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"})

[ 1030.333607][ T7024] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
19:19:58 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:19:58 executing program 3:
r0 = socket$kcm(0xa, 0x2, 0x73)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69)
connect(r0, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x3ee8d10a4aedc818)
sendmmsg$inet_sctp(r0, &(0x7f0000003540)=[{&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}], 0x1, 0x0)
modify_ldt$read_default(0x2, &(0x7f0000000100)=""/232, 0xe8)

[ 1030.429438][ T7044] binder_alloc: binder_alloc_mmap_handler: 7023 20004000-20007000 already mapped failed -16
[ 1030.483893][ T7024] binder: BINDER_SET_CONTEXT_MGR already set
[ 1030.493422][ T7024] binder: 7023:7024 ioctl 40046207 0 returned -16
[ 1030.509311][ T7049] binder_alloc: 7023: binder_alloc_buf, no vma
19:19:58 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc)
r2 = syz_open_dev$vcsa(0x0, 0xff, 0x480100)
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x7}, &(0x7f0000000380)=0xdc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, 0x0, &(0x7f0000000240))
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000080)=""/148, 0x4a8}], 0x1fa1, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, <r3=>0x0})
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@initdev}, 0x0, @in6=@empty}}, &(0x7f00000001c0)=0xe8)
getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f00000003c0), &(0x7f0000000400)=0x8)
ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0186405, &(0x7f0000000200)={0xa4, 0x100000001, r3, 0x0, r4, 0x0, 0x20000000, 0x5})
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter\x00')
setsockopt$inet_int(r2, 0x0, 0x21, &(0x7f0000000180)=0x3, 0x4)
ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6)
prctl$PR_SET_SECUREBITS(0x1c, 0x2e)
preadv(r5, &(0x7f0000000480), 0x10000000000001fd, 0x0)

19:19:58 executing program 2:
syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0)
r0 = syz_open_dev$usb(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x0, 0x0)
dup3(r1, r0, 0x0)

19:19:58 executing program 5:
ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000080)=<r0=>0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x1, 0x1f, 0x200, 0xbe44, 0x0, 0x1, 0x80000, 0x4, 0x2, 0x7f, 0x9, 0x2, 0xf3e, 0x1f, 0x3, 0x401, 0xfff, 0x3, 0x3ff, 0x1, 0x2, 0x80000000, 0xfff, 0x6, 0xfffffffffffffc00, 0x3, 0xb89, 0x0, 0xe28c, 0x100000001, 0x0, 0x0, 0x5, 0x2, 0x6, 0xffffffffffffffe1, 0x0, 0x3ff, 0x0, @perf_config_ext={0x7, 0x89c}, 0x8403, 0x1, 0x10001, 0x0, 0x7, 0x1, 0x7b}, r0, 0x2, r1, 0x8)
r2 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0)
r3 = syz_open_dev$usb(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3)
dup3(r4, r3, 0x0)

19:19:58 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

19:19:58 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:19:58 executing program 3:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = socket(0x22, 0x2, 0x4)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x8001, 0x8486, 0x1, 0x4, 0x3})
getsockname$packet(r0, 0x0, 0x0)

[ 1030.653936][ T7064] binder_alloc: 7063: binder_alloc_buf size 13568 failed, no address space
19:19:58 executing program 5:
syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0)
r0 = syz_open_dev$usb(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x0, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x46c, 0x114, 0x114, 0x0, 0x388, 0x388, 0x388, 0x4, &(0x7f0000000000), {[{{@arp={@remote, @remote, 0xffffff00, 0xffffffff, @mac, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @empty, {[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10000, 0x8, 0x9, 0x2, 0x9, 0xd48, 'veth0_to_bond\x00', 'teql0\x00', {}, {0xff}, 0x0, 0x81}, 0xf0, 0x114}, @unspec=@NFQUEUE1={0x24, 'NFQUEUE\x00', 0x1, {0x20, 0x5}}}, {{@uncond, 0xf0, 0x134}, @unspec=@LED={0x44, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x1, 0x4}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@random="091079eb032b", @dev={0xac, 0x14, 0x14, 0x11}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}}}], {{[], 0xc0, 0xe4}, {0x24}}}}, 0x4b8)
dup3(r1, r0, 0x0)

19:19:58 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x17, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1030.699244][ T7064] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
19:19:58 executing program 2:
syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0)
r0 = syz_open_dev$usb(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0)
ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000080)={0x6, 0x1, @start={0xc1e2, 0x1}})
r2 = getpgid(0x0)
write$cgroup_pid(r0, &(0x7f0000000000)=r2, 0x12)
dup3(r1, r0, 0x0)
ioctl$NBD_CLEAR_SOCK(r0, 0xab04)

[ 1030.741567][ T7073] binder_alloc: binder_alloc_mmap_handler: 7063 20004000-20007000 already mapped failed -16
19:19:58 executing program 3:
r0 = open(&(0x7f0000000000)='./file0\x00', 0x30000, 0x8)
write$UHID_INPUT(r0, &(0x7f0000000040)={0x8, "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", 0x1000}, 0x1006)
syz_open_dev$loop(&(0x7f0000001080)='/dev/loop#\x00', 0xfffffffffffffffd, 0x80)
mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000)
lsetxattr(0x0, 0x0, 0x0, 0x0, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil)

[ 1030.786909][ T7064] binder: BINDER_SET_CONTEXT_MGR already set
[ 1030.825145][ T7064] binder: 7063:7064 ioctl 40046207 0 returned -16
19:19:58 executing program 5:
syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0)
r0 = syz_open_dev$usb(0x0, 0x0, 0x0)
socket$inet(0x2, 0xc05, 0xf1)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)=<r1=>0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x8)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x0, 0x0)
dup3(r2, r0, 0x0)
syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x7, 0x420c0)

[ 1030.834756][ T7083] binder_alloc: 7063: binder_alloc_buf, no vma
[ 1030.850729][    C1] net_ratelimit: 16 callbacks suppressed
[ 1030.850737][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1030.850747][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1030.850792][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1030.856599][    C1] protocol 88fb is buggy, dev hsr_slave_1
19:19:58 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x18, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1030.931010][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1030.936872][    C0] protocol 88fb is buggy, dev hsr_slave_1
19:19:59 executing program 4:
arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000040))
r0 = socket$netlink(0x10, 0x3, 0x4)
write(r0, &(0x7f0000000000)="2700000014000707030e0000120f0a00118d74ad0f551000000000000000000000000000000000", 0x27)

19:19:59 executing program 2:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x18000, 0x0)
ioctl$TCFLSH(r0, 0x540b, 0xfffffffffffffeff)
syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = syz_open_dev$usb(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x0, 0x0)
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x107080, 0x0)
ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e05411, &(0x7f0000000000)=""/166)
dup3(r2, r1, 0x0)

19:19:59 executing program 3:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000580)={0xffffffffffffff21, 0x0, &(0x7f00000004c0)})
ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000200)={0x108, 0x0, &(0x7f00000000c0)})
ioctl$int_out(r0, 0x0, &(0x7f0000000080))
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x208000, 0x0)
ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000140)={0x0, 0x1, {0xe, 0x6, 0xb, 0x1a, 0x4, 0x9, 0x5, 0x1b, 0x1}})
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000300)=""/250)
getsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r3 = getpgrp(0xffffffffffffffff)
write$cgroup_pid(r2, &(0x7f0000000400)=r3, 0x12)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)="d276cb8766e2e9ddc50c082b18a572d1412bcfa8fccde964f183eb6ba2a718aa92120a63ec30f923ca13144d09a2c1f94baf6afe6016dc2db4dd63be3b1326f901a4", 0x42, r0}, 0x68)

19:19:59 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

19:19:59 executing program 5:
syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0)
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x10f080, 0x0)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000040)=ANY=[@ANYRES32=<r1=>0x0, @ANYBLOB="b0000000ea053bc286bd1f43fa1ebd26bd88119812bb6bd2ea6c34a4fc902c7e37949d0cf6ec5e14e65bd1c0d8041029560da743c93939e55a00b738d524a0f12015625ecd8a7371a286065a349e77f34cf6beecd517137e6ce008bf03c8f13b884f3e1d0dd0978f52ee650f61b69aaeb3dff72b43cb5a00bb837d6b390a2c7d5a4e448e74c736f711465036e83f3635dfd176197147425517c18cc564b812a1d9c8f6847e76b5d410a94a67c6f3da24ea3c9fd7"], &(0x7f0000000100)=0xb8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={r1, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x479a, @remote, 0x800}, @in6={0xa, 0x4e21, 0x101, @dev={0xfe, 0x80, [], 0x25}, 0x80}, @in6={0xa, 0x4e21, 0x1ff, @loopback, 0x4}, @in={0x2, 0x4e23, @multicast1}]}, &(0x7f0000000200)=0xc)
r2 = syz_open_dev$usb(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x0, 0x0)
dup3(r3, r2, 0x0)

19:19:59 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x1a, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1031.170743][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1031.244053][ T7113] binder_alloc: 7112: binder_alloc_buf size 13824 failed, no address space
[ 1031.266528][ T7113] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
19:19:59 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:19:59 executing program 2:
syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0)
r0 = syz_open_dev$usb(0x0, 0x0, 0x107240)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x0, 0x0)
dup3(r1, r0, 0x0)

[ 1031.290401][ T7122] binder_alloc: binder_alloc_mmap_handler: 7112 20004000-20007000 already mapped failed -16
[ 1031.310397][ T7113] binder: BINDER_SET_CONTEXT_MGR already set
[ 1031.317323][ T7113] binder: 7112:7113 ioctl 40046207 0 returned -16
19:19:59 executing program 3:
mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil)
r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2)
ioctl$sock_netdev_private(r0, 0x89f8, &(0x7f0000000040)="c15ece73737f47138eef468396c04d20e25de561f4016d6232ecb518ab943a9fc91936f9a9e1c35e2aebc7f00345c5a02efa75dbf10c1a17fefb6833488f83903b5876ede54a6a604132c695a48a197870ea3ac4febbd252f4e162aff41f9a57b01950759c0549e6121b0f8009af7b4caee9ccb780ea7ccc81880f43c2b8583a4d52acc275c6713da8c26bc8de27453b49cc6b3e630e8910daadd3d32745eb54116e89a5d0e70a7d7740")
ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000100)=0xffffffffffffffc7)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000280)={'veth1_to_team\x00', &(0x7f0000001e40)=ANY=[@ANYBLOB='K']})

19:19:59 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000000))
ioperm(0x0, 0x9d8d, 0x0)

[ 1031.347506][ T7122] binder_alloc: 7112: binder_alloc_buf, no vma
19:19:59 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x4, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:19:59 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

