2cd9367366ea3ebc45bb0fc01ffebc")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)

[  495.254535][T26063] block nbd0: shutting down sockets
03:36:24 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0xff000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:24 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0x0, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000, 0x8000)
ioctl$VIDIOC_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f0000000040)={0x0, @reserved})
r3 = syz_open_dev$ndb(0x0, 0x0, 0x20e000)
ioctl$NBD_SET_SOCK(r3, 0xab00, r0)

03:36:24 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:24 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x1200000000000000, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:24 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x40000000})

03:36:24 executing program 5:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000003600)={<r2=>0x0, 0x29, "59838d43f46265e78de047f18b54e3bc99fc53dbe482f16e4b6f49d12e008973bfac44bc8a40dea60f"}, &(0x7f0000000480)=0x31)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000580)={<r3=>0x0, 0xbc, &(0x7f00000004c0)=[@in6={0xa, 0x4e20, 0x4, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1d}}, 0x7}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e24, 0x9, @remote, 0x5}, @in6={0xa, 0x4e23, 0x9, @local, 0x9}, @in6={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x401}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e20, 0x8, @loopback, 0xe5c}]}, &(0x7f00000005c0)=0x10)
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000600)={<r4=>0x0, 0x8, 0x7, 0x2, 0x1, 0x3}, &(0x7f0000000640)=0x14)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000680)={0x4, [0x0, <r5=>0x0, 0x0, 0x0]}, &(0x7f00000006c0)=0x14)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000002cc0)={0x449a, 0x200, 0x8, 0xffffffffffffffff, <r6=>0x0}, &(0x7f0000002d00)=0x10)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000002d40)={0x3, 0x200, 0xffffffff, 0x6c9, <r7=>0x0}, &(0x7f0000002d80)=0x10)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000002dc0)={<r8=>0x0, 0x4000000000000}, &(0x7f0000002e00)=0x8)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000003300)={<r9=>0x0, @in6={{0xa, 0x4e23, 0xe9, @local, 0x2}}, [0xffffffffffffffff, 0x5, 0x6, 0x9, 0x7, 0xd1, 0x6, 0x5, 0x4, 0x3f8, 0x80000001, 0x3, 0x86, 0x2, 0x1]}, &(0x7f0000003400)=0x100)
sendmmsg$inet_sctp(r1, &(0x7f0000003500)=[{&(0x7f00000000c0)=@in6={0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, [], 0x28}, 0xb8}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000100)="4f717f75be7e17412e3be998a1af9235461fcd696da07fa62f5be9ded2f60fb0cadd083a569bd8c7f4376a9fd034dc5a2cfb43b90468b22d0ae5b597d07674d54d8ed589cdfe15bbdfb28022fc02be049dcab943fd5263df16f2909dbb3bf5e232b1945f197b407ba8", 0x69}, {&(0x7f0000000180)="d2f0318d2e65d2fa4b276f081cecacf5f6ca57e5a8", 0x15}, {&(0x7f00000001c0)="92df768e73a03684b1a746a466544e12099aa4fe01fcd22aa7be246e9ee189b0bc8275ac473d3f40b980da37f7c5ae8411", 0x31}, {&(0x7f0000000200)="be4e96fd19f4b5a2dac0164b716d5aa0ae6d3671fd8cf60213b5fa652763154cd0bb24416bbc63158050e3417683eddad73f21d9de1af7ce6233d61897ac5846b373498c60d78b7af63dca409c72c0c3ab58ad6064da6d9c26b84ce03e5dce11b77698c122dbd7a185fb8fc35546a32f7f1e5efd00520371a6502c99e9c6ba4d777f2f5a4ea927ee7f6d794c06755da218a61789837c8a473edf949b3c565ef872c9b5", 0xa3}, {&(0x7f00000002c0)="8556685a6e198d917c954f981f9869b7273815cc3beccab0f750742c7b62e11eb70aa2df4e43e88ed904f10196b2ad6f45ff523c2a6d77d8fcc8f895aff0406e2fc3f5fd64c6de540a7ff619f4a8befc66c884c2cb8954cd700f46e133757b24902902dda0b7b5ba749b3151b2cd22f6f65e778684f6c8eaae1be9a28275dd42c0ef37cb", 0x84}, {&(0x7f0000000380)="c42c4ece2f63a99345be6c94002fdcc757b0495e2dbe3b6904da2dcc81a03214150430aa0bb1cdfe4ababd35", 0x2c}], 0x6, &(0x7f0000000700)=[@authinfo={0x18, 0x84, 0x6, {0x100}}, @authinfo={0x18, 0x84, 0x6, {0x6}}, @sndinfo={0x20, 0x84, 0x2, {0x3, 0x200, 0x0, 0x3, r2}}, @dstaddrv4={0x18, 0x84, 0x7, @empty}, @sndinfo={0x20, 0x84, 0x2, {0x7fbce220, 0x8008, 0x3ac, 0xfff, r3}}, @prinfo={0x18}, @dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x1}, @dstaddrv6={0x20, 0x84, 0x8, @remote}, @sndinfo={0x20, 0x84, 0x2, {0x3f, 0x208, 0x0, 0x7f, r4}}, @sndinfo={0x20, 0x84, 0x2, {0xffffffffffffff5a, 0x8009, 0x1, 0x595, r5}}], 0x118, 0xc633ef512d9846f4}, {&(0x7f0000000840)=@in6={0xa, 0x4e20, 0x3ef, @rand_addr="07a630ffe1317755db26fdc9cef396d7", 0x5}, 0x1c, &(0x7f0000001b80)=[{&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000001880)="b9047c60b9f3a064df018d7a7be49ae53fa5e0b1d195a92f395e32000d8b982752ba2fa928c670935797c6f30e6d4bef9af1cd5a29a9a79ee5dd6e5282a6b8f9a2b7d544c352f6381bb21b046a8274ece6d044c3d80353d8633a87639fed32489cd022b157ce1f38c57310c042c8c640db2f9aba46a6f869f378563b638a32dca708800ad577f5106e22a776b272704631450d7b5c8be443756e4eb7699ca56b88a2ae1701817f75a6eb7b1ab20bbc9b77339d9bd94630bcd5a776b290e57ab6fb305f462aea831646c02a30ada5106720bd0bee5ed8fac665fc8428b2f9026fa474484925", 0xe5}, {&(0x7f0000001980)="0acb82023e524c61fea3335ac4f894c365af4ebd88495beab1c6aa35ee5d639f0f7e499b8a5d30239ca7f6e5fa63fbc6ea6977f3419bf8e597b72d09db044829243154b4deef2e1b0a5f3c30939f789a05b4cad45c2cea30ca7d917887142baf2e8a075e3f2c1bfc8e5b8f14964646f0b94f822e4e8767e35164320ffcf3fe784ac15a8a3e6ad780f36458850fbf5dd953", 0x91}, {&(0x7f0000001a40)="30a1c310e5a3dd62a63714b112be121f396944d291488d64331bfaadd6b29ffdbe88b272cc181d8b2e8a7722ce1da37320ce8eeee260344793cd2da1b2f8c2f71fe2945d06f2029e75f37d2811debbec723875c877cfb3194194f9f05f0450cac07701f4dcc68367fb9f77f10649501d88906f85887173f9a489417deb8449a348c083ddae7a98e4dc0bee4721c4aedf7e7861e21ab9337eb0b9b296ac9430201518e0db43da2766f289a44637d3fa33cf2026b8c38e0a94131f98a004ee20cec530c3d24461c421cb5af013b7b4a40ef3c09aa991dc73ae5ef7", 0xda}, {&(0x7f0000001b40)="f06527cba912d501", 0x8}], 0x5, &(0x7f0000001c00)=[@authinfo={0x18, 0x84, 0x6, {0x100}}, @dstaddrv4={0x18, 0x84, 0x7, @empty}], 0x30}, {&(0x7f0000001c40)=@in6={0xa, 0x4e21, 0x10758400, @mcast2, 0x2}, 0x1c, &(0x7f0000002c80)=[{&(0x7f0000001c80)="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", 0x1000}], 0x1, &(0x7f0000002e40)=[@init={0x18, 0x84, 0x0, {0x7fffffff, 0x7, 0x3f, 0x763b}}, @sndinfo={0x20, 0x84, 0x2, {0x8, 0x800b, 0x20, 0x0, r6}}, @dstaddrv4={0x18, 0x84, 0x7, @empty}, @authinfo={0x18, 0x84, 0x6, {0x4}}, @authinfo={0x18, 0x84, 0x6, {0x3}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0xfffffffffffffff9}}, @sndinfo={0x20, 0x84, 0x2, {0x2, 0x8, 0x4, 0x0, r7}}, @sndrcv={0x30, 0x84, 0x1, {0x4, 0x1000, 0x1, 0x6, 0x0, 0x1f, 0x2, 0x3, r8}}], 0xe8, 0x4000}, {&(0x7f0000002f40)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000003280)=[{&(0x7f0000002f80)="25841e4c84dc918b3236489b5880fdb87912bc0bf91eae3b2946df22d6305bc84b325cf4fca566acf3d8d6a8089c7e4f99005f9449e12d6464ad251c8f87cd0d7f293e711d460cb86b137775bb6197b31d1e31aca88fff3b61d390de9f007605ba", 0x61}, {&(0x7f0000003000)="4e73bbb96819e8409f3f7cc4e028c51156310afe510cd055111968dc", 0x1c}, {&(0x7f0000003040)="779aa417d23e12c7bc99283714e7e1e4c92f57eb97e65cfe3a9c94176ce7afe334a2481ebae05d58d136b6fa42bf58859fd9f872866678910261365a02e40655fe24446d65defbb6b513b2a7b4b7e135015fb0c3c68e296864d1ed55b90fac001117f457fdb561d9196ecd8f516259379251d29fe74e8091ea4020297888414e8928a42cb38f0f2b49fd5f32d1b5ee8d79c9038695bb5e8c3555403f58e58ea60df7a01cf2822e93854035b3b2a94a6081f21bd0ed66aff5456b", 0xba}, {&(0x7f0000003100)="f91980625e728da6e3bf31282e1faa08fb815eb647f10d24354c1c5beaeae15d55067fce1aa78fbb7be4e6a747712e732e2130afd64780a9be6b6cea12c1fa803f3a396f80d370860e6e51668f7cc7f45cc023acb67366e3f23a2e8d238873a044656a38f150a1464c85a55cc9d5b6c238ac2b35", 0x74}, {&(0x7f0000003180)="4bc94cb6ff731b4582f85489cd615a0168e86a74047452146346b7fe223fd5c5e965e22cb75f8b9faf7e3cd8ad5c12c81cde3dcb38db3c170c2f5bd7cffe084670120a1d5a01ff095892f92224b300a9c6b5d72da8086b9c738d7518f211849da7de67a5bd54777732f834a0b8c3a6b286430664072b0b2425fe58aed67da0a03d3c0d41dd66598b8bb0fcda9415c4bec66cbdd81ecb60356a1c1a4408567d145af6b4de52cd0c81d08c1acee392", 0xae}, {&(0x7f0000003240)="5b7de774dce8a35a6f111178ecc8e3b8025a07bcd7a23979a68a152d553cf3738194147487901094819ecf8250ae37d434348be1ee5c89471d9b3141f2c32c", 0x3f}], 0x6, &(0x7f0000003440)=[@init={0x18, 0x84, 0x0, {0x8001, 0x0, 0x4, 0x9}}, @dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x17}}, @sndinfo={0x20, 0x84, 0x2, {0x101, 0x3d993ebd94f3ce05, 0x800, 0x9, r9}}, @init={0x18, 0x84, 0x0, {0xff, 0x3, 0xfffffffffffffff9, 0xffffffff}}, @dstaddrv4={0x18, 0x84, 0x7, @broadcast}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x6}}], 0x98, 0x8010}], 0x4, 0x20000000)
r10 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r10, 0xffffffffffffffff, 0x10000, 0x0)

[  495.606224][T26100] block nbd2: shutting down sockets
03:36:24 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:24 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  495.685175][T26100] block nbd2: shutting down sockets
03:36:24 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x3000000000000000, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:24 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0xff000000})

03:36:24 executing program 5:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
tee(r1, 0xffffffffffffffff, 0x10000, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000080)={0x4, <r2=>0x0, 0x10001, 0x7})
ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f00000000c0)={0xfff, r2})

03:36:24 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, r0)
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x240, 0x0)
ioctl$RTC_IRQP_READ(r3, 0x8008700b, &(0x7f0000000040))

03:36:24 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x100000000000000})

03:36:24 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x3800000000000000, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:24 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:24 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  496.067239][T26135] block nbd0: shutting down sockets
[  496.161110][T26135] block nbd0: shutting down sockets
03:36:25 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:25 executing program 5:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0xfffffffffffffffc)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000140)=0x7, 0x4)
tee(r1, 0xffffffffffffffff, 0xfffb, 0x0)
ioctl$VIDIOC_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000080))

03:36:25 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:25 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x4000000000000000, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:25 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x200000000000000})

03:36:25 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x40000, 0x0)
write$FUSE_POLL(r2, &(0x7f00000001c0)={0x18, 0x0, 0x2, {0xfffffffffffffffc}}, 0x18)
fremovexattr(r1, &(0x7f0000000000)=@random={'osx.', 'md5sumbdevvboxnet1\x00'})
geteuid()
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r3 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r4, 0x410, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4)
ioctl$NBD_SET_SOCK(r3, 0xab00, r0)

03:36:25 executing program 5:
unshare(0x600)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x10000, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000180)={<r1=>0x0, 0x19ed}, &(0x7f00000001c0)=0x8)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x23c, r2, 0x100, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x4}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe66d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xae8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x100, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4a480000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x64}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x308}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4a00}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x976}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6a5b}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_NET={0x14, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffffffffa57}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1000}]}, @TIPC_NLA_BEARER={0x48, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x1, @rand_addr="abf1ed039dbc0db32cc8b8f870a37cc5", 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x7, @ipv4={[], [], @remote}, 0x27}}}}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000200)={r1, 0x5}, 0x8)

[  496.470420][T26163] binder: BINDER_SET_CONTEXT_MGR already set
[  496.509671][T26163] binder: 26159:26163 ioctl 40046207 0 returned -16
03:36:25 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x300000000000000})

03:36:25 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:25 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  496.582612][T26169] block nbd0: shutting down sockets
03:36:25 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x4800000000000000, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  496.665507][T26169] block nbd0: shutting down sockets
03:36:25 executing program 5:
r0 = socket$inet(0x2, 0x4000020000000001, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0x11528767ca1ebb5, 0xc0, 0x0, 0xfeffffff00000000)

03:36:25 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, r0)

03:36:25 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:25 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:25 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x400000000000000})

03:36:25 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x5800000000000000, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  496.966670][T26197] block nbd0: shutting down sockets
03:36:25 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$sock_timeval(r0, 0xffff, 0x400001006, &(0x7f0000000080)={0x0, 0x10004}, 0x1d4)
readv(r0, 0x0, 0x0)
recvfrom$inet(r0, 0x0, 0xa6f77da8, 0x0, 0x0, 0x800e00605)
shutdown(r0, 0x0)

03:36:25 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x12000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  497.123052][T26197] block nbd0: shutting down sockets
03:36:26 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:26 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x500000000000000})

03:36:26 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x6800000000000000, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  497.165841][T26216] binder: BINDER_SET_CONTEXT_MGR already set
[  497.204427][T26216] binder: 26204:26216 ioctl 40046207 0 returned -16
03:36:26 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
fchmod(0xffffffffffffffff, 0x0)
recvfrom$inet(r0, 0x0, 0x100000143, 0x2, 0x0, 0x800e005bf)
shutdown(r0, 0x0)

03:36:26 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:26 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
msgget(0x2, 0x80)
setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000140)=@ccm_128={{0x307}, "fb24ad3027690511", "153c569f82e3de63040ce2f87992aaac", "0a8a70f2", "569e07c048e4e3a0"}, 0x28)
setsockopt$rose(r0, 0x104, 0x2, &(0x7f0000000000)=0x9, 0x4)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
fcntl$setlease(r0, 0x400, 0xfffffffffffffffc)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={<r3=>0x0, 0x20}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={r3, 0x7fffffff}, 0x8)
personality(0x4000f)
ioctl$NBD_SET_SOCK(r2, 0xab00, r0)
poll(&(0x7f0000000040)=[{r2, 0x8}], 0x1, 0x4)

03:36:26 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x600000000000000})

03:36:26 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:26 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x8000000000000000, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  497.527305][T26238] block nbd0: shutting down sockets
03:36:26 executing program 5:

03:36:26 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x38000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  497.627957][T26238] block nbd0: shutting down sockets
03:36:26 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, r0)

03:36:26 executing program 5:

03:36:26 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x700000000000000})

03:36:26 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:26 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0xfdfdffff00000000, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:26 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:26 executing program 5:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]})
r0 = accept$unix(0xffffffffffffffff, 0x0, 0x0)
ioctl$KDSKBSENT(r0, 0x4b49, 0x0)

03:36:26 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x800000000000000})

[  497.945735][T26261] block nbd0: shutting down sockets
03:36:26 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0xffffffff00000000, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  498.034521][T26261] block nbd0: shutting down sockets
03:36:26 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:26 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000000)=0x43, &(0x7f0000000040)=0x4)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, r0)

03:36:27 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x4000000000000000})

03:36:27 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x48000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:27 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x2, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:27 executing program 5:
prctl$PR_MCE_KILL_GET(0x22)
rt_sigtimedwait(0x0, 0x0, 0x0, 0x0)
r0 = socket$unix(0x1, 0x5, 0x0)
getcwd(0x0, 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000200)={'nat\x00', 0x2, [{}, {}]}, 0x48)
socket(0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0xfffffffffffffe09)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0)

[  498.369803][T26293] block nbd0: shutting down sockets
03:36:27 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x1200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  498.438868][T26293] block nbd0: shutting down sockets
03:36:27 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x58000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:27 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0xff00000000000000})

03:36:27 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x216200, 0x0)
ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f0000000140)={0x48, &(0x7f00000000c0)=""/72})
r2 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
openat$random(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x2, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, r0)
symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00')
r3 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r3, 0xab00, r0)

03:36:27 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x3, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:27 executing program 5:
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)

03:36:27 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  498.788163][T26319] block nbd0: shutting down sockets
03:36:27 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x68000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:27 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x0})

[  498.828897][T26331] binder: BINDER_SET_CONTEXT_MGR already set
[  498.865768][T26319] block nbd0: shutting down sockets
[  498.872430][T26331] binder: 26326:26331 ioctl 40046207 0 returned -16
03:36:27 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x4, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:27 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:27 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={<r3=>0x0, 0x6, 0x7}, &(0x7f0000000040)=0x8)
recvfrom$ax25(r0, &(0x7f0000000100)=""/253, 0xfd, 0x21, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={r3, 0x299f}, &(0x7f00000000c0)=0x8)
ioctl$NBD_SET_SOCK(r2, 0xab00, r0)