[ 1031.574499][ T7146] binder_alloc: binder_alloc_mmap_handler: 7141 20004000-20007000 already mapped failed -16
[ 1031.594877][ T7142] binder: BINDER_SET_CONTEXT_MGR already set
[ 1031.601644][ T7142] binder: 7141:7142 ioctl 40046207 0 returned -16
[ 1031.608337][ T7146] binder_alloc: 7141: binder_alloc_buf, no vma
[ 1031.615391][   T17] binder_release_work: 16 callbacks suppressed
19:19:59 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x29, &(0x7f0000000140)={0x0, 'bridge_slave_0\x00'}, 0x18)
setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0)
lstat(0x0, &(0x7f0000000480))
ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000380)={{0x0, 0x7ff000000000000, 0x80000001, 0xe4e, 0x1, 0x8000}})
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000340))
socket$bt_bnep(0x1f, 0x3, 0x4)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/kvm\x00', 0x0, 0x0)
getpgid(0x0)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000140)=<r2=>0x0)
r3 = syz_open_dev$adsp(0x0, 0x7fffffff, 0x80000)
ioctl$KVM_SET_TSC_KHZ(r3, 0xaea2, 0x1)
r4 = creat(&(0x7f00000003c0)='./file1\x00', 0x100)
rt_tgsigqueueinfo(0x0, r2, 0x3f, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = getpid()
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000100))
write$P9_RXATTRCREATE(r3, &(0x7f0000000000)={0x7, 0x21, 0x1}, 0x7)
r6 = msgget$private(0x0, 0x0)
msgctl$IPC_RMID(r6, 0x0)
sched_setscheduler(r5, 0x5, &(0x7f0000000040))
r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000000c0))
ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f0000000180)=""/68)
r8 = pkey_alloc(0x0, 0x2)
pkey_free(r8)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_IRQ_LINE(r4, 0x4008ae61, &(0x7f0000000080)={0x7, 0x800})
write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0xf, 0x2, {{0x0, 0x1}, 0x2}}, 0x18)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000200)={0x10000000002, 0x0, @ioapic={0x0, 0x0, 0x0, 0x7f, 0x0, [{0x0, 0x0, 0x17000000, [], 0xffffffffffffffff}, {}, {0xff00000000000000}]}})

19:19:59 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x34000, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:19:59 executing program 4:
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x1, 0x2)
setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000180)=0x9, 0x4)
r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x101, 0x22ff)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0205710, &(0x7f0000000040)={0x1, 0x6, 0xab98, 0xb3a})
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000080), 0x4)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000100)=0x7, 0x4)
syz_emit_ethernet(0xff65, &(0x7f00000000c0)={@local, @local, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0xf401, 0x0, @remote={0xac, 0x1c}, @local}, @igmp={0x8, 0x0, 0x0, @broadcast}}}}}, 0x0)

19:19:59 executing program 2:
syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000000), 0x80000)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x0, 0x0)
r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x100000000, 0x60, 0x1, 0x0, 0x80000000}, 0x14)

19:19:59 executing program 3:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$caif_seqpacket(0x25, 0x5, 0x2)
setsockopt$sock_attach_bpf(r0, 0x10d, 0x2, 0x0, 0x0)
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f0000000080)='big_key\x00', 0x0, &(0x7f0000000340)="46ac5128da090e4899c38028efeb85968ead969e21e33725a7edc030260cdb3ca79964a6e93ce51185f005b7dac052cb797af438c32c29b736fb12c63dd0e504445044a1ae9c10fd8171232ed7dcb08e9acaf4c569c4c16c5c47994118fc35ff7f03407dc7093fa7d3132d276a10768b2711cd1c6ecd3545692431856b6e0651", 0x80, 0xfffffffffffffffd)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x1, 0x9d0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000540], 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000009000000000000000000697036746e6c300000000000000000007465716c3000000000000000000000006272696467655f736c6176655f3100006272696467655f736c6176655f310000ae0000000000000000000000aaaaaaaaaaaa0000000000000000f8080000f808000040090000616d6f6e670000000000000000000000000000000000000000000000000000006408000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000007f0000010000000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000ac1414bb0000000000000000000000006c6f67000000000000000000000000000000000000000000000000000000000024000000001f9bf16029c6f67d33397ab27cb70202980708693b59969ffe29b1186b14000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff00000000000000000000000000"]}, 0xa19)
mknod(&(0x7f0000000a00)='./file0\x00', 0x605, 0x0)
execve(&(0x7f0000000100)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000540)='\x00'], &(0x7f00000002c0)=[&(0x7f0000000240)=']\x00'])
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, &(0x7f0000000000))
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r3 = dup(r2)
ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000180)=r3)
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000100)={'\x00', 0x1000000400})
timer_create(0x7, &(0x7f00000000c0)={0x0, 0x19, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000140))

[ 1031.615398][   T17] binder: undelivered TRANSACTION_ERROR: 29201
[ 1031.632322][   T17] binder: undelivered TRANSACTION_ERROR: 29189
19:19:59 executing program 3:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$caif_seqpacket(0x25, 0x5, 0x2)
setsockopt$sock_attach_bpf(r0, 0x10d, 0x2, 0x0, 0x0)
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f0000000080)='big_key\x00', 0x0, &(0x7f0000000340)="46ac5128da090e4899c38028efeb85968ead969e21e33725a7edc030260cdb3ca79964a6e93ce51185f005b7dac052cb797af438c32c29b736fb12c63dd0e504445044a1ae9c10fd8171232ed7dcb08e9acaf4c569c4c16c5c47994118fc35ff7f03407dc7093fa7d3132d276a10768b2711cd1c6ecd3545692431856b6e0651", 0x80, 0xfffffffffffffffd)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x1, 0x9d0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000540], 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000009000000000000000000697036746e6c300000000000000000007465716c3000000000000000000000006272696467655f736c6176655f3100006272696467655f736c6176655f310000ae0000000000000000000000aaaaaaaaaaaa0000000000000000f8080000f808000040090000616d6f6e670000000000000000000000000000000000000000000000000000006408000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000007f0000010000000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000ac1414bb0000000000000000000000006c6f67000000000000000000000000000000000000000000000000000000000024000000001f9bf16029c6f67d33397ab27cb70202980708693b59969ffe29b1186b14000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff00000000000000000000000000"]}, 0xa19)
mknod(&(0x7f0000000a00)='./file0\x00', 0x605, 0x0)
execve(&(0x7f0000000100)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000540)='\x00'], &(0x7f00000002c0)=[&(0x7f0000000240)=']\x00'])
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, &(0x7f0000000000))
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r3 = dup(r2)
ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000180)=r3)
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000100)={'\x00', 0x1000000400})
timer_create(0x7, &(0x7f00000000c0)={0x0, 0x19, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000140))

19:19:59 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

19:19:59 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x400300, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:19:59 executing program 2:
syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0)
r0 = syz_open_dev$usb(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x2c00)
dup3(r1, r1, 0x0)
setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000)={0x8000, 0x6, 0x6, 0x6}, 0x8)
renameat(r1, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000080)='./file0\x00')

[ 1031.812453][ T7167] binder_alloc: binder_alloc_mmap_handler: 7163 20004000-20007000 already mapped failed -16
[ 1031.820701][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1031.828398][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1031.883885][ T7164] binder: BINDER_SET_CONTEXT_MGR already set
[ 1031.932846][ T7164] binder: 7163:7164 ioctl 40046207 0 returned -16
[ 1031.971434][ T7176] binder_alloc: 7163: binder_alloc_buf, no vma
19:19:59 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x1000000, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:19:59 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

[ 1031.978782][   T17] binder: undelivered TRANSACTION_ERROR: 29201
[ 1031.991553][   T17] binder: undelivered TRANSACTION_ERROR: 29189
19:19:59 executing program 2:
syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0)
r0 = syz_open_dev$usb(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={r0, 0x6, 0x1, 0x6, &(0x7f0000000000)=[0x0, 0x0], 0x2}, 0x20)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x0, 0x0)
dup3(r1, r0, 0x0)

19:20:00 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_int(r0, 0x0, 0x4, &(0x7f0000000000)=0x100100001, 0x4)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt_cache\x00')
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a45323, &(0x7f00000000c0)={{0x7f, 0x7f63}, 'port0\x00', 0x8, 0x0, 0x1, 0x6, 0x66, 0x6, 0x200, 0x0, 0x3, 0x401})
ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000200)=ANY=[@ANYBLOB="81000000e6000000d0c31d45c53d920dc1b789e86c4462f43ed6cf2800d8c71d9c3cb511839cd15171f7cd9f5236350a94670b449a0c1c8289853f9da6259bb5beecb722d1a037b413f1725233a76aba79362912b9304f20466c4932892a2290ecd90ad5758eef9ed1e4df2ae2100821e9b201a28517a5bebe198b793583c9258f611c78ee5be2d63a9c4f34660fa6485af3a314afbfb87961b52f95d27de1d146470ea6b6403b4bef22cf34bfe3facb8bc5fc290bfe194d74fdf294b340da85430847e3070bdb27c4a3c6d5a33ae0428cc8d3dfd4c3b57c758b6899e0b7501f900d32f239f56d4afcf14aeae0fc"])
sendto$inet(r0, 0x0, 0x0, 0x50, &(0x7f0000000300)={0x2, 0x100000000004e20, @broadcast}, 0xa)
sendto$inet(r1, &(0x7f0000000780)="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", 0xfffffffffffffe2f, 0x800, 0x0, 0x318)

[ 1032.094284][ T7182] binder_transaction: 16 callbacks suppressed
[ 1032.094301][ T7182] binder: 7181:7182 transaction failed 29201/-28, size 4608-12288 line 3147
[ 1032.197405][ T7194] binder_alloc: binder_alloc_mmap_handler: 7181 20004000-20007000 already mapped failed -16
[ 1032.218792][ T7182] binder: BINDER_SET_CONTEXT_MGR already set
[ 1032.225893][ T7182] binder: 7181:7182 ioctl 40046207 0 returned -16
[ 1032.238742][ T7194] binder_alloc: 7181: binder_alloc_buf, no vma
19:20:00 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x8138ae83, &(0x7f00000000c0)={0x0, 0x1000000000000, [], [0xc2]})
syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00')