03:36:27 executing program 5:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000), 0x4)

03:36:27 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x5, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  499.164850][T26345] block nbd0: shutting down sockets
03:36:28 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x0})

03:36:28 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  499.232460][T26345] block nbd0: shutting down sockets
03:36:28 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = getpid()
fcntl$setown(r0, 0x6, r1)
recvfrom$inet(r0, 0x0, 0x378ac47d209fa366, 0x2, 0x0, 0x800e0089d)
shutdown(r0, 0x0)

03:36:28 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0xff00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:28 executing program 2:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100), 0x1c)
openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6)
r1 = socket(0x11, 0x80002, 0x0)
setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000000), 0x4)
bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14)
setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c)
sendto$inet6(r0, &(0x7f0000000000), 0xff19, 0x0, 0x0, 0x101aa)
r2 = socket(0x11, 0x2, 0x0)
r3 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000040)=@req={0x28, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x94014a3980872dc0}})
ioctl$NBD_SET_SOCK(r3, 0xab00, r2)
r4 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r4, 0xab00, r2)

03:36:28 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x6, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:28 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:28 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x0})

03:36:28 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070")
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer\x00', 0x0, 0x0)
dup2(r0, r1)

03:36:28 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  499.707642][T26371] block nbd0: shutting down sockets
03:36:28 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x7, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:28 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x0})

03:36:28 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:28 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:28 executing program 5:
getrandom(&(0x7f0000000240)=""/231, 0xe7, 0x2)

[  499.892541][T26371] block nbd0: shutting down sockets
03:36:28 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x12, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:28 executing program 2:
r0 = socket(0x11, 0x2, 0x8)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
r2 = semget$private(0x0, 0x89ecb930d92d4912, 0x40)
semctl$SEM_INFO(r2, 0x0, 0x13, &(0x7f0000000140)=""/207)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r3 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r3, 0xab00, r0)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x100}, 0x8)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r4, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070")
r5 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r5, 0x5}, 0x3c)
ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c8, 0x0, 0x0, 0x0)
ioctl(r3, 0x9, &(0x7f0000000000)="1783ce0eb04ec078a036a8f5f77dcc76488b08fb5c268c368e47f5caf53bbddb778479407f5fba3e4819234598f7bb2f6d37367c016287602bcae1ba13fe805e9c71dc51dc909b0b9b6bd39b756cee5739c075600f2144bc28e3b139c55050e4d7634d77455b0f0c738eddb83eaa2a2d51f397e7cced08ae77c76b55ed2cea4a60a04f3f7a322626b438e29defc4c5912e6c1ada631d6a7d8752742bb14102614b4742d677cc26ff75519fddb1d91b60b4b5e3643db98869e582bd2cb906cb1565973a116f371b8dedce2f")

03:36:28 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x0})

03:36:28 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:28 executing program 5:
r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x2, 0x0)
read$FUSE(r0, &(0x7f0000000080), 0x1000)
write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0)

03:36:28 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:29 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x30, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:29 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x0})

[  500.335405][T26429] block nbd0: shutting down sockets
03:36:29 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  500.411260][T26429] block nbd0: shutting down sockets
03:36:29 executing program 5:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000903000)='./file0\x00', 0x0, 0x100000, 0x0)
mknod(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0)
mount(&(0x7f0000000240), &(0x7f0000000200)='.', 0x0, 0x1004, 0x0)
mount(&(0x7f0000000100)=@filename='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x201000, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x0, 0x5010, 0x0)

03:36:29 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:29 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x0})

03:36:29 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:29 executing program 2:
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x40, 0x0)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000040)={<r1=>0x0, 0x90, "c1c9eedade4d2aba2cbd3e1d9d0fb444163df4a2c15ea1fc3e706c86cfb73d60f1845e33be208e6b605f807aa4c4792d162639611ab7d7b4483cc3d4d9ac2ed1536d761614e2f200a8c035c6aab358fbfcf93ca85802b64e804764e57bbffff30f10f26c5726fad94e40086e50ace72717612a47c23220234ce4a5032f3b8fcc4adf4bd90491671ff6881d21cd46aebe"}, &(0x7f0000000100)=0x98)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)={r1, 0x0, 0x9, [0x3, 0xffffffff, 0x18e, 0x3, 0x0, 0x74, 0x7, 0x10001, 0x8000]}, &(0x7f0000000180)=0x1a)
r2 = socket(0x11, 0x2, 0x0)
r3 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0x0, 0x0)
ioctl$NBD_SET_SOCK(r3, 0xab00, r2)
r4 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
gettid()
ioctl$NBD_SET_SOCK(r4, 0xab00, r2)

03:36:29 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x38, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:29 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:29 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00')
fchdir(r0)
r1 = inotify_init()
inotify_add_watch(r1, &(0x7f00000000c0)='.\x00', 0x1000000)
getdents64(r0, &(0x7f0000000100)=""/4096, 0x11f)

03:36:29 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:29 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x0})

[  500.846239][T26462] block nbd2: shutting down sockets
03:36:29 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x48, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:29 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  500.966259][T26481] block nbd2: Device being setup by another task
[  501.012172][T26481] block nbd2: shutting down sockets
03:36:29 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x0})

03:36:29 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x58, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  501.054493][T26489] binder: BINDER_SET_CONTEXT_MGR already set
[  501.080303][T26489] binder: 26484:26489 ioctl 40046207 0 returned -16
[  501.087266][T26490] binder_alloc: 26484: binder_alloc_buf, no vma
03:36:29 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0xc8880)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, r0)

03:36:29 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000100)={0x0, 0x10000}, 0x10)
getsockopt$inet_mreq(r0, 0x0, 0xd, 0x0, 0x0)
dup2(r0, r0)
recvfrom$inet(r0, 0x0, 0x93af9aad, 0x0, 0x0, 0x800e005b1)
shutdown(r0, 0x0)

03:36:29 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:29 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:30 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x0})

03:36:30 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  501.362110][T26501] block nbd0: shutting down sockets
03:36:30 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x0}, 0x20)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  501.394010][T26504] binder: BINDER_SET_CONTEXT_MGR already set
[  501.421787][T26504] binder: 26502:26504 ioctl 40046207 0 returned -16
[  501.432255][T26515] binder_alloc: 26502: binder_alloc_buf, no vma
03:36:30 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x0})

03:36:30 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x68, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  501.503585][T26501] block nbd0: shutting down sockets
03:36:30 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:30 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:30 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x0})

03:36:30 executing program 2:
r0 = socket(0x5, 0x80000, 0x7fff)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0x0, 0x2)
ioctl$NBD_SET_SOCK(r2, 0xab00, r0)

03:36:30 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:30 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x300, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:30 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x1200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:30 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x0}, 0x20)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

03:36:30 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x0})

03:36:30 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x1})
r2 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, r0)
r3 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r3, 0xab00, r0)

03:36:30 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x3000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:30 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:31 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x0})

03:36:31 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x500, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  502.233612][T26569] block nbd0: shutting down sockets
[  502.315615][T26569] block nbd0: shutting down sockets
03:36:31 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x0}, 0x20)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

03:36:31 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x3800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:31 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x0})

03:36:31 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0x0, 0x400000)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000040)={<r3=>0x0, 0xe2, "28a469ad12903d4ef54408bc54bab9b1f2ed22beb61adc0c32f2cd5b25bdcd9f009e5b160fe875c3e5ca7f235e762de9ada100a0ef1edbe33955178efbada3b00234e6f3c4b9e72c20cbd77600e25a58818addf37953ccaaae8ed226a258f90977682004a39923f128e5a29dd1ecf2bd91c7a71b7b4ee8b1984a1a7550fb32432e3fc52e5033aa95d9eb2c99f1f0a3ea37e5e73a6e08ba53c09df59be6cd0d530f702a8871672434dac9b4fc65031f3b61bcd46cb2be7a068efb250eb98694c688fb7c436cfeea5834fc071668818c91eda66e7e547d21698edb277ee57da0e40a40"}, &(0x7f0000000140)=0xea)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e24, 0x8ca, @mcast1, 0x7fff}}, 0x6df, 0x0, 0x9, 0x1ff, 0x6}, &(0x7f0000000240)=0x98)
ioctl$NBD_SET_SOCK(r2, 0xab00, r0)
ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000000)={0x6, 0x3800000, 0x3, 0xff, 0x7, 0x7fffffff})

03:36:31 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x600, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:31 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:31 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x0})

[  502.641948][T26596] block nbd2: shutting down sockets
03:36:31 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:31 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x700, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  502.704011][T26596] block nbd2: shutting down sockets
03:36:31 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:31 executing program 2:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x100, 0x0)
syz_open_pts(r0, 0x101000)
r1 = socket(0x11, 0x2, 0x0)
r2 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, r1)
r3 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r3, 0xab00, r1)

03:36:31 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x0})

03:36:31 executing program 5:
gettid()
clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x8000000000000200)
unshare(0x20000400)
r0 = memfd_create(&(0x7f0000000340)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94H\xfb\x14q\x85\x1c\x15\x9aXe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0)
fcntl$setlease(r0, 0x400, 0x1)
fcntl$setown(r0, 0x8, 0x0)
execveat(r0, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000)
timer_create(0x0, &(0x7f0000000080), 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)

03:36:31 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x4800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  503.025635][T26623] block nbd0: shutting down sockets
03:36:31 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x1200, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:31 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x0})

03:36:31 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  503.114909][T26623] block nbd0: shutting down sockets
03:36:31 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x5800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:32 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, r0)

03:36:32 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x3000, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:32 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x0})

03:36:32 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x6800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  503.407958][T26650] block nbd0: shutting down sockets
03:36:32 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:32 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvfrom$inet(r0, 0x0, 0xd85bc68d, 0x2, 0x0, 0x800e00635)
shutdown(r0, 0x0)

03:36:32 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x0})

[  503.563035][T26650] block nbd0: shutting down sockets
03:36:32 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:32 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x3800, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:32 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:32 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0)
r3 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xdf7, 0x20000)
ioctl$TIOCSBRK(r3, 0x5427)
r4 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
sync_file_range(r2, 0x4, 0x7f, 0x1)
r5 = gettid()
accept$packet(r0, 0x0, &(0x7f0000000040))
sched_setattr(r5, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x1, 0xfffffffffffffe00, 0x4, 0x7fffffff, 0x7}, 0x0)
ioctl$NBD_SET_SOCK(r4, 0xab00, r0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000100)={r0})

03:36:32 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x0})

03:36:32 executing program 5:
socket$inet_udplite(0x2, 0x2, 0x88)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0)
r1 = memfd_create(&(0x7f00000000c0)='\x06\x00\x00\x00^\x00\xac\xd8\xfd\xcc\xeeq\xe5\xf5\xcb\x801`\xe48\x85\xa4\xf5\xd0\x1b\\\x04\f\xf8F\\\xb4\xba\x8d\xef\x12d\xee\xa5?\x00kZ\x8b\x19h\xd7|\x14i\r\x18U9\xc1\xd7\x10\xf0G\x12\xa8\xbaa\xb2\x94|%n+c\xac`\xb8\xac\x81\x8d\x93q\xd4\xd4z\xaaZ\x0f\xaa\xc7\x97#\xe5g l\xd55\x15\xbf\xfc\xf5\x83\xb72\x00Y\x15\x92\xb1\xb6a\xf4\xe9u\xb2\xe7\xeciy\b\xdb\xc7\xf1\x87\xc9\a\x91\x04J\xc8\x0e\xff|J\'Nxr\x00\xbc\xab5\x9b\x85>\x99\xcaz2\xabKI\xdc\xe4\x9f\xa5\xd0\x0ewm\xe7\xccK\xc9\x8b\x8bE\x89\x03\x00\x00\x00}@Ry\xa69^\xdc\x9d\xa0\x04\xdf \aelO7\xf1\xda\xcc\xa2x\xc2\x9a\xf5\x18F\xa0\x80M\xf9,+\xc9\xf7/nt\x9ba\x14\x1b\x18\xdd\x18X\xd2o\x15\x97L\xe6\xb5\xba\xc7\xf2W\n\x7f\x14ZIL:T\x1bd\x19\x8dE\x9c\xb1\xb9JK\x1do\x85\xe9\xa2\xca\x9cd\b\xc8\xbdiQ_L\xb0\xb9 \xff/F\xfc\'M#,\x84M\xba\xa9\xa2yr\'?f\tb\xdai\xfd\x8c\x9aoj\x84\x03i\x8a|\xf7T;=p\xa2\x98f\xc7\xefu=\x96\xcb\x11\x91\xce\xce\xbev\xaa\xbb\xca\xfa\xa3\xde\xd5\x1f\xd7\x03:12\xf2\xfd\rN\x84=A\xae\x9b3\x81\xa9~\xb7\x80\xd1\xe2\xf6\xf2\xb8\xc9\x8a\xabC\xe2\xec\xb8,j\xe1\xbb\x1b\x1f@', 0x3)
write$binfmt_misc(r1, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67)
sendfile(r0, r1, &(0x7f0000000040), 0xfffb)
fcntl$addseals(r1, 0x409, 0x8)
fchmod(r1, 0x0)
shutdown(r0, 0x1)
dup2(0xffffffffffffffff, 0xffffffffffffffff)

03:36:32 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:32 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x4000, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:32 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x0})

[  503.950912][T26687] block nbd0: shutting down sockets
03:36:32 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  504.044801][T26687] block nbd0: shutting down sockets
03:36:32 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:32 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:33 executing program 2:
r0 = socket(0x3, 0x3, 0x1000005a41)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0x0, 0x10000)
listen(r0, 0x7)
setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000000)={0x2c, @local, 0x4e22, 0x3, 'sh\x00', 0x1a, 0x4, 0x22}, 0x2c)
io_setup(0x2, &(0x7f00000000c0)=<r3=>0x0)
io_getevents(r3, 0x401, 0x2, &(0x7f0000000100)=[{}, {}], 0x0)
r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_STATUS(r4, 0x80605414, &(0x7f0000000080)=""/41)
ioctl$NBD_SET_SOCK(r2, 0xab00, r0)

03:36:33 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = creat(&(0x7f00000000c0)='./file1\x00', 0x0)
write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
fremovexattr(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='u'])

03:36:33 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x4800, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:33 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x0})

03:36:33 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:33 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:33 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x5800, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:33 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x0})

03:36:33 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:33 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$BLKPG(r2, 0x1269, &(0x7f0000000000)={0xfff, 0x0, 0x1000, &(0x7f0000000440)="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"})
ioctl$NBD_CLEAR_QUE(r2, 0xab05)
prctl$PR_GET_TIMERSLACK(0x1e)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000080)={<r3=>0x0, @in6={{0xa, 0x4e20, 0x30, @empty, 0x96}}, 0x3328, 0x6}, &(0x7f0000000140)=0x90)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r3, 0x7}, &(0x7f00000001c0)=0x8)
setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000040)={0x8, 0x0, 0x7f, 0x50f}, 0x10)
ioctl$NBD_SET_SOCK(r2, 0xab00, r0)

03:36:33 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:33 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x0})

03:36:33 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x6800, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  504.902892][T26756] block nbd0: shutting down sockets
[  504.995105][T26756] block nbd0: shutting down sockets
03:36:34 executing program 5:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xf7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
openat$cgroup_procs(r0, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0)

03:36:34 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x80)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', <r3=>0x0})
bind$xdp(r0, &(0x7f0000000040)={0x2c, 0x4, r3, 0x27, 0xffffffffffffff9c}, 0x10)
ioctl$NBD_SET_SOCK(r2, 0xab00, r0)

03:36:34 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:34 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:34 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x0})

03:36:34 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x1000000, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  505.334991][T26775] block nbd2: shutting down sockets
03:36:34 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:34 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  505.425679][T26775] block nbd2: shutting down sockets
03:36:34 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x2000000, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:34 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x0})

03:36:34 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:34 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, r0)
ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0xbf)

[  505.696501][T26808] binder: BINDER_SET_CONTEXT_MGR already set
[  505.705499][T26803] block nbd0: shutting down sockets
[  505.720973][T26808] binder: 26798:26808 ioctl 40046207 0 returned -16
[  505.793838][T26803] block nbd0: shutting down sockets
03:36:34 executing program 5:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
lremovexattr(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)=@random={'security.', '/dev/null\x00'})

03:36:34 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x0})

03:36:34 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:34 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:34 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x3000000, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:34 executing program 2:
r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x101000, 0x0)
r1 = socket(0x11, 0x2, 0x0)
r2 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, r1)
syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x5)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x101, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, r1)
signalfd4(r0, &(0x7f0000000140)={0xffffffff}, 0x8, 0x80000)
ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000000c0)={{0x2, 0x4e22, @remote}, {0x307, @broadcast}, 0x10, {0x2, 0x4e22, @rand_addr=0x8}, 'bond0\x00'})
ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000080)={r3, 0x1, 0x8000})

03:36:34 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x4000000, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  506.154322][T26822] block nbd0: shutting down sockets
03:36:35 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:35 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x12000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:35 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x0})

[  506.236057][T26822] block nbd0: shutting down sockets
03:36:35 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e0bcfe87b0071")
r1 = socket(0xa, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bond_slave_0\x00'})
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="000000000000000024001200140001006272696467655f736c617665000000000c0005000800050001000000"], 0x1}}, 0x0)