19:20:00 executing program 3:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$caif_seqpacket(0x25, 0x5, 0x2)
setsockopt$sock_attach_bpf(r0, 0x10d, 0x2, 0x0, 0x0)
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f0000000080)='big_key\x00', 0x0, &(0x7f0000000340)="46ac5128da090e4899c38028efeb85968ead969e21e33725a7edc030260cdb3ca79964a6e93ce51185f005b7dac052cb797af438c32c29b736fb12c63dd0e504445044a1ae9c10fd8171232ed7dcb08e9acaf4c569c4c16c5c47994118fc35ff7f03407dc7093fa7d3132d276a10768b2711cd1c6ecd3545692431856b6e0651", 0x80, 0xfffffffffffffffd)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x1, 0x9d0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000540], 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000009000000000000000000697036746e6c300000000000000000007465716c3000000000000000000000006272696467655f736c6176655f3100006272696467655f736c6176655f310000ae0000000000000000000000aaaaaaaaaaaa0000000000000000f8080000f808000040090000616d6f6e670000000000000000000000000000000000000000000000000000006408000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000007f0000010000000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000ac1414bb0000000000000000000000006c6f67000000000000000000000000000000000000000000000000000000000024000000001f9bf16029c6f67d33397ab27cb70202980708693b59969ffe29b1186b14000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff00000000000000000000000000"]}, 0xa19)
mknod(&(0x7f0000000a00)='./file0\x00', 0x605, 0x0)
execve(&(0x7f0000000100)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000540)='\x00'], &(0x7f00000002c0)=[&(0x7f0000000240)=']\x00'])
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, &(0x7f0000000000))
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r3 = dup(r2)
ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000180)=r3)
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000100)={'\x00', 0x1000000400})
timer_create(0x7, &(0x7f00000000c0)={0x0, 0x19, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000140))

19:20:00 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2000000, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:20:00 executing program 2:
r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = syz_open_dev$usb(0x0, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000800}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffffff8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6e8}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x58ec}]}, 0xac}, 0x1, 0x0, 0x0, 0x4008011}, 0xc000)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x0, 0x0)
r4 = dup3(r3, r1, 0x0)
setsockopt$TIPC_CONN_TIMEOUT(r4, 0x10f, 0x82, &(0x7f0000000000), 0x4)
mq_timedsend(r3, &(0x7f0000000340)="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", 0x1000, 0x8, &(0x7f0000000200)={0x0, 0x1c9c380})
ioctl$KVM_S390_UCAS_MAP(r0, 0x4018ae50, &(0x7f0000000280)={0x2, 0x1ff, 0x7})

19:20:00 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x10, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x40000000)
clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff)
r2 = inotify_init1(0x800)
syz_emit_ethernet(0x42c, &(0x7f0000000240)={@broadcast, @remote, [{[], {0x8100, 0x2, 0x7ff, 0x1}}], {@ipv6={0x86dd, {0x20, 0x6, "e065b5", 0x3f2, 0x1d, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, {[@routing={0x0, 0x2, 0x2, 0x7fff, 0x0, [@initdev={0xfe, 0x88, [], 0x1, 0x0}]}, @routing={0x1d, 0x2, 0x1, 0x1, 0x0, [@remote]}, @dstopts={0x88, 0x12, [], [@calipso={0x7, 0x38, {0x85, 0xc, 0x95ec, 0x8, [0xfffffffffffffffc, 0x1, 0x568, 0x3, 0x8107, 0x3]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @generic={0xb23, 0x44, "bd35901d40caae0a0c6158ddcac09421df5765ab53ab0add3c35268788a6d8532bdea668ddfcef63d236f3fd57683848ae5da037cd573b7abfe38e7ecbe867c1e06ac13e"}, @ra, @pad1, @pad1, @pad1]}, @hopopts={0x0, 0x7, [], [@jumbo={0xc2, 0x4, 0x1dab}, @ra={0x5, 0x2, 0x8001}, @padn={0x1, 0x1, [0x0]}, @generic={0x5, 0x2a, "9aa906643e63e8820980d746a92e98b16eaa946990bdd4f03fdc847965cc91a78326bce209a4d271accb"}, @pad1, @pad1]}, @hopopts={0x87, 0x4, [], [@pad1, @generic={0xffff, 0x5, "e7fe5c03c3"}, @hao={0xc9, 0x10, @empty}, @jumbo={0xc2, 0x4, 0x8}, @pad1]}, @srh={0x6c, 0x6, 0x4, 0x3, 0x200, 0x60, 0xffffffff, [@rand_addr="fdfbd95457f7267dc8cabde5bb9e29fe", @remote, @empty]}, @hopopts={0xff, 0xc, [], [@generic={0x5f, 0x3a, "f06e501f82556d84a29fd99dedfe92602af5445725cb4a90b7e84c39e9cd3eb6503f96ec8e125113805aa25dfa801506c60615f0718251e0bf73"}, @hao={0xc9, 0x10, @local}, @hao={0xc9, 0x10, @empty}, @pad1, @enc_lim={0x4, 0x1, 0x2}]}, @fragment={0x11, 0x0, 0x2, 0x1000, 0x0, 0x6, 0x66}, @dstopts={0x62, 0x12, [], [@calipso={0x7, 0x28, {0x81, 0x8, 0x1ff, 0x7ff, [0x4136, 0x5, 0xfffffffffffffff7, 0x6f]}}, @pad1, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0xb}}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x7fffffff}, @calipso={0x7, 0x40, {0x9, 0xe, 0x9, 0xe0, [0xff, 0xe208, 0x9c, 0x7, 0x0, 0x7, 0x0]}}, @pad1, @ra={0x5, 0x2, 0x7ff}]}, @dstopts={0x7f, 0x24, [], [@hao={0xc9, 0x10, @local}, @ra={0x5, 0x2, 0x4}, @generic={0x10000, 0xa5, "ae4517d28fe26ab00e4dd07872d110b2c5e8cc6b2823bd8c144f00fac112a800c484b1ce5c56f915321463bc3dc8f16b4f06c2c7c95d6b34b190f321869a7454e3c692d4b6f18365362e6ff33d8ad812c5d642868ba3b0320ddc1cc4479e114a7bebeb61b58e263ed45a35cbb3bdd4aedf1fc8f3e1e2a6585b5dfae5f028311d054be0b29dfa8a8910be7bb833e4f0002d3ccfbc6f923d84ca1496795da4b6d610193e10ea"}, @generic={0x44, 0x67, "9a3cc64965dd32f9d6df0294da12df6b4e0c6d1066910c714c7f64220989c4d7d695157c1f7fac4a070f7d891c639f18547015115295a6f192bfc2e28b9593341ce24267b16d43849a9b97384eef15efaab611ee12acfa098a3a1480ced3687ddae0a30b49dad9"}]}], @tipc=@payload_named={{{{{0x2a, 0x0, 0x1, 0x3, 0xfffffffffffffffd, 0xa, 0x2, 0x2, 0x3, 0x0, 0x2, 0x7f, 0x7, 0x2, 0x7b0, 0xffffffff, 0x3, 0x4e20, 0x4e21}, 0x4, 0x3}, 0x0, 0x1}}, [0x0, 0x0]}}}}}}, 0x0)
fcntl$getownex(r2, 0x10, &(0x7f0000000080))

[ 1032.245411][ T7194] binder: 7181:7194 transaction failed 29189/-3, size 4608-12288 line 3147
[ 1032.268098][   T17] binder: undelivered TRANSACTION_ERROR: 29201
[ 1032.283299][   T17] binder: undelivered TRANSACTION_ERROR: 29189
19:20:00 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

19:20:00 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x4000000, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1032.398865][ T7214] binder: 7213:7214 transaction failed 29201/-28, size 8192-12288 line 3147
[ 1032.438742][ T7205] IPVS: ftp: loaded support on port[0] = 21
19:20:00 executing program 3:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$caif_seqpacket(0x25, 0x5, 0x2)
setsockopt$sock_attach_bpf(r0, 0x10d, 0x2, 0x0, 0x0)
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f0000000080)='big_key\x00', 0x0, &(0x7f0000000340)="46ac5128da090e4899c38028efeb85968ead969e21e33725a7edc030260cdb3ca79964a6e93ce51185f005b7dac052cb797af438c32c29b736fb12c63dd0e504445044a1ae9c10fd8171232ed7dcb08e9acaf4c569c4c16c5c47994118fc35ff7f03407dc7093fa7d3132d276a10768b2711cd1c6ecd3545692431856b6e0651", 0x80, 0xfffffffffffffffd)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x1, 0x9d0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000540], 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000009000000000000000000697036746e6c300000000000000000007465716c3000000000000000000000006272696467655f736c6176655f3100006272696467655f736c6176655f310000ae0000000000000000000000aaaaaaaaaaaa0000000000000000f8080000f808000040090000616d6f6e670000000000000000000000000000000000000000000000000000006408000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000007f0000010000000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000ac1414bb0000000000000000000000006c6f67000000000000000000000000000000000000000000000000000000000024000000001f9bf16029c6f67d33397ab27cb70202980708693b59969ffe29b1186b14000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff00000000000000000000000000"]}, 0xa19)
mknod(&(0x7f0000000a00)='./file0\x00', 0x605, 0x0)
execve(&(0x7f0000000100)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000540)='\x00'], &(0x7f00000002c0)=[&(0x7f0000000240)=']\x00'])
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, &(0x7f0000000000))
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r3 = dup(r2)
ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000180)=r3)
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000100)={'\x00', 0x1000000400})
timer_create(0x7, &(0x7f00000000c0)={0x0, 0x19, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000140))

19:20:00 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x80ffffff, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:20:00 executing program 2:
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000040)=ANY=[@ANYBLOB="03005700509e8b14831e3fe06c883c969f8747ca2c7e4b08790a5289fdfba86e10e6ef1c3a7903dd70551987418370decb62580fda6db26485b8297e880e009703a4ab0dd99d7baed4f1fa86035a"])
syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x4, 0x0)
ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f0000000100)={0x0, {0x8, 0x40}})
r2 = syz_open_dev$usb(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(0xffffffffffffffff, r2, 0x0)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={<r3=>0x0, 0x8}, &(0x7f0000000180)=0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000001c0)={r3, 0x80, 0xffffffff, 0xfffffffffffffffb, 0x81d, 0x3}, &(0x7f0000000200)=0x14)

[ 1032.450694][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1032.490833][ T7221] binder_alloc: binder_alloc_mmap_handler: 7213 20004000-20007000 already mapped failed -16
19:20:00 executing program 3:
socket$netlink(0x10, 0x3, 0x4)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x640180, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="480000001400190d09004beafd0d8c560a8447100bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x2a}], 0x1)

[ 1032.537414][ T7214] binder: BINDER_SET_CONTEXT_MGR already set
[ 1032.601980][ T7214] binder: 7213:7214 ioctl 40046207 0 returned -16
[ 1032.611320][   T17] binder: undelivered TRANSACTION_ERROR: 29201
[ 1032.637735][ T7221] binder: 7213:7221 transaction failed 29189/-22, size 8192-12288 line 2994
[ 1032.649015][   T17] binder: undelivered TRANSACTION_ERROR: 29189
19:20:00 executing program 3:
fcntl$addseals(0xffffffffffffffff, 0x409, 0x0)
syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x7, 0x40000)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000180), 0x0)
r0 = syz_open_dev$usb(0x0, 0x5, 0x0)
ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0)
ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, 0x0)
prctl$PR_MCE_KILL_GET(0x22)
ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f00000001c0))
r1 = openat$md(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0x1000000e000, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6, 0x10, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0)
getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, 0x0, &(0x7f0000000080))
getgid()
ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, &(0x7f0000000140))
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r1)

[ 1032.928111][ T7215] IPVS: ftp: loaded support on port[0] = 21
19:20:01 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendto$unix(r1, &(0x7f0000000180), 0xfeed, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/255, 0xff}], 0x1}}], 0x1, 0x0, 0x0)
recvfrom(r1, &(0x7f0000000900)=""/4096, 0xffffffffffffff78, 0x0, 0x0, 0x2b)
r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2)
mq_getsetattr(r2, &(0x7f0000000080)={0x0, 0x1, 0x5, 0x7, 0xfffffffffffffc00, 0x7, 0x11c6568b, 0x5}, &(0x7f00000000c0))

19:20:01 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ff8, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

19:20:01 executing program 2:
r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = syz_open_dev$usb(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x0, 0x0)
dup3(r2, r1, 0x0)
pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x0)

19:20:01 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0xffffff7f, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1033.235534][ T7257] binder_alloc_new_buf_locked: 4 callbacks suppressed
[ 1033.235546][ T7257] binder_alloc: 7256: binder_alloc_buf size 24568 failed, no address space
[ 1033.279956][ T7257] binder_alloc_new_buf_locked: 4 callbacks suppressed
[ 1033.279972][ T7257] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1033.288021][ T7257] binder: 7256:7257 transaction failed 29201/-28, size 12280-12288 line 3147
[ 1033.312600][ T7262] binder_alloc: binder_alloc_mmap_handler: 7256 20004000-20007000 already mapped failed -16
[ 1033.350525][ T7257] binder: BINDER_SET_CONTEXT_MGR already set
[ 1033.364523][ T7257] binder: 7256:7257 ioctl 40046207 0 returned -16
[ 1033.375337][ T7262] binder: 7256:7262 transaction failed 29189/-3, size 12280-12288 line 3147
[ 1033.396382][T29950] binder: undelivered TRANSACTION_ERROR: 29201
[ 1033.407575][T29950] binder: undelivered TRANSACTION_ERROR: 29189
19:20:03 executing program 2:
syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0)
r0 = syz_open_dev$usb(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x0, 0x0)
ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000000)=<r2=>0x0)
ioctl$BLKTRACESETUP(r0, 0xc0401273, &(0x7f0000000040)={[], 0x6, 0x9, 0x0, 0x1, 0x8, r2})
dup3(r1, r0, 0x0)

19:20:03 executing program 3:
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={<r0=>0x0, <r1=>0x0})
r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x7fff, 0x2000)
ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000080)={0x13, 0x2c, 0x9, 0xf, 0xb, 0x8, 0x1, 0xfb, 0xffffffffffffffff})
close(r0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0xfffffffffffffffc}, 0x2c)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={<r3=>0x0, <r4=>0x0})
close(r3)
setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x127)
fcntl$setsig(r2, 0xa, 0x3f)
close(r4)

19:20:03 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0xffffff80, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:20:03 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

19:20:03 executing program 5:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_STATUS(0xffffffffffffffff, 0x80585414, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001)
write$evdev(r0, 0x0, 0xffffff16)
write$evdev(r0, &(0x7f0000000000), 0x0)

19:20:03 executing program 4:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0)
pipe2(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x800)
vmsplice(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)="f472faca9f425102fe6a084a172a715a04d4628c26e75f32b6c019693c41046f309bdd3fbbd4fc74f7e1440209b13a9cf82fbf7559b6cb41976d019f1f2d0f9cfdd113a77c9b9f7625ab196ecc8d17", 0x4f}, {&(0x7f0000000040)}], 0x2, 0x7)
getgroups(0x4, &(0x7f0000000040)=[<r3=>0x0, 0xee00, 0xee00, 0xee01])
fstat(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
r5 = getgid()
setresgid(r3, r4, r5)
ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000100)={0x0, @reserved})
ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000080)=0x3)

[ 1035.908985][ T7272] binder_alloc: 7270: binder_alloc_buf size 24576 failed, no address space
[ 1035.958982][ T7272] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1035.970684][    C0] net_ratelimit: 19 callbacks suppressed
[ 1035.970692][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1035.981205][ T7272] binder: 7270:7272 transaction failed 29201/-28, size 12288-12288 line 3147
[ 1035.982268][    C0] protocol 88fb is buggy, dev hsr_slave_1
19:20:03 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x40030000000000, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:20:03 executing program 2:
syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0)
r0 = syz_open_dev$usb(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x81, 0x0, 0x0, 0xfff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xfffffffffffffffa, 0x4}}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x14001, 0x0)
setsockopt$CAIFSO_REQ_PARAM(r1, 0x116, 0x80, &(0x7f0000000000)="633da94d9248c17a937a73121c7ff3c25fbb5e955ec61bb43b5a46be12a3817661a84b40b5e062ebcf5736494cd946ec2b337080b458112d821934acfc59b7", 0x3f)
dup3(r1, r0, 0x0)

19:20:03 executing program 3:
r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x40005, 0x800000)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000200)={{{@in=@broadcast, @in6=@remote, 0x4e24, 0x9592, 0x4e22, 0x9, 0x2, 0x80, 0x0, 0xff, 0x0, r2}, {0x1, 0x4, 0x3, 0x3, 0x3, 0x100000001, 0x9, 0xfb}, {0x2, 0x7, 0x10001, 0x2}, 0xde4, 0x6e6bb4, 0x2, 0x1, 0x2}, {{@in=@remote, 0x4d2, 0x2b}, 0x2, @in=@multicast2, 0x3505, 0x1, 0x3, 0x9, 0x6, 0x2, 0x401}}, 0xe8)
ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc040564a, &(0x7f00000000c0)={0x0, @bt={0x0, 0x100a}})

[ 1036.002449][ T7282] binder_alloc: binder_alloc_mmap_handler: 7270 20004000-20007000 already mapped failed -16
[ 1036.025243][ T7272] binder: BINDER_SET_CONTEXT_MGR already set
[ 1036.037882][ T7272] binder: 7270:7272 ioctl 40046207 0 returned -16
19:20:04 executing program 5:
mmap(&(0x7f0000adc000/0x1000)=nil, 0x1000, 0x2000002, 0x800000000008031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x3)
shmget$private(0x0, 0x1000, 0x12, &(0x7f00004ff000/0x1000)=nil)

[ 1036.075395][ T7282] binder: 7270:7282 transaction failed 29189/-22, size 12288-12288 line 2994
19:20:04 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

19:20:04 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x100000000000000, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:20:04 executing program 3:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x10040, 0x0)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100), 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0cc5640, 0x0)
prctl$PR_SET_ENDIAN(0x14, 0x0)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x8)
ioctl$RTC_PIE_ON(r0, 0x7005)
ioctl$CAPI_NCCI_OPENCOUNT(r0, 0x80044326, 0x0)
ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000140))
semget$private(0x0, 0x3, 0x4000000000000308)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)=ANY=[@ANYRES32=<r2=>0x0, @ANYBLOB="ac00022c14ec13b6"], &(0x7f00000001c0)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={r2, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e21, 0xffffffff, @empty, 0x800000000}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e22, 0x5, @local, 0x2}, @in6={0xa, 0x4e23, 0x9, @mcast1, 0xf000000000000000}]}, &(0x7f00000002c0)=0xc)
ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000040)={0x34})
ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/117)
unshare(0x40000000)

19:20:04 executing program 2:
syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0)
r0 = syz_open_dev$usb(0x0, 0x4, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x0, 0x0)
dup3(r1, r0, 0x0)

[ 1036.225179][ T7303] binder_alloc: 7301: binder_alloc_buf size 28672 failed, no address space
[ 1036.258748][ T7303] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
19:20:04 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x103482, 0x0)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000060101020069b36a0ed373e40000000059919aeee33e948a630f881471097b41ec6198d89b6d978e3f528a5cd08cc6b984a86029fda1934240845493ae905c2a2f7638f7b57652a3138b4594ddde5968bb571c53557e002869820df27148715fe3546d0980c612248631cee13892c4c7d74cd53943746f0707797eafb09b6dda04158ace0430542ad56fd0db1c9545200ff9b21601ec78084b8c4be480226b4e39e5fc9108cbc873fce892af540fd2164db5a2051db6a5fec668c9240300000046daff2aa704aa08e047e83d530b9bedc2baea0f68ab07224e7e83697f01738eb86283a99b6f367d7a02b9c14584a0c158ad8c3dc5d9a89bce4f79c42175677bffc3427e20324328"], 0x14}}, 0x0)

[ 1036.279252][ T7303] binder: 7301:7303 transaction failed 29201/-28, size 16384-12288 line 3147
[ 1036.308396][ T7309] binder_alloc: binder_alloc_mmap_handler: 7301 20004000-20007000 already mapped failed -16
[ 1036.320580][ T7303] binder: BINDER_SET_CONTEXT_MGR already set
[ 1036.327255][ T7303] binder: 7301:7303 ioctl 40046207 0 returned -16
[ 1036.345621][ T7309] binder_alloc_new_buf_locked: 1 callbacks suppressed
[ 1036.345630][ T7309] binder_alloc: 7301: binder_alloc_buf, no vma
[ 1036.366336][ T7311] IPVS: ftp: loaded support on port[0] = 21
19:20:04 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x200000000000000, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:20:04 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$tipc(0x1e, 0x7, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002)
write(r0, &(0x7f0000000140)="b63db85e1e8d020008000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30)
readv(r0, &(0x7f000085dff0)=[{&(0x7f0000e94000)=""/62, 0x3d87}], 0x146)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x20100, 0x0)

[ 1036.382925][ T7309] binder: 7301:7309 transaction failed 29189/-3, size 16384-12288 line 3147
19:20:04 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0)={<r1=>0xffffffffffffffff}, 0x3, 0xffffffffffffffff, 0x10, 0x1, @in6={0xa, 0x4e21, 0x375, @dev={0xfe, 0x80, [], 0xe}, 0x2}}}, 0xa0)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000200)={0x11, 0xfffffffffffffec1, 0xfa00, {0x0, r1}}, 0xd)

19:20:04 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

19:20:04 executing program 2:
syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0)
r0 = syz_open_dev$usb(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x0, 0x0)
dup3(r1, r0, 0x0)