03:36:35 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
r3 = dup2(r0, r0)
ioctl$KVM_S390_UCAS_UNMAP(r3, 0x4018ae51, &(0x7f0000000000)={0x402, 0x8, 0x1})
timerfd_gettime(r3, &(0x7f00000000c0))
ioctl$NBD_SET_SOCK(r2, 0xab00, r0)
ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000440)="858412a0fa1e961ceb3dd2a11f92824cf27cef81cffb14cc44e3df3e0d27858abcb6d502904fb1a610221815863674bc6cdc79e8d0d2fa1fea0603276495d0342c27ff879e32c08dd88196a63af632610cbe7dc1cca587ccc57cfe3f6d5a83adea8654b212f4132b5d48bbed675cc808147893fb88e4075f812b4503bf383b9dfcf6dca19d400a871e6db7c39476d51d35491f2126cdc8c2527e89a7e888e0e0481e715ca1f38fde5ff813c503a219ddbfa93101b9717c1129e0342407b8695ecc1e0ba5d0f00ce3789a6cb4ff0e0d0388e6e98fe54f2a5c7a39039ee8bdf1899144b1ecc318fe67c7e20d854b6497fab4a8c336d5d9f10ed7349cd54b453506e10ac913f5d927c9c462798b043af7d4eefc9233c37da0dcc103a064ecea7b6a6db817b35b2054cc57439bcedaae9d2126a1a9acd6517ab5aecacd82adeb607ea3e96c48c179dc62c3b816f0bff4b2e3f2a03fd5d346f934a3458e3b399f1ad8590d7bee2c0ca8bafb73d6b4379a9453f844d545af828b17c218abaf57815b3d557afd40bf31d4f664a4258a16ac3010a28ae7f6ab9e9990380c13b28c3801b16e68e8cd8256c27941ddfb83103cc2f371b23cd9c5b137980e6fe2118794bcfb5649aedbe7a4a2ff58006211d50cbf4d87b2fb5f207fdf5156c34ef185de2ffa5b4a5789cb6745d24d7c9e806e7a871d93f966fa7559ffc4ed7ebc68dc41fad55397ba5b8ebfd39948c2a9b5898b81573665e6f8c3ade072bcec4f5514448fe210ddf93b150536bca6d667cccf30aca89168bc56c89f222e159c34d09e58fdd00b7e605bc82ea1c53d8c2312f4ec8f41b5c7838d2c3ec86b31cb9e16f412fb3868044139f46962e47176e7adcdbcec0c54488f4bea40d8ed9edbb2e3dbbd255109cd46669460289b3ada2d32e5cb3ec71acf63cd12ba50bffd68cc8920e6e15c37a21286296b2b7211cfb34da9be990d6feb29b472092387f6401d68de93eaad79c6654eced8dd95e0c95d4a6e4f9cd174e94437c0ef03232a9d04214910aabc436453989f2a06fdbf0e86e3685afc65437a6b7e56942a9851d62386084e5acf3b055608ed05385ebd0144bf0af61fb97e849874cd0ad1fc7a7de6b16df2e94e75410ab7e9d090590c28a04f64214717c8f96cde8a3f61b0f6a975508ac0ba3eec43557f6ec706e911222280353552b179cfb53534b93d79fad9616f5829f3704b7fda786754078dceaa56a251ebe7ea34fa3804b6944624e711dad398492659c56cfcea6b3e0d30313aaa8c9178de4bf3b37a1db70f16d666075ddb1d464ae2b186172447ef1c147713588b7dd3cad3fd7778e5cc22a0cfb79f0aededc397f21bebda55c01ac41ffbccf4550373e7e3f14f0b14d15aef9fad8c78b4ccc98df24b712a046894e668c850271ace7a214d472b5afe3739bb3f0ad2c1131c6a0b6ace2b47edd5190d6c754c5a34c3cb41cc8277de1bb9259d46cda013cb54c6f176022d6080186f0929fddc8ebbbe2d40710071a02a36c921e71c5b1a252d941ca36220833846d012af2c9429e3ca11de4d37533dcad96e8bf368cd8bfec22f0ba549332b43f50853853ba38febfad98129d631789e2648c6c4791d006be7e0cdf7c72d354d09ed51ecfb4fddaa0444f1b8c281c2c4898e6d22cc660a48e58f49eaca530f434c59d453638a1a51c8ad8700a9341444620f5b4edf16294d9d790b32d83fb06d4f2f0711469f4dd8a9d9d0ec3baa36c496990863fbaeafcf1228c5f1b138b5a075faf6297adbbe5e800a90a7c1af3f3dbeb954e3d094d94801afd659ef59b1836a63accd0ebd206ad2b5787b55f7e0baf7f8a103ac93b538c8ad78bb92e7c6adf397ba7e0f2aea811af098665f4764206f1b9334c601fed8cc68e983d6530940553dc7e1f5a33f838029f95f1dce9edacc71686385501a323125e019538e5b2bd011cc48f5ac8c95f5e1e88a2ae1a7f84dc705cd032254fcdde427f76be1e8626eb7a2d3ec1a6c658d2ff896f1340cc08d6b9e479570a0686bbe82ddfb1701318b90787e45eee6407e3741c2b97f8944fd89d2ce2dc5f9727bbb1dd27f83ad7b986a9d29f836b97b3885643f2d104367029553ef222172e521d03395583895a203a4c9399ea63a4148f174b8a42b556daf8bd15d31d7b6dca4caec422dd9d3862ddacdcbf62920571bcb83d4d0683f7ea60b33636d19ab0d2d69a894672f4da0d5bc189cd0a1e9b8acaf91690b9efb9707e336680a87dfb64aa7e3e3d88a4bcdb555845c84ee1bcd52eeb630af3052417a117cd2b3b6b75bed8c93c78b65bb73f3d9dddeafdf85ddfd73f1629031a915506d5799e90877e05ce757ebb78b62bf6857f002aa92dd132a1e5627680c0c1f2c909ebe2e07409af9a9d25ab6746c53909f1acbdcbf536a79490cba3039e2da9f1784e04cd1eda86f8add8af5e5c27e4c500f0d72bcb0f44cfce5f304f821d4c45f2e1747f9a1a05b067d2b6d635e4d5453814e3f00cb762a1288f5171afc1f3171c6969fa9ef1fd091dc3e0bb36fa2c784df34e74b297e892bca9576421d36958829ade12077bed126fe5c1380d58fadae1c7902baf154e7fd56e43f9ef4e439dd20144a8071fce171a042a1c13e7091fd0db143c9e55fc1db4fa59217c70986093955f15e371c7d2947a58a60b4bda426de8b90d42189116508e9bf6b1fb36c94dd8a7265184d8b752f844a57de9dac0beb67c4d38992d1f44db7331cacd2dbfb8bb703a96aaa7b13a12c7b714d625df37194626e8ac1c4f308ef28554e38c4f903a01bf6f1859059635f488c64b2ec6b60798cd866e2895814076c9cdd1046511e1330c7b98ed974f350d5ed5a908b66321b32b45e2fcf549c6e607a23ecb9f29b17bfdf683734adf0840c194c88afa9f00c8585e96e57115496be95f76c2c99530cf9e0bea43aa7fe4a1924beb6a133b222e39b9baf4335662b6d57e8d724019d3f9a75a012251b93ae1cd440f8880316beba85c1b9ed5629456ef72eedfc625a3e89f9a58a29ae1d7d7e669df5e454d5307f11b552e801fe170ecadf5ac8d78a4ba43be24ef3b9fa6f190d0cf46f8531ae2b5b1ec4fd1cde3a2345efe680e373f6eea38ad43ab5d825417eea6228605810a61f77bd983144505dceb3c873d9c6254b1ac9774d58ba9455e4c94212a2d7b27fa0d4eff981bcf491f2a1b41f4305498204b9c3c9e144cb92ce5c45683653c9a50ddae3ac2f9c5b5de10c86212a256122724e58d8a1ae53e3ccceb48cd3bd77d6124ae181416820bdeff4eb9f33893cdd722d58f8349c497b801444bd3ba7c5c8a9d50aa11f9b03423bf98215d04afa1b853bf7b5c061d48ecba53d2ba650dd3f66ebcb24ae10abc919f4716a4e99b567aaa5924bca9535f9dd99f572dc974189b3782fb6f34494bf9b9d337d0d01b751f6cf8778e65d1298e4598d09e5518d069690ca4c499e390d0df146d18f997c2e9c5700369e5f80fb61b680e38e95b6bfd4034cb0895a6b3d0987716b61b5496edd3bf4e7e0d7cfb1118c57ee516556fa6ca4dadd55417a00749835d6f02c491898ee60642806064b708f4ec00babca1d0b978bb8179977e83ea13741f4ee567310b856f74e5c18cdaa43697a93bf87cfac33134be191d7a8320593ad8f73d96dc898da3be4a0b1ad21a1e05700ad16154455b7b10d3b08e659915a95dc4ed78d8138ae7f957070f09ccc84e848eb7cae7ab40b4b522fc14eb2b85e2fc6bd0fbda89e207914321dc515a1a41a5a5b1e3b5118fca39f6053caf04ac58fc5e890224858b2d6b43d5db97d523e67302fe452eca612bcdf12ca6a80bb7e8ea624ec02a7a8b5e5e0f8ba0e4e067949e84e5301ef56455660e3cd772a4fb3e33dcc1eb0655e2cface06d9d1dafe6bc54191355b242f24f5e5f7e699916c552f799c0a91dcbb9794d7c45b870c6908ba089e58a5365deb7c4362294c3a5610323302996ea7e0d241913ddaf5d2a0c9979a049476eacd51883b9eb9e68072b64340b90aa29924816b0675e6bc717418358542f37a42b8915cf8d832a34fd6c1245c492f1bcf081f99f5d9ced7439ff990e9a6f4e56865e4de1bf1cd51fd23edaf0da90eeffdd38dacfaa5128e1c664531ed3d9422088a1f62e135ef0db90141d8a497389168aa113140e9dcd4de340701378bb13af852f9d171b88099b200670eb12b4b6a8ee45cd31db3a1960fbde624df846352ee72cd63f68cc2d302c070c8e29db6fea782a10fec95dcab1120c18f7a7f56d1289515203e62c6756e0e7c78c6f9e22c2aaba80b53f88fcaf21e753a8006a2a021a707e13210d26978523b985384ccf4fc36938adcc45e8b03bb399ec7eac26e71f3915c9bfc7ae47c430c2b4de37271b2dfb531600a50cb73d86107a996b377467402d6ad80765b55a74b0862cf5a8c68a21cba63ff24a2339d96cdcf27663bb25ac036326cc10d787ae1ed7e4019049ebe5c323b33be7894669d806e9579bb23111e6e3dd24e4593b014d4a5c7ab5dbbe2c6040292e211ae9a584285baad7de6205b1e6d48cf356638cae3500f183372a6d18e41e1a81c6536e8affa2edac51e992faf02df01544f6dedade1ee410cf10eebe2951451d875a6dbcb2300d80716a42641704060cdf5d7af87770ba29e29db6bca5e9c1b44c7ad75ada8ab4bcfd23d67871d1d620f8671ad1c5e6c084949d78ce8d9ed1e206ff19b23e6a785bc4b418df36eaa3c88dab69f776be59b27cd9dee5f6374ce55e3e8084ebc823e96a1d6d59b2846a4e138c807daa4b4289032de09d99b080782c45d6153a6ba7491e9541f601c8c4b5ef844cfcacf69950e1c859b51730d6194ae42127bf213b604d2ef4798d1f41a3feb4baade3a793713e0a47c24e4248fc0b9abe599179941ee154c3fbedc353631e76fbeb58bb5d67c8506ba50f83b2012d55fc9b38944f481985685ed800f33a54052e6f659081dd798ab452a54156d1ebb949fdaeb761149961070cd1785210bd9b77e7f625c9141b228d5662a4c153f02fdd8e61328459af123addd82de35ce442ebb27d8f315dab42f11853abfb472cd6c958ca1c2bff6bc163b83749cc021e0e0b97ec19da52d3eed5179894a554da89c451af6c1b7c4bce2bd2dc229ea3d636061cf479faf694149e12893b8119700ae0288e147544a373abf3cea6e717fd500f5b5d773af70c77ddefb257b174e1a32e396b491d80602ade1374eeef2ded7bb6d5f5f648568e48721a7a322c08d174d535474edf07d88e27b29a55a7fe46705b448687225a9903206a2bd00d76acf7e3c8edcf2f088d7453decbcb949998db64d48f3a349933ff489c0203e88c70cded3548cd2c440e8b71a83fca35b01cfcf6945a297d3cc2c5c147360fa96cfa532f9043a0fd978620d4742aefa827b78cde029f52c5bb841c3b2efbf2afb9b052ddeb555b2b93473e3de14653c1303dfba1a777ae2ceb005a8f9d197c67436c7bcabdd7f9aa5bcd1642ec1bae9184b245823bd259960e09f28ac1ccadd6eb1ead90d097a936f81a7a9d1fe46f6c79708adcb60f4e9919e21c4229929098ee1717023db5d5d2ffab254714ca66104f205baa94e7c4fb9a5a3f10c45ac1c43d5c7e00a2ae29efb263eb9224aee4703f9551f28f7089d7e225b91bb1732acdd4441c9585a02dd030ffeb092232f095fd0ae9f480cf872010c0e7397b1fa1e4df8dba0313f5ca9a71b82878d5ab53b7e7312b7bc0dcdc3e6a4e465dcffa88b6315adb46980dee385e8196c1bf1a8972c7d3f64e785b9108c5e7f1c5d3f7ecf0d")