19:20:04 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x400000000000000, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:20:04 executing program 2:
syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0)
r0 = syz_open_dev$usb(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_mreqn(r0, 0x0, 0xe08893b7ed962607, &(0x7f00000000c0)={@rand_addr, @remote, <r1=>0x0}, &(0x7f0000000100)=0xc)
recvfrom$packet(r0, &(0x7f0000000000)=""/138, 0x8a, 0x10000, &(0x7f0000000140)={0x11, 0x7, r1, 0x1, 0x7, 0x6, @remote}, 0x14)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x0, 0x0)
dup3(r2, r0, 0x0)

19:20:04 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x80ffffff00000000, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1036.599260][ T7334] binder_alloc: 7333: binder_alloc_buf size 30720 failed, no address space
[ 1036.610693][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1036.616604][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1036.670257][ T7334] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1036.738579][ T7344] binder_alloc: binder_alloc_mmap_handler: 7333 20004000-20007000 already mapped failed -16
19:20:04 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0xffffff7f00000000, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1036.783971][ T7334] binder: BINDER_SET_CONTEXT_MGR already set
[ 1036.811847][ T7334] binder: 7333:7334 ioctl 40046207 0 returned -16
[ 1036.816073][ T7346] binder_alloc: 7333: binder_alloc_buf, no vma
19:20:04 executing program 3:
r0 = syz_open_dev$usb(0x0, 0x200, 0x4000000008000)
mkdir(0x0, 0x2000002)
sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5)
r1 = request_key(&(0x7f00000000c0)='rxrpc_s\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000300)='%\x00', 0xffffffffffffffff)
r2 = add_key$user(&(0x7f0000000880)='user\x00', 0x0, &(0x7f00000008c0)="fbe2408be2e80fd358da3dda4658cc690f61f06d4f71cdbbb8644ec35bcb6e5543b1ffae8702d0ad3fca4f4b5dc9db5d934120b2bceb62d9e971977c498c36dddfa5aa8470eb62c5aeaa1f2512383c7978f301f1892867d0266a633849723116cd8809c762e2935918cf7509264ae7c9cc6cdb1b75194cb510fc656fa6dba57db6f6bf21ba93667afb", 0x89, r1)
keyctl$describe(0x6, r2, &(0x7f0000000640)=""/254, 0xfe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
chdir(&(0x7f0000000340)='./file0\x00')
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x10, r0, 0x0)
r3 = getpgid(0xffffffffffffffff)
perf_event_open(&(0x7f0000000740)={0x2, 0x70, 0x2, 0x5, 0x3, 0x4, 0x0, 0x2, 0x2001, 0x1, 0x0, 0x4, 0x3, 0x5, 0xc65, 0x1, 0x1, 0x9, 0x7, 0x7, 0x4, 0x7fffffff, 0x0, 0x101, 0x4, 0xfffffffffffffffd, 0x3, 0xbc, 0x6, 0x6, 0x8, 0x1f, 0x9, 0xfffffffffffffffe, 0x9, 0x0, 0x5, 0x9, 0x0, 0x401, 0x1, @perf_config_ext={0x7, 0x9}, 0x80, 0x6, 0x200, 0xa, 0x0, 0x4af3, 0xfffffffffffffffb}, r3, 0xf, r0, 0xa)
unlink(0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={<r4=>0xffffffffffffffff})
lstat(0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, <r5=>0x0, <r6=>0x0})
r7 = shmget(0x1, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={<r8=>0x0}, &(0x7f0000000280)=0xc)
r9 = gettid()
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000380)={{0x34a, r5, r6, r5, r6, 0x10}, 0xca, 0x8, 0x1, 0x2, r8, r9, 0x495a})
ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000100)={0x3, {0x5854, 0x0, 0xffffffff80000001, 0x3a72}})
fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f0000000040))
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000480)={<r10=>0x0, 0x6f, "2655de867f4bdd918c7078d6bee11398e64b2483611aa128107bf7ad333f0b2f92455690a58cab2409b7f5f41cfa07611bc04aa6dcb80f818dc25565e6fa388ca1b42ff18aa95c0b14e7b4563e426789f26235ee253539e984d75d6206ff3b72aa839e854dfde8eaba15f0ee9e2c8b"}, 0x0)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000005c0)={r10, 0xffff}, 0x8)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000200)={0x0, 0x2})
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x3000, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r13, 0x4008ae89, &(0x7f0000000500)={0x7a, 0x0, [0x4b564d00, 0x35fd]})
ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000180))
mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000005000/0x2000)=nil)

19:20:04 executing program 2:
syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xf3a0, 0x20802)
ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000040)={0x3b, 0x8000, 0x101})
r1 = syz_open_dev$usb(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x0, 0x0)
dup3(r2, r1, 0x0)
modify_ldt$read(0x0, &(0x7f0000000080)=""/17, 0x11)

19:20:04 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0xffffffff00000000, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:20:04 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

[ 1036.868310][T29136] binder_release_work: 4 callbacks suppressed
[ 1036.868318][T29136] binder: undelivered TRANSACTION_ERROR: 29201
[ 1036.891222][T29136] binder: undelivered TRANSACTION_ERROR: 29189
[ 1037.006464][ T7361] binder_alloc: 7359: binder_alloc_buf size 31744 failed, no address space
[ 1037.029311][ T7361] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1037.047047][ T7362] binder_alloc: binder_alloc_mmap_handler: 7359 20004000-20007000 already mapped failed -16
[ 1037.059227][ T7361] binder: BINDER_SET_CONTEXT_MGR already set
[ 1037.066145][ T7361] binder: 7359:7361 ioctl 40046207 0 returned -16
[ 1037.074368][ T7362] binder_alloc: 7359: binder_alloc_buf, no vma
[ 1037.081871][T19041] binder: undelivered TRANSACTION_ERROR: 29201
[ 1037.090428][T19041] binder: undelivered TRANSACTION_ERROR: 29189
[ 1037.090778][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1037.096832][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1037.102550][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1037.108300][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1037.170701][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1037.176576][    C0] protocol 88fb is buggy, dev hsr_slave_1
19:20:05 executing program 5:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0)
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x240282, 0x0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00')
sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2040000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xb8, r2, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xecd}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_NET={0x5c, 0x7, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xda}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2d6}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x10}, 0x40)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af14, &(0x7f0000000000))

19:20:05 executing program 2:
syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2)
dup3(r0, 0xffffffffffffffff, 0x0)

19:20:05 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x4, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:20:05 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

19:20:05 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10}, 0x391)

[ 1037.407635][ T7379] binder_alloc: 7378: binder_alloc_buf size 36864 failed, no address space
[ 1037.435229][ T7379] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
19:20:05 executing program 2:
syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0)
r0 = syz_open_dev$usb(0x0, 0x0, 0x0)
prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/101)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x0, 0x0)
recvmsg(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@x25={0x9, @remote}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)=""/199, 0xc7}, {&(0x7f0000000200)}], 0x2, &(0x7f0000000340)=""/240, 0xf0}, 0x40000000)
r2 = dup3(r1, r0, 0x0)
setns(r2, 0x6000000)

19:20:05 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0xe, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1037.459733][ T7379] binder_transaction: 4 callbacks suppressed
[ 1037.459751][ T7379] binder: 7378:7379 transaction failed 29201/-28, size 24576-12288 line 3147
19:20:05 executing program 3:
r0 = syz_open_dev$usb(0x0, 0x200, 0x4000000008000)
mkdir(0x0, 0x2000002)
sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5)
r1 = request_key(&(0x7f00000000c0)='rxrpc_s\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000300)='%\x00', 0xffffffffffffffff)
r2 = add_key$user(&(0x7f0000000880)='user\x00', 0x0, &(0x7f00000008c0)="fbe2408be2e80fd358da3dda4658cc690f61f06d4f71cdbbb8644ec35bcb6e5543b1ffae8702d0ad3fca4f4b5dc9db5d934120b2bceb62d9e971977c498c36dddfa5aa8470eb62c5aeaa1f2512383c7978f301f1892867d0266a633849723116cd8809c762e2935918cf7509264ae7c9cc6cdb1b75194cb510fc656fa6dba57db6f6bf21ba93667afb", 0x89, r1)
keyctl$describe(0x6, r2, &(0x7f0000000640)=""/254, 0xfe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
chdir(&(0x7f0000000340)='./file0\x00')
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x10, r0, 0x0)
r3 = getpgid(0xffffffffffffffff)
perf_event_open(&(0x7f0000000740)={0x2, 0x70, 0x2, 0x5, 0x3, 0x4, 0x0, 0x2, 0x2001, 0x1, 0x0, 0x4, 0x3, 0x5, 0xc65, 0x1, 0x1, 0x9, 0x7, 0x7, 0x4, 0x7fffffff, 0x0, 0x101, 0x4, 0xfffffffffffffffd, 0x3, 0xbc, 0x6, 0x6, 0x8, 0x1f, 0x9, 0xfffffffffffffffe, 0x9, 0x0, 0x5, 0x9, 0x0, 0x401, 0x1, @perf_config_ext={0x7, 0x9}, 0x80, 0x6, 0x200, 0xa, 0x0, 0x4af3, 0xfffffffffffffffb}, r3, 0xf, r0, 0xa)
unlink(0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={<r4=>0xffffffffffffffff})
lstat(0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, <r5=>0x0, <r6=>0x0})
r7 = shmget(0x1, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={<r8=>0x0}, &(0x7f0000000280)=0xc)
r9 = gettid()
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000380)={{0x34a, r5, r6, r5, r6, 0x10}, 0xca, 0x8, 0x1, 0x2, r8, r9, 0x495a})
ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000100)={0x3, {0x5854, 0x0, 0xffffffff80000001, 0x3a72}})
fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f0000000040))
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000480)={<r10=>0x0, 0x6f, "2655de867f4bdd918c7078d6bee11398e64b2483611aa128107bf7ad333f0b2f92455690a58cab2409b7f5f41cfa07611bc04aa6dcb80f818dc25565e6fa388ca1b42ff18aa95c0b14e7b4563e426789f26235ee253539e984d75d6206ff3b72aa839e854dfde8eaba15f0ee9e2c8b"}, 0x0)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000005c0)={r10, 0xffff}, 0x8)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000200)={0x0, 0x2})
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x3000, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r13, 0x4008ae89, &(0x7f0000000500)={0x7a, 0x0, [0x4b564d00, 0x35fd]})
ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000180))
mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000005000/0x2000)=nil)

19:20:05 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x1, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$VT_DISALLOCATE(r1, 0x5608)
ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3})

[ 1037.599871][ T7398] binder_alloc: binder_alloc_mmap_handler: 7378 20004000-20007000 already mapped failed -16
19:20:05 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x2, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:20:05 executing program 2:
syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r1, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x70c6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4000)
r2 = syz_open_dev$usb(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x0, 0x0)
dup3(r3, r2, 0x0)