03:36:35 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  506.373549][T26846] binder: BINDER_SET_CONTEXT_MGR already set
[  506.410150][T26846] binder: 26841:26846 ioctl 40046207 0 returned -16
03:36:35 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x0})

03:36:35 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:35 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x5000000, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  506.526009][T26853] block nbd0: shutting down sockets
03:36:35 executing program 5:
r0 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x401012f7, &(0x7f0000000040)=0x7fd)

[  506.634423][T26853] block nbd0: shutting down sockets
03:36:35 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x0})

03:36:35 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:35 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0)
getdents64(r3, &(0x7f0000000040)=""/57, 0x39)
ioctl$NBD_SET_SOCK(r2, 0xab00, r0)
ioctl$UI_GET_SYSNAME(r3, 0x8040552c, &(0x7f0000000080))

03:36:35 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:35 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x6000000, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:35 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca5055e0bcfec7be070")
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000040)={0x10001}, 0x2)

03:36:35 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0xff000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  506.960755][T26879] block nbd0: shutting down sockets
03:36:35 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x0})

03:36:35 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  507.070610][T26879] block nbd0: shutting down sockets
[  507.078436][T26892] binder: BINDER_SET_CONTEXT_MGR already set
[  507.109553][T26892] binder: 26890:26892 ioctl 40046207 0 returned -16
03:36:35 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x7000000, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:36 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/172, &(0x7f00000000c0)=0xac)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, r0)

03:36:36 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca5055e0bcfec7be070")
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000040)={0x10001}, 0x2)

03:36:36 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x0})

03:36:36 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  507.325089][T26914] binder_alloc: 26905: binder_alloc_buf, no vma
03:36:36 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:36 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x12000000, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  507.420655][T26909] block nbd0: shutting down sockets
03:36:36 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2})

03:36:36 executing program 5:
syz_open_dev$amidi(0x0, 0x0, 0x400000)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x638, 0x8083)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000180)={0x0, 0x0, 0x10000001002, 0x0, [0xfffffffe]})

[  507.573043][T26909] block nbd0: shutting down sockets
03:36:36 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:36 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x30000000, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:36 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0x0, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, r0)

03:36:36 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:36 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x3})

[  507.880939][T26941] block nbd0: shutting down sockets
03:36:36 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:36 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:36 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x38000000, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  507.933888][T26949] block nbd0: Device being setup by another task
[  507.956321][T26941] block nbd0: shutting down sockets
03:36:36 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000180), 0xe)
getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000380), 0x0)

03:36:36 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4})

03:36:36 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:37 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, r0)

03:36:37 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:37 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x40000000, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:37 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca5055e0bcfec7be070")
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14)

03:36:37 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x5})

[  508.357389][T26980] block nbd0: shutting down sockets
[  508.453386][T26986] binder_alloc: 26979: binder_alloc_buf, no vma
[  508.490215][T26994] binder_alloc: 26979: binder_alloc_buf failed to map pages in userspace, no vma
03:36:37 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  508.502963][T26980] block nbd0: shutting down sockets
03:36:37 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x6})

03:36:37 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x48000000, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:37 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
fdatasync(r1)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, r0)

03:36:37 executing program 5:
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00')
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1)
readv(r0, &(0x7f0000000580), 0x3c1)

03:36:37 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  508.733552][T27007] binder: BINDER_SET_CONTEXT_MGR already set
03:36:37 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  508.808917][T27007] binder: 27000:27007 ioctl 40046207 0 returned -16
03:36:37 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7})

03:36:37 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x58000000, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  508.924643][T27014] block nbd0: shutting down sockets
03:36:37 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  509.033207][T27014] block nbd0: shutting down sockets
03:36:37 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:37 executing program 5:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff})
r3 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000000c0), 0xfffffffffffffe6c, 0x0, 0x0, 0xfffffffffffffdf0)

03:36:38 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x8})

03:36:38 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x3, 0x100)
ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000080))
r2 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x100)
setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f00000000c0)={{0x9f, @multicast2, 0x4e21, 0x3, 'wrr\x00', 0x1, 0x1, 0x75}, {@local, 0x4e22, 0x0, 0x680, 0x80000000, 0x100000001}}, 0x44)
ioctl$NBD_SET_SOCK(r2, 0xab00, r0)
r3 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r3, 0xab00, r0)
syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x100)
ioctl$EXT4_IOC_MIGRATE(r2, 0x6609)

03:36:38 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x68000000, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  509.270889][T27033] binder_alloc: 27027: binder_alloc_buf, no vma
[  509.337540][    C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  509.357996][T27039] binder_alloc: 27027: binder_alloc_buf, no vma
03:36:38 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x300})

03:36:38 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  509.390665][T27043] block nbd0: shutting down sockets
03:36:38 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  509.454889][T27043] block nbd0: shutting down sockets
03:36:38 executing program 2:
r0 = socket(0x800e, 0x2, 0xffffffff)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, r0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0})

03:36:38 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0xfdfdffff, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:38 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x500})

[  509.597584][T27062] binder_alloc: 27047: binder_alloc_buf, no vma
03:36:38 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:38 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:38 executing program 5:

03:36:38 executing program 2:
r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f00000000c0)={0xda2})
r1 = socket(0x11, 0x2, 0x0)
r2 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, r1)
r3 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r3, 0xab00, r1)
r4 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x7ff, 0x2)
ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000100))
ioctl$RNDADDTOENTCNT(r4, 0x40045201, &(0x7f0000000140)=0x1f)

03:36:38 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x600})

03:36:38 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0xfffffdfd, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:38 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:38 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  510.196062][T27087] block nbd0: shutting down sockets
03:36:39 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x5800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:39 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x700})

03:36:39 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x100000000000000, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:39 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x1200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:39 executing program 5:

03:36:39 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, r0)

[  510.431876][T27114] binder_alloc: 27109: binder_alloc_buf, no vma
[  510.435419][T27110] binder: BINDER_SET_CONTEXT_MGR already set
03:36:39 executing program 5:
r0 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x0)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40246608, &(0x7f0000000040)=0x63)

03:36:39 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4000})

[  510.501747][T27110] binder: 27109:27110 ioctl 40046207 0 returned -16
03:36:39 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x6800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:39 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x200000000000000, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:39 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  510.635562][T27118] block nbd2: shutting down sockets
03:36:39 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xff00})

03:36:39 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00')
write$FUSE_NOTIFY_DELETE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='4'], 0x1)

[  510.765387][T27118] block nbd2: shutting down sockets
03:36:39 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:39 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:39 executing program 2:
r0 = socket(0x11, 0x6, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x42000)
ioctl$NBD_SET_SOCK(r2, 0xab00, r0)