[ 1037.650436][ T7379] binder: BINDER_SET_CONTEXT_MGR already set
[ 1037.674259][ T7379] binder: 7378:7379 ioctl 40046207 0 returned -16
[ 1037.716817][ T7403] binder_alloc: 7378: binder_alloc_buf, no vma
[ 1037.746879][T19041] binder: undelivered TRANSACTION_ERROR: 29201
[ 1037.759800][ T7403] binder: 7378:7403 transaction failed 29189/-3, size 24576-12288 line 3147
19:20:05 executing program 5:
socketpair(0x21, 0x2, 0x2, &(0x7f0000000140)={<r0=>0x0, <r1=>0x0})
r2 = fcntl$getown(r1, 0x9)
prctl$PR_GET_FP_MODE(0x2e)
fsetxattr$security_ima(r1, &(0x7f0000000180)='security.ima\x00', &(0x7f00000001c0)=@v1={0x2, 'MU'}, 0x3, 0x0)
r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x200000, 0x0)
perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x9, 0x7f, 0x48d7, 0x1, 0x0, 0x7, 0x0, 0x4, 0x0, 0x7ff, 0x1f, 0xfffffffffffffffa, 0x5, 0x7f5, 0x8, 0x1, 0x0, 0x6, 0x1, 0x3447b6ca, 0x7, 0x3f, 0xfff, 0xb519, 0x400, 0x80, 0x0, 0x3f, 0x93, 0x7, 0x1, 0xe44, 0x1, 0x1, 0x0, 0x100000001, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000040), 0x1}, 0x8, 0x1, 0x3, 0x9, 0x2, 0x8, 0x4}, r2, 0x0, r3, 0x1)
ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000))

19:20:05 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x4, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1037.808292][T19041] binder: undelivered TRANSACTION_ERROR: 29189
19:20:05 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

19:20:05 executing program 2:
syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0)
r0 = syz_open_dev$usb(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x0, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
ioctl$TUNSETGROUP(r0, 0x400454ce, r2)
dup3(r1, r0, 0x0)

19:20:05 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x34000, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1038.195698][ T7430] binder_alloc: 7429: binder_alloc_buf size 38912 failed, no address space
[ 1038.226134][ T7430] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1038.251371][ T7430] binder: 7429:7430 transaction failed 29201/-28, size 26624-12288 line 3147
[ 1038.276635][ T7433] binder_alloc: binder_alloc_mmap_handler: 7429 20004000-20007000 already mapped failed -16
[ 1038.303784][ T7430] binder: BINDER_SET_CONTEXT_MGR already set
[ 1038.310142][ T7430] binder: 7429:7430 ioctl 40046207 0 returned -16
[ 1038.318135][ T7433] binder_alloc: 7429: binder_alloc_buf, no vma
[ 1038.324597][ T7433] binder: 7429:7433 transaction failed 29189/-3, size 26624-12288 line 3147
[ 1038.334213][T19041] binder: undelivered TRANSACTION_ERROR: 29201
[ 1038.344158][T19041] binder: undelivered TRANSACTION_ERROR: 29189
19:20:06 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x121000, 0x0)
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f00000001c0)={0x0, {0x0, 0x84}})
r1 = add_key$user(&(0x7f00000002c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa)
keyctl$read(0xb, r1, 0x0, 0x0)
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000380)={0x0, 0x1, 0x6}, 0x10)
getuid()
lstat(&(0x7f0000000240)='./file0/file0\x00', 0x0)
keyctl$chown(0x4, 0x0, 0x0, 0x0)
modify_ldt$read(0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e05411, &(0x7f0000000300)=""/73)
ioctl$NBD_SET_TIMEOUT(0xffffffffffffffff, 0xab09, 0x100000001)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0xbe85, 0x0, 0x2, 0xffff}, 0x0)
io_setup(0x4, &(0x7f0000000000))
ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x806, 0xe}, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x8100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

19:20:06 executing program 5:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x202, 0x0)
getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f00000000c0)=0x200, &(0x7f0000000100)=0x2)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
r2 = memfd_create(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0)
r3 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
fcntl$setpipe(r1, 0x407, 0x24)
r4 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
r5 = dup2(r4, r3)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
getpid()
r6 = getpgrp(0x0)
getpgid(r6)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r3, &(0x7f0000000040)=[{0xf4010000, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0x1c)
fstatfs(r2, &(0x7f0000005200)=""/4096)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0)
sched_rr_get_interval(r6, &(0x7f0000000000))

19:20:06 executing program 3:
r0 = syz_open_dev$usb(0x0, 0x200, 0x4000000008000)
mkdir(0x0, 0x2000002)
sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5)
r1 = request_key(&(0x7f00000000c0)='rxrpc_s\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000300)='%\x00', 0xffffffffffffffff)
r2 = add_key$user(&(0x7f0000000880)='user\x00', 0x0, &(0x7f00000008c0)="fbe2408be2e80fd358da3dda4658cc690f61f06d4f71cdbbb8644ec35bcb6e5543b1ffae8702d0ad3fca4f4b5dc9db5d934120b2bceb62d9e971977c498c36dddfa5aa8470eb62c5aeaa1f2512383c7978f301f1892867d0266a633849723116cd8809c762e2935918cf7509264ae7c9cc6cdb1b75194cb510fc656fa6dba57db6f6bf21ba93667afb", 0x89, r1)
keyctl$describe(0x6, r2, &(0x7f0000000640)=""/254, 0xfe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
chdir(&(0x7f0000000340)='./file0\x00')
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x10, r0, 0x0)
r3 = getpgid(0xffffffffffffffff)
perf_event_open(&(0x7f0000000740)={0x2, 0x70, 0x2, 0x5, 0x3, 0x4, 0x0, 0x2, 0x2001, 0x1, 0x0, 0x4, 0x3, 0x5, 0xc65, 0x1, 0x1, 0x9, 0x7, 0x7, 0x4, 0x7fffffff, 0x0, 0x101, 0x4, 0xfffffffffffffffd, 0x3, 0xbc, 0x6, 0x6, 0x8, 0x1f, 0x9, 0xfffffffffffffffe, 0x9, 0x0, 0x5, 0x9, 0x0, 0x401, 0x1, @perf_config_ext={0x7, 0x9}, 0x80, 0x6, 0x200, 0xa, 0x0, 0x4af3, 0xfffffffffffffffb}, r3, 0xf, r0, 0xa)
unlink(0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={<r4=>0xffffffffffffffff})
lstat(0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, <r5=>0x0, <r6=>0x0})
r7 = shmget(0x1, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={<r8=>0x0}, &(0x7f0000000280)=0xc)
r9 = gettid()
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000380)={{0x34a, r5, r6, r5, r6, 0x10}, 0xca, 0x8, 0x1, 0x2, r8, r9, 0x495a})
ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000100)={0x3, {0x5854, 0x0, 0xffffffff80000001, 0x3a72}})
fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f0000000040))
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000480)={<r10=>0x0, 0x6f, "2655de867f4bdd918c7078d6bee11398e64b2483611aa128107bf7ad333f0b2f92455690a58cab2409b7f5f41cfa07611bc04aa6dcb80f818dc25565e6fa388ca1b42ff18aa95c0b14e7b4563e426789f26235ee253539e984d75d6206ff3b72aa839e854dfde8eaba15f0ee9e2c8b"}, 0x0)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000005c0)={r10, 0xffff}, 0x8)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000200)={0x0, 0x2})
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x3000, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r13, 0x4008ae89, &(0x7f0000000500)={0x7a, 0x0, [0x4b564d00, 0x35fd]})
ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000180))
mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000005000/0x2000)=nil)

19:20:06 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:20:06 executing program 2:
r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = syz_open_dev$usb(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x0, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x7, 0x2, 0x50, 0x0, 0x7})
dup3(r2, r1, 0x0)

19:20:06 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

[ 1038.434146][ T7446] binder_alloc: 7445: binder_alloc_buf size 39936 failed, no address space
[ 1038.462050][ T7446] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
19:20:06 executing program 2:
syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0)
r0 = syz_open_dev$usb(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x0, 0x0)
dup3(r1, r0, 0x0)
ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000000)=""/119)

19:20:06 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x1000000, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1038.498824][ T7446] binder: 7445:7446 transaction failed 29201/-28, size 27648-12288 line 3147
19:20:06 executing program 5:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00')
madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0)
ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000000)=r0)
r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0)
writev(r2, &(0x7f0000000700), 0x100000000000010b)

[ 1038.556306][ T7452] binder_alloc: binder_alloc_mmap_handler: 7445 20004000-20007000 already mapped failed -16
[ 1038.594330][ T7446] binder: BINDER_SET_CONTEXT_MGR already set
[ 1038.633577][ T7446] binder: 7445:7446 ioctl 40046207 0 returned -16
[ 1038.664227][T19041] binder: undelivered TRANSACTION_ERROR: 29201
[ 1038.671602][ T7452] binder_alloc: 7445: binder_alloc_buf, no vma
19:20:06 executing program 2:
syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0)
syz_open_dev$usb(0x0, 0x0, 0x0)
syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x0, 0x0)
r1 = socket$nl_crypto(0x10, 0x3, 0x15)
dup3(r1, r0, 0x0)

[ 1038.694602][ T7452] binder: 7445:7452 transaction failed 29189/-3, size 27648-12288 line 3147
19:20:06 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x2000000, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1038.757351][T19041] binder: undelivered TRANSACTION_ERROR: 29189
19:20:06 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

[ 1038.937627][ T7473] binder_alloc: 7472: binder_alloc_buf size 41984 failed, no address space
[ 1038.983879][ T7473] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1039.082495][ T7473] binder: 7472:7473 transaction failed 29201/-28, size 29696-12288 line 3147
[ 1039.130456][ T7475] binder_alloc: binder_alloc_mmap_handler: 7472 20004000-20007000 already mapped failed -16
[ 1039.176000][ T7473] binder: BINDER_SET_CONTEXT_MGR already set
[ 1039.190879][ T7473] binder: 7472:7473 ioctl 40046207 0 returned -16
[ 1039.210729][ T7477] binder_alloc: 7472: binder_alloc_buf, no vma
[ 1039.217304][ T7477] binder: 7472:7477 transaction failed 29189/-3, size 29696-12288 line 3147
[ 1039.387613][ T7482] syz-executor.4 (7482) used greatest stack depth: 21720 bytes left
19:20:07 executing program 4:
r0 = gettid()
r1 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0xfffffffffffffffe, 0x0)
r2 = fcntl$dupfd(r1, 0x406, r1)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x124, r3, 0xd6064e45cbe05e36, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x93d8}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffffffffffe}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffff}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x663}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x22}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffffffffff8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3ff}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6_dccp(0xa, 0x6, 0x0)
getsockopt$inet6_opts(r4, 0x29, 0x39, &(0x7f0000000100)=""/245, &(0x7f0000000000)=0xf5)
r5 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x80, 0x0)
write$P9_RGETLOCK(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="1e002e0037020001ff01001b000000000100008000000000", @ANYRES32=r0, @ANYBLOB='\x00\x00'], 0x1e)
perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000080)=0x8001)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105518, &(0x7f0000001000))