03:36:39 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x300000000000000, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:39 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x1000000})

03:36:39 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:40 executing program 2:
prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f00000001c0))
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="c600000007000000a0000000dcc7936d386ac8dc676c0386a972085ac26c694960e925e26994941f1036323bc6e83ab72931899c05f41ac82308a59a15c2f668a59f96c6e42402407c55255c6cbf84971bf70e38677a427f5b75a50400a46478e9589027ea80292fbb535cc466154edc24155f9b84eadedb50d41fb067c216eae0da8445c7124d8ae0186c9503edf8c24fc850c8a7084cf1e661cdff7e1495a3ed5c88f7eeb5103d7436dc7870277df01d568416755cf29d70b6313eb9cde9fd6459e9"])
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r3 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r3, 0xab00, r0)
recvfrom$x25(r0, &(0x7f0000000000)=""/57, 0x39, 0x40000001, &(0x7f0000000040)={0x9, @remote={[], 0x3}}, 0x12)

03:36:40 executing program 5:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x800000000009031, 0xffffffffffffffff, 0x0)
creat(0x0, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x100000003)
get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ff0000/0x10000)=nil, 0x2)
mincore(&(0x7f000020c000/0x3000)=nil, 0x3000, 0x0)

03:36:40 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x400000000000000, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:40 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0xff00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:40 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2000000})

03:36:40 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  511.403951][T27177] block nbd0: shutting down sockets
[  511.428609][T27181] binder: BINDER_SET_CONTEXT_MGR already set
[  511.446805][T27181] binder: 27172:27181 ioctl 40046207 0 returned -16
03:36:40 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x500000000000000, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  511.528142][T27177] block nbd0: shutting down sockets
03:36:40 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:40 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x3000000})

03:36:40 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:40 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0)
r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
fsetxattr$security_ima(r1, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000040)=@md5={0x1, "6767530d0604b4e4dcd974a6a838c491"}, 0x11, 0x2)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)

[  511.704626][T27196] binder: BINDER_SET_CONTEXT_MGR already set
[  511.710678][T27196] binder: 27191:27196 ioctl 40046207 0 returned -16
03:36:40 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x600000000000000, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:40 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:41 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_tables_matches\x00')
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1)
readv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/178, 0xb2}, {&(0x7f0000000100)=""/159, 0x9f}, {0x0}], 0x3)
readv(r0, &(0x7f0000000580), 0x3c1)

03:36:41 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4000000})

03:36:41 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:41 executing program 2:
r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0)
ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff)
r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x2)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff)

03:36:41 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:41 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x700000000000000, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  512.573491][T27231] binder: BINDER_SET_CONTEXT_MGR already set
[  512.601765][T27231] binder: 27226:27231 ioctl 40046207 0 returned -16
03:36:41 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x5000000})

03:36:41 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  512.618905][T27235] binder_alloc: 27226: binder_alloc_buf, no vma
[  512.632330][T27236] binder_alloc: 27226: binder_alloc_buf, no vma
03:36:41 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
ioctl$NBD_SET_SOCK(r2, 0xab00, r0)

03:36:41 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x1200000000000000, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:41 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:41 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket(0x2, 0x3, 0x100000001)
r2 = dup2(r0, r1)
ioctl$KDSKBSENT(r2, 0x4b49, 0x0)

03:36:41 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x6000000})

03:36:41 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  512.912671][T27254] block nbd0: shutting down sockets
03:36:41 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x3000000000000000, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:41 executing program 2:
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x2000, 0x0)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x293b}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
r2 = socket(0x11, 0x2, 0x0)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00')
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x20, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x40005)
r4 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r4, 0xab00, r2)
ioctl$IOC_PR_RELEASE(r4, 0x401070ca, &(0x7f0000000000)={0x1, 0x80})
r5 = syz_open_dev$ndb(0x0, 0x0, 0x1)
ioctl$NBD_SET_SOCK(r5, 0xab00, r2)

03:36:41 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7000000})

03:36:41 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:42 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0)
pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x0)
sendfile(r0, r1, 0x0, 0x102000002)

03:36:42 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x12000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  513.288599][T27281] binder: BINDER_SET_CONTEXT_MGR already set
03:36:42 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x8000000})

[  513.337374][T27281] binder: 27273:27281 ioctl 40046207 0 returned -16
[  513.362003][T27278] block nbd0: shutting down sockets
03:36:42 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  513.428268][T27293] block nbd0: Device being setup by another task
03:36:42 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x3800000000000000, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  513.476248][T27293] block nbd0: shutting down sockets
03:36:42 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:42 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x40000000})

03:36:42 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055ef7ceec7be070")
add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)

03:36:42 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000000040)=0x5f72)
syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x121000)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, r0)

03:36:42 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:42 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x38000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:42 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x4000000000000000, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:42 executing program 5:
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000))

[  513.836884][T27314] block nbd0: shutting down sockets
03:36:42 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xff000000})

[  513.908966][T27314] block nbd2: shutting down sockets
[  513.980935][T27314] block nbd0: shutting down sockets
03:36:42 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  514.021180][T27314] block nbd2: shutting down sockets
03:36:42 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  514.084161][T27333] binder: BINDER_SET_CONTEXT_MGR already set
[  514.090433][T27333] binder: 27332:27333 ioctl 40046207 0 returned -16
03:36:42 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x400)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, r0)

03:36:42 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x100000000000000})

03:36:43 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:43 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x48000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:43 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x4800000000000000, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:43 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local}}, 0xe8)
dup3(r0, r1, 0x0)

[  514.351000][T27347] block nbd2: shutting down sockets
[  514.435336][T27347] block nbd2: shutting down sockets
03:36:43 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x200000000000000})

03:36:43 executing program 2:
r0 = open(&(0x7f0000000000)='./file0\x00', 0x141000, 0x1)
ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000040))
r1 = socket(0x11, 0x2, 0x0)
r2 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000440)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000238efb8b0118f6220004000000a8040000000000004001000080020000c0030000c0030000c0e1000004000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c6500000000000000000000000000000000000000000000000000000000000000000000000000000000a48b0f05172d00000000000000000000ac141424ac1414aa0000000000000000ac141419ac1e0101ffffff00ffffffffffffffffffff0000000000000000000000000000000000000000ff00000000000000000000000000aaaaaaaaaa20000000000000000000000000000000000000ffff00ffff00000000000000000000000082000900078000000002006272696467655f736c6176655f3000007663616e30000000000000000000000000000000000000000000ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c6500000000000000000000000000000000000000000000000000000000000000000000000000000000319d71a87ced00000000000000000000ac14141dac1414aa0200000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c65000000000000000000000000000000000000000000000000aaaaaaaaaaaa00000000000000000000aaaaaaaaaa260000000000000000000000000000ffffffff02000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x4f8)
ioctl$NBD_SET_SOCK(r2, 0xab00, r1)
getsockname(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000140)=0x80)
r3 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r3, 0xab00, r1)

03:36:43 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x58000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:43 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x5800000000000000, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:43 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:43 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local}}, 0xe8)
dup3(r0, r1, 0x0)

[  514.720502][T27371] block nbd0: shutting down sockets
03:36:43 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x300000000000000})

03:36:43 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  514.863928][T27371] block nbd0: shutting down sockets
03:36:43 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x68000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:43 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local}}, 0xe8)
dup3(r0, r1, 0x0)

03:36:43 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x6800000000000000, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:43 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x400000000000000})

03:36:43 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0x0, 0xffffffffffffffff)
ioctl$NBD_SET_SOCK(r2, 0xab00, r0)

03:36:43 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local}}, 0xe8)
dup3(r0, r1, 0x0)

03:36:44 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:44 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  515.186032][T27405] block nbd0: shutting down sockets
03:36:44 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x500000000000000})

03:36:44 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x8000000000000000, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  515.273149][T27405] block nbd0: shutting down sockets
03:36:44 executing program 2:
r0 = socket(0x4, 0x8000f, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, r0)

03:36:44 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:44 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0xfdfdffff00000000, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:44 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
dup3(r0, r1, 0x0)

03:36:44 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x600000000000000})

03:36:44 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:44 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)

03:36:44 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
dup3(r0, r1, 0x0)

03:36:44 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x700000000000000})

03:36:44 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  515.867714][T27449] block nbd0: shutting down sockets
03:36:44 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0xffffffff00000000, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:44 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  515.993285][T27449] block nbd0: shutting down sockets
03:36:44 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x800000000000000})

03:36:44 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00')
sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20012}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x400, 0x70bd28, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040880}, 0x4)
r2 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x10000, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, r0)
r3 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r3, 0xab00, r0)
setsockopt$sock_void(r0, 0x1, 0x24, 0x0, 0x0)

03:36:44 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
dup3(r0, r1, 0x0)

03:36:44 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:44 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x66646185, 0x0, 0x0, 0xc}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:45 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:45 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4000000000000000})

[  516.313721][T27475] block nbd0: shutting down sockets
[  516.394624][T27475] block nbd0: shutting down sockets
03:36:45 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local}}, 0xe8)
dup3(r0, 0xffffffffffffffff, 0x0)

[  516.416684][T27486] ------------[ cut here ]------------
[  516.422217][T27486] kernel BUG at drivers/android/binder_alloc.c:1130!
03:36:45 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:45 executing program 2:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x200000000003)
r1 = socket(0x11, 0x2, 0x0)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0)=r0, 0x4)
r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, r1)

[  516.542349][T27486] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  516.548489][T27486] CPU: 1 PID: 27486 Comm: syz-executor.4 Not tainted 5.2.0-rc5 #28
[  516.556405][T27486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  516.566673][T27486] RIP: 0010:binder_alloc_do_buffer_copy+0xd6/0x510
[  516.573282][T27486] Code: 02 00 0f 85 20 04 00 00 4d 8b 64 24 58 49 29 dc e8 bf 9d 1c fc 4c 89 e6 4c 89 ef e8 d4 9e 1c fc 4d 39 e5 76 07 e8 aa 9d 1c fc <0f> 0b e8 a3 9d 1c fc 4c 8b 75 d0 4d 29 ec 4c 89 e6 4c 89 f7 e8 b1
[  516.592983][T27486] RSP: 0018:ffff88805b7ff4e0 EFLAGS: 00010206
[  516.599069][T27486] RAX: 0000000000040000 RBX: 0000000020001000 RCX: ffffc9000e6a5000
[  516.607056][T27486] RDX: 0000000000001060 RSI: ffffffff855423b6 RDI: 0000000000000006
[  516.615222][T27486] RBP: ffff88805b7ff560 R08: ffff88805ccd64c0 R09: 0000000000000008
[  516.623324][T27486] R10: ffffed100b6fff15 R11: ffff88805b7ff8af R12: 0000000000000078
[  516.631316][T27486] R13: 0000000000000008 R14: 00000000000000a8 R15: 0000000000000000
[  516.639371][T27486] FS:  00007f86d129e700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000
[  516.648397][T27486] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  516.654996][T27486] CR2: 00007ff7248ab000 CR3: 0000000095439000 CR4: 00000000001406e0
[  516.663762][T27486] Call Trace:
[  516.667069][T27486]  ? find_held_lock+0x35/0x130
[  516.671869][T27486]  binder_alloc_copy_from_buffer+0x37/0x42
[  516.677782][T27486]  binder_validate_ptr+0xcc/0x1d0
[  516.682825][T27486]  ? binder_get_object+0x210/0x210
[  516.687950][T27486]  ? binder_alloc_copy_from_buffer+0x37/0x42
[  516.693942][T27486]  ? __sanitizer_cov_trace_switch+0x49/0x80
[  516.699852][T27486]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[  516.705582][T27486]  ? binder_get_object+0x181/0x210
[  516.710735][T27486]  binder_transaction+0x2c9c/0x6620
[  516.715957][T27486]  ? binder_thread_read+0x3d00/0x3d00
[  516.721426][T27486]  ? mark_held_locks+0xf0/0xf0
[  516.726201][T27486]  ? mark_held_locks+0xf0/0xf0
[  516.730983][T27486]  ? __might_fault+0x12b/0x1e0
[  516.735868][T27486]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  516.742124][T27486]  ? _copy_from_user+0xdd/0x150
[  516.747801][T27486]  binder_thread_write+0x64a/0x2820
[  516.753019][T27486]  ? mark_held_locks+0xf0/0xf0
[  516.757799][T27486]  ? fs_reclaim_acquire.part.0+0x30/0x30
[  516.763491][T27486]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  516.769747][T27486]  ? binder_transaction+0x6620/0x6620
[  516.775134][T27486]  ? __might_fault+0x12b/0x1e0
[  516.779923][T27486]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  516.786170][T27486]  ? _copy_from_user+0xdd/0x150
[  516.791039][T27486]  binder_ioctl+0x102f/0x1833
[  516.795722][T27486]  ? binder_thread_write+0x2820/0x2820
[  516.801187][T27486]  ? tomoyo_path_number_perm+0x263/0x520
[  516.806826][T27486]  ? tomoyo_execute_permission+0x4a0/0x4a0
[  516.812655][T27486]  ? binder_thread_write+0x2820/0x2820
[  516.818119][T27486]  do_vfs_ioctl+0xd5f/0x1380
[  516.822714][T27486]  ? ioctl_preallocate+0x210/0x210
[  516.827833][T27486]  ? selinux_file_mprotect+0x620/0x620
[  516.833339][T27486]  ? __fget+0x381/0x550
[  516.837521][T27486]  ? ksys_dup3+0x3e0/0x3e0
[  516.841953][T27486]  ? nsecs_to_jiffies+0x30/0x30
[  516.846905][T27486]  ? tomoyo_file_ioctl+0x23/0x30
[  516.851857][T27486]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  516.858116][T27486]  ? security_file_ioctl+0x8d/0xc0
[  516.863235][T27486]  ksys_ioctl+0xab/0xd0
[  516.867393][T27486]  __x64_sys_ioctl+0x73/0xb0
[  516.871994][T27486]  do_syscall_64+0xfd/0x680
[  516.876513][T27486]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  516.882409][T27486] RIP: 0033:0x4592c9
[  516.886315][T27486] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  516.906104][T27486] RSP: 002b:00007f86d129dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  516.914523][T27486] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004592c9
[  516.922941][T27486] RDX: 0000000020000440 RSI: 00000000c0306201 RDI: 0000000000000003
[  516.930918][T27486] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
03:36:45 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xff00000000000000})

03:36:45 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:45 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x13f, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000300)={0x13, 0x10, 0xfa00, {&(0x7f0000000100), r1}}, 0x18)

03:36:45 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x77622a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

03:36:45 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0xfffffffffffffffe})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001100)={0x3, 0x0, [{0x3002}, {0x1, 0x1a, &(0x7f0000000080)=""/26}, {0x3000, 0x1000, &(0x7f0000000100)=""/4096}]})

03:36:45 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000200)={@flat=@binder={0x66642a85}, @flat=@binder={0x66646185, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  516.938901][T27486] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f86d129e6d4
[  516.946883][T27486] R13: 00000000004c078e R14: 00000000004d3248 R15: 00000000ffffffff
[  516.954872][T27486] Modules linked in:
[  516.960347][ T3879] kobject: 'loop3' (00000000ce84ac75): kobject_uevent_env
[  516.968782][T27486] ---[ end trace c18c1f1456683976 ]---
[  516.969451][ T3879] kobject: 'loop3' (00000000ce84ac75): fill_kobj_path: path = '/devices/virtual/block/loop3'
[  516.989964][T27486] RIP: 0010:binder_alloc_do_buffer_copy+0xd6/0x510
[  516.990446][ T3879] kobject: 'loop1' (00000000e3d7bcfc): kobject_uevent_env
[  517.006004][T27486] Code: 02 00 0f 85 20 04 00 00 4d 8b 64 24 58 49 29 dc e8 bf 9d 1c fc 4c 89 e6 4c 89 ef e8 d4 9e 1c fc 4d 39 e5 76 07 e8 aa 9d 1c fc <0f> 0b e8 a3 9d 1c fc 4c 8b 75 d0 4d 29 ec 4c 89 e6 4c 89 f7 e8 b1
[  517.015664][ T3879] kobject: 'loop1' (00000000e3d7bcfc): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  517.049563][T27486] RSP: 0018:ffff88805b7ff4e0 EFLAGS: 00010206
[  517.056135][T27486] RAX: 0000000000040000 RBX: 0000000020001000 RCX: ffffc9000e6a5000
[  517.062304][ T3879] kobject: 'loop3' (00000000ce84ac75): kobject_uevent_env
[  517.064478][T27486] RDX: 0000000000001060 RSI: ffffffff855423b6 RDI: 0000000000000006
[  517.080016][ T3879] kobject: 'loop3' (00000000ce84ac75): fill_kobj_path: path = '/devices/virtual/block/loop3'
[  517.089129][T27486] RBP: ffff88805b7ff560 R08: ffff88805ccd64c0 R09: 0000000000000008
[  517.099327][T27486] R10: ffffed100b6fff15 R11: ffff88805b7ff8af R12: 0000000000000078
[  517.107582][ T3879] kobject: 'loop1' (00000000e3d7bcfc): kobject_uevent_env
[  517.107617][ T3879] kobject: 'loop1' (00000000e3d7bcfc): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  517.108947][ T3879] kobject: 'loop3' (00000000ce84ac75): kobject_uevent_env
[  517.115217][T27486] R13: 0000000000000008 R14: 00000000000000a8 R15: 0000000000000000
[  517.128208][ T3879] kobject: 'loop3' (00000000ce84ac75): fill_kobj_path: path = '/devices/virtual/block/loop3'
[  517.133239][T27486] FS:  00007f86d129e700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000
[  517.146103][ T3879] kobject: 'loop1' (00000000e3d7bcfc): kobject_uevent_env
[  517.162148][T27486] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  517.169926][ T3879] kobject: 'loop1' (00000000e3d7bcfc): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  517.186480][T27486] CR2: 000000000070e158 CR3: 0000000095439000 CR4: 00000000001406f0
[  517.190109][ T3879] kobject: 'loop5' (0000000068c99519): kobject_uevent_env
[  517.202285][ T3879] kobject: 'loop5' (0000000068c99519): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  517.206224][T27522] ------------[ cut here ]------------
[  517.218085][T27522] kernel BUG at drivers/android/binder_alloc.c:1130!
[  517.222955][ T3879] kobject: 'loop2' (0000000010c379ae): kobject_uevent_env
[  517.227854][T27486] Kernel panic - not syncing: Fatal exception
[  517.233654][ T3879] kobject: 'loop2' (0000000010c379ae): fill_kobj_path: path = '/devices/virtual/block/loop2'
[  517.249172][T27486] Kernel Offset: disabled
[  517.253510][T27486] Rebooting in 86400 seconds..