19:20:07 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x4000000, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:20:07 executing program 3:
r0 = syz_open_dev$usb(0x0, 0x200, 0x4000000008000)
mkdir(0x0, 0x2000002)
sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5)
r1 = request_key(&(0x7f00000000c0)='rxrpc_s\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000300)='%\x00', 0xffffffffffffffff)
r2 = add_key$user(&(0x7f0000000880)='user\x00', 0x0, &(0x7f00000008c0)="fbe2408be2e80fd358da3dda4658cc690f61f06d4f71cdbbb8644ec35bcb6e5543b1ffae8702d0ad3fca4f4b5dc9db5d934120b2bceb62d9e971977c498c36dddfa5aa8470eb62c5aeaa1f2512383c7978f301f1892867d0266a633849723116cd8809c762e2935918cf7509264ae7c9cc6cdb1b75194cb510fc656fa6dba57db6f6bf21ba93667afb", 0x89, r1)
keyctl$describe(0x6, r2, &(0x7f0000000640)=""/254, 0xfe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
chdir(&(0x7f0000000340)='./file0\x00')
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x10, r0, 0x0)
r3 = getpgid(0xffffffffffffffff)
perf_event_open(&(0x7f0000000740)={0x2, 0x70, 0x2, 0x5, 0x3, 0x4, 0x0, 0x2, 0x2001, 0x1, 0x0, 0x4, 0x3, 0x5, 0xc65, 0x1, 0x1, 0x9, 0x7, 0x7, 0x4, 0x7fffffff, 0x0, 0x101, 0x4, 0xfffffffffffffffd, 0x3, 0xbc, 0x6, 0x6, 0x8, 0x1f, 0x9, 0xfffffffffffffffe, 0x9, 0x0, 0x5, 0x9, 0x0, 0x401, 0x1, @perf_config_ext={0x7, 0x9}, 0x80, 0x6, 0x200, 0xa, 0x0, 0x4af3, 0xfffffffffffffffb}, r3, 0xf, r0, 0xa)
unlink(0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={<r4=>0xffffffffffffffff})
lstat(0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, <r5=>0x0, <r6=>0x0})
r7 = shmget(0x1, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={<r8=>0x0}, &(0x7f0000000280)=0xc)
r9 = gettid()
shmctl$IPC_SET(r7, 0x1, &(0x7f0000000380)={{0x34a, r5, r6, r5, r6, 0x10}, 0xca, 0x8, 0x1, 0x2, r8, r9, 0x495a})
ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000100)={0x3, {0x5854, 0x0, 0xffffffff80000001, 0x3a72}})
fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f0000000040))
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000480)={<r10=>0x0, 0x6f, "2655de867f4bdd918c7078d6bee11398e64b2483611aa128107bf7ad333f0b2f92455690a58cab2409b7f5f41cfa07611bc04aa6dcb80f818dc25565e6fa388ca1b42ff18aa95c0b14e7b4563e426789f26235ee253539e984d75d6206ff3b72aa839e854dfde8eaba15f0ee9e2c8b"}, 0x0)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000005c0)={r10, 0xffff}, 0x8)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000200)={0x0, 0x2})
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x3000, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r13, 0x4008ae89, &(0x7f0000000500)={0x7a, 0x0, [0x4b564d00, 0x35fd]})
ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000180))
mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000005000/0x2000)=nil)

19:20:07 executing program 2:
r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x0, 0x0)
r2 = dup3(r0, r1, 0x0)
setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000000)={0x0, @loopback, 0x4e22, 0x3, 'ovf\x00', 0x0, 0x7, 0x5e}, 0x2c)

19:20:07 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

19:20:07 executing program 5:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00')
madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0)
ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000000)=r0)
r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0)
writev(r2, &(0x7f0000000700), 0x100000000000010b)

[ 1039.564086][ T7494] binder_alloc: 7493: binder_alloc_buf size 43520 failed, no address space
[ 1039.598983][ T7494] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
19:20:07 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x80ffffff, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1039.631894][ T7494] binder: 7493:7494 transaction failed 29201/-28, size 31232-12288 line 3147
19:20:07 executing program 2:
syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0)
r0 = syz_open_dev$usb(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0)
setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x3)
dup3(r1, r0, 0x0)

[ 1039.677303][ T7499] binder_alloc: binder_alloc_mmap_handler: 7493 20004000-20007000 already mapped failed -16
19:20:07 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0xffffff7f, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1039.766507][ T7494] binder: BINDER_SET_CONTEXT_MGR already set
[ 1039.820378][ T7494] binder: 7493:7494 ioctl 40046207 0 returned -16
[ 1039.820936][ T7506] binder_alloc: 7493: binder_alloc_buf, no vma
19:20:07 executing program 2:
syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0)
r0 = syz_open_dev$usb(0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x0, 0x0)
dup3(r1, r0, 0x0)

19:20:07 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0xffffff80, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:20:07 executing program 3:
r0 = shmget(0x0, 0x3000, 0x78000200, &(0x7f0000ffd000/0x3000)=nil)
shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x4000)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040))
socket$inet_tcp(0x2, 0x1, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2)
shmctl$IPC_RMID(r0, 0x0)

[ 1040.037267][ T7506] binder: 7493:7506 transaction failed 29189/-3, size 31232-12288 line 3147
19:20:08 executing program 4:
io_setup(0x8, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000140)={'filter\x00', 0x0, 0x4, 0x58, [], 0x3, &(0x7f0000000000)=[{}, {}, {}], &(0x7f00000000c0)=""/88}, &(0x7f0000000040)=0x50)
sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0)

19:20:08 executing program 2:
syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0)
r0 = syz_open_dev$usb(0x0, 0x0, 0x80000)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x0, 0x0)
ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000040))
dup3(r1, r0, 0x0)
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000000)={@remote}, 0x14)

19:20:08 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x40030000000000, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:20:08 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf82f, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

19:20:08 executing program 3:
r0 = syz_open_dev$sndctrl(&(0x7f0000000640)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000000)={0x6, 0x0, 0x0, 0x0, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\xba\xffH\x00'})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000040)={0x2000000000006})
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0)
getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f00000000c0), &(0x7f0000000140)=0x60)
syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x200000)

19:20:08 executing program 5:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040))
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='\t\x00\xc8\x12\x8f\x81', 0xfffffffffffffffd, 0x0)
recvfrom$unix(0xffffffffffffffff, &(0x7f0000000280)=""/36, 0x24, 0x0, &(0x7f0000000380)=@abs={0x1}, 0x6e)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x1a102, 0x0)
mount(&(0x7f0000d04000), &(0x7f0000903000)='./file0\x00', 0x0, 0x100000, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)

19:20:08 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x100000000000000, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1040.511831][ T7535] binder_alloc: 7530: binder_alloc_buf size 75824 failed, no address space
19:20:08 executing program 3:
r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x1000, 0x0)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10)
write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)='cpuset.mem_exclusive\x00', 0x2, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
setsockopt(r0, 0x8, 0xff7, &(0x7f00000002c0)="f3ec9b03a53a75d62533032056241632514833d108fcf31231d368f11d986984e048a33d151e6a8cafd0ce420a23f5fe411183694678230e389cd2562dc871b0fe36d02295e54595ab61d3e3af22ebf9a8a5531cef18336b5a981ca934e9b2d88b27393edc7550f0a54c9bb941d8a080a36879d957de3950c6304365f945879770fe4ee9f0713ecdba030f40e6a8e938aae5b64c26de9edf8fe7fb5f7e6e3986d1036db19e6f0e63", 0xa8)
ioctl$ASHMEM_SET_SIZE(r0, 0x40047703, 0x9)
getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000140), &(0x7f00000001c0)=0x4)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000280)={0x1}, 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
listen(r1, 0x7)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x800)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x7, 0x7ffd, 0x0, 0x9}, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
close(r3)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, 0x0)

[ 1040.563866][ T7535] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
19:20:08 executing program 2:
r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = syz_open_dev$usb(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x80000)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x0, 0x0)
dup3(r2, r1, 0x0)

19:20:08 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x200000000000000, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:20:08 executing program 5:
r0 = shmget(0x3, 0x4000, 0x20, &(0x7f0000ffa000/0x4000)=nil)
shmctl$SHM_UNLOCK(r0, 0xc)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200400, 0x0)
shmget(0x0, 0x4000, 0x7c001883, &(0x7f0000ffc000/0x4000)=nil)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x43000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x124}}, 0x800)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0xfffffffffffffffc, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f00000003c0)={0x7c, 0x0, [0xce, 0x10002000800002c1], [0xc1]})

[ 1040.617421][ T7544] binder_alloc: binder_alloc_mmap_handler: 7530 20004000-20007000 already mapped failed -16
[ 1040.654263][ T7544] binder_alloc: 7530: binder_alloc_buf, no vma
19:20:08 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

[ 1040.672016][ T7535] binder: BINDER_SET_CONTEXT_MGR already set
[ 1040.678099][ T7535] binder: 7530:7535 ioctl 40046207 0 returned -16
[ 1040.844237][ T7562] binder_alloc: 7560: binder_alloc_buf size 3158016 failed, no address space
[ 1040.924337][ T7562] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1040.969655][ T7562] binder: BINDER_SET_CONTEXT_MGR already set
[ 1040.996966][ T7566] binder_alloc: 7560: binder_alloc_buf, no vma
[ 1041.008791][ T7562] binder: 7560:7562 ioctl 40046207 0 returned -16
19:20:09 executing program 4:
io_setup(0x8, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000140)={'filter\x00', 0x0, 0x4, 0x58, [], 0x3, &(0x7f0000000000)=[{}, {}, {}], &(0x7f00000000c0)=""/88}, &(0x7f0000000040)=0x50)
sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0)

19:20:09 executing program 2:
syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0)
r0 = syz_open_dev$usb(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x0, 0x0)
dup3(r1, r0, 0x0)

19:20:09 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x400000000000000, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:20:09 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0)
write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x150)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x0, 0x3})

19:20:09 executing program 3:
r0 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
sendto$inet6(r0, &(0x7f0000000280)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e5d37149eb0f4a333726cf6d5b7647306559155f1c69d6bfd145b83576f2df4d85f271fd4119db923e2412c66dd954eb59dddc7e1fd286a83971b2ba1c63b4f99702cf91f3d1ecffb8ae189c79b403805e83650c251a564942896f205640c23b0cf51fe9bd931f54a343794710a9cd53cef20938edddb2bfa3c1f72f8e79e41e30fb8f9d314abd999ba396521b6c10bec7bc9d0745a80299342f5cf89eb9d94044258fbb18cec1cdbbc016a773d3ae41e3e30248e716fd0873d31454902cbe7dcf7d644dfadc255d99652b5ed5a5b1a75e3ad49cf80178678402e9d3a755d009889b2e6138f81dc02eedcc353aceb2f7781aea08aa91be7e1e2416ba3d555b1f2237f68c5d7dcfcb1b917c292a35d6d7e7cf2cb1dd6dba5a50ce55c4638d7d38cb7afd8da02f281ab69392bc6531eb03eb97c1d075e3342c244861d04bcad8991b8f588e48ad7fe218d2f5e604bb31c59241245b485210fe418af3d6377b59d5ab128497efeced38cc5036b1f34cb89674b5179219f34b9e8e1849695d7c23cce77eb8f038ef9f2cd69d1c9e2d6b46610adbadbdad857a77f59d38cb5120709716b87c52a48de249b231d7e39985b8b58094c0d7b4c6d1671a8ff9d2daaca94df2adcff6420077df0ddbc66d00b141ffc6e28bed09a19056e52a905a72c99a04af56b22da83135808ba2bfe87a39753447e78500d16bdad52d97df73d4852a79e7ec6910701b712cfd58c62b3ade86cf6ff0cd78719fa1ae81640381cb33f4f6b03c913e820cf9eb9b5cf7df9c878596c9ac9444cad118673fe339b4b7287b310ecff4742bfea2612d79d418293f0dfe14bc819c466473438ad71ea3b1386d17a9038b1f5a9285481500f84f4c7eabbf2eb071a101c69cce8e7495bda4c28a4e88f6a258abf58579c290eeb742b2678daab3ecc8c2bf97d89e89472901e254dd63ca7d918f8a7523161e29b28f64b285da7bb4a17d0ad734c321623e246bb0b5aaa08e8e7ac42b74ba83c70a8ca80068400be6adc3f4b01ba1050b54e6e4cf72fb567fbd27b74b2bfa7b7cabc6938851c13c6df7d5aaca79afd89b5e925379b959c7929ddfa3399695343f435772d70e5cfa3550377d23f50011ad5657e94c464cd43eb85496fd3b03bcb2d9278ceb432194d9893ffa747dfe85309f256c910e31e81dcd3cd8a13744fc2874737a2ff34bf8c89f15da7cc0853434117d744e30360b38ef1a063f9ee506f048e9980054e6c5c5688d04ece6067ac55bccc9a7773a2c4e21c039d153622130faff9fd675d64ad7284bd011b9b224713a721b4b731cf342357642a1a0bb846f5be443b7e72e9825b5f3a078c6ae09e4512dd93a5be1af13a49e6a33938509d3557aecf2356ac2329871b662a99cf3fd2486b064e7e6f90c1f8d632186a8bda338b02d45da4ea9041d42a23f40b93346dddc473a9f1a3d9f0285b7e48cbb87bc34d44b090a5e2aaf4764a10a44168f1719eff0b0d9bc1ce07750af4c21d0c67eae0799e91328c8b14869e4edd255a41735a2b1818aa9d3b271ba757af010ae6dbad89aa0d8f5b6f8ef3917adcedf247ffcf9ade407dfb50948aa97077a195b5f6eeff443be20f383aa8ebbb4b0f2e888cb7cde9ec09177f4576576f088430e4a61d352607113ce7118f2d", 0x566, 0xc001, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000040)="f11d9485945530b02c13b63ecca90bcd5e45aae6c27dcfb60d8f3b82d09721908ec5fd0cd4fc40b461afc79758bb2ebb7ba7e67fc49a3d4bb896b2", 0x3b, 0x8000, 0x0, 0x0)
sendto$inet6(r0, &(0x7f00000008c0)="14ee697b8127a3a51f838aa6", 0xc, 0x0, 0x0, 0x0)

19:20:09 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

[ 1041.250715][    C1] net_ratelimit: 16 callbacks suppressed
[ 1041.250724][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1041.250729][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1041.250776][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1041.256505][    C1] protocol 88fb is buggy, dev hsr_slave_1
19:20:09 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x80ffffff00000000, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:20:09 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x8001, 0x27, 0x0, <r1=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, 0x0)

19:20:09 executing program 2:
syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0)
prctl$PR_SET_ENDIAN(0x14, 0x2)
r0 = syz_open_dev$usb(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x0, 0x0)
dup3(r1, r0, 0x0)

[ 1041.304153][ T7583] binder_alloc: 7573: binder_alloc_buf size 16789504 failed, no address space
[ 1041.331593][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1041.338109][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1041.385920][ T7583] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1041.425482][ T7597] binder_alloc_mmap_handler: 1 callbacks suppressed
19:20:09 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x29, 0x5, 0x0)
r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x4080, 0x0)
ioctl$VIDIOC_S_CROP(r2, 0x4014563c, &(0x7f0000000100)={0xe, {0x401, 0x10000, 0x20}})
ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x7, 0x8ec, 0x4, 0x0, 0x8, 0x9b, 0x6}]})
r3 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x101000)
ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000080)={0x10001})
dup3(r0, r1, 0x0)

[ 1041.425500][ T7597] binder_alloc: binder_alloc_mmap_handler: 7573 20004000-20007000 already mapped failed -16
[ 1041.475007][ T7583] binder: BINDER_SET_CONTEXT_MGR already set
19:20:09 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000480))
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000580)="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")
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500), 0x1, 0x0, 0x0, 0x8000}, 0x4040)
r2 = socket$inet6(0xa, 0x3, 0xfb)
fgetxattr(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="d0a44c8a5bdad77dbfb3ce112fddda0a10d3ac9f5deb75127bbe62cd38011be60d31e9e229a4e9537caa2d28ae41920d81ccf91ce2b24cc24bf57543a8a8ed9bad7ed40818875356ea4b14d7ec723a5b2291ef617f1fc734bd4dc116d85e688bf7a4ba36aeffe766b30267061e0ca46f8da6b7db829715c2b1b2d36139ff4cfac99ef865558a768ba1679ff3adc75f7aa585a04075b1329c660f8ab6ab2c017767b7ce31f7d5f27739cee0403eff23f7ba615e8381536d092f57235b1d662157f111124babafd7151d297f46af93cad26bfcd88eb8e2760a6d9121b41e167c6ff146fdf20873e1c469a45bfab744073379bb90ad"], 0x0, 0x0)
r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/dsp\x00', 0x80, 0x0)
ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000140)={0x55, 0x0, 0x49, {0x3}, {0x4, 0x2}, @period={0x5a, 0x9, 0x9, 0x0, 0x10000, {0x0, 0x0, 0x7ff, 0x200}, 0x0, 0x0}})
ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611)
ioctl$int_in(r4, 0x800000c0045005, &(0x7f00000004c0)=0x100040000)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)={0x52, 0x2, "3229808b517a7774585c936e2004be624128d6f5ca3ea481c18519e7423a53d89cfd39e84ae04725038ea2139815afb3d0684311cc0ecd89b9fa14e254f0c3c71be6f989edac87d3360a"}, 0x80000)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'bond0\x00'})
r5 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
ioctl$KIOCSOUND(r5, 0x4b2f, 0x6)
ioctl$KVM_SET_XSAVE(r5, 0x5000aea5, &(0x7f0000000080)={"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"})
ioctl(r0, 0xffffffffffffffbc, &(0x7f0000000100))

19:20:09 executing program 2:
syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0)
r0 = syz_open_dev$usb(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xa984a57982b0c50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x0, 0x0)
dup3(r1, r0, 0x0)

[ 1041.498852][ T7583] binder: 7573:7583 ioctl 40046207 0 returned -16
[ 1041.558536][ T7606] binder_alloc: 7573: binder_alloc_buf, no vma
[ 1041.572763][    C0] protocol 88fb is buggy, dev hsr_slave_1
19:20:09 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f0000000040)=0xe8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00', r1})
sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x11}]}, 0x30}}, 0x0)

19:20:09 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0xffffff7f00000000, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:20:09 executing program 2:
syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0)
r0 = syz_open_dev$usb(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x0, 0x0)
ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000000))
dup3(r1, r0, 0x0)

19:20:09 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

19:20:09 executing program 5:
socketpair$unix(0x1, 0x40000000000005, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
pipe2(&(0x7f0000000040), 0x4800)
socket$isdn(0x22, 0x3, 0x25)
io_setup(0x8, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140), 0x7}])

[ 1041.823926][ T7621] binder_alloc: 7620: binder_alloc_buf size 33566720 failed, no address space
[ 1041.845966][ T7621] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1041.859274][ T7627] binder_alloc: binder_alloc_mmap_handler: 7620 20004000-20007000 already mapped failed -16
19:20:09 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0xffffffff00000000, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1041.872186][ T7621] binder: BINDER_SET_CONTEXT_MGR already set
[ 1041.879530][ T7621] binder: 7620:7621 ioctl 40046207 0 returned -16
[ 1041.895606][ T7627] binder_alloc: 7620: binder_alloc_buf, no vma
[ 1041.910836][T19041] binder_release_work: 10 callbacks suppressed
19:20:09 executing program 2:
r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0)
fcntl$dupfd(r0, 0x0, r0)
r1 = syz_open_dev$usb(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0)
dup3(r2, r1, 0x0)

[ 1041.910843][T19041] binder: undelivered TRANSACTION_ERROR: 29201
19:20:09 executing program 5:
r0 = timerfd_create(0x0, 0x80800)
timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
read(r0, &(0x7f0000a16000)=""/71, 0x113)

19:20:09 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

[ 1041.980894][T19041] binder: undelivered TRANSACTION_ERROR: 29189
19:20:10 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000480))
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000580)="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")
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500), 0x1, 0x0, 0x0, 0x8000}, 0x4040)
r2 = socket$inet6(0xa, 0x3, 0xfb)
fgetxattr(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="d0a44c8a5bdad77dbfb3ce112fddda0a10d3ac9f5deb75127bbe62cd38011be60d31e9e229a4e9537caa2d28ae41920d81ccf91ce2b24cc24bf57543a8a8ed9bad7ed40818875356ea4b14d7ec723a5b2291ef617f1fc734bd4dc116d85e688bf7a4ba36aeffe766b30267061e0ca46f8da6b7db829715c2b1b2d36139ff4cfac99ef865558a768ba1679ff3adc75f7aa585a04075b1329c660f8ab6ab2c017767b7ce31f7d5f27739cee0403eff23f7ba615e8381536d092f57235b1d662157f111124babafd7151d297f46af93cad26bfcd88eb8e2760a6d9121b41e167c6ff146fdf20873e1c469a45bfab744073379bb90ad"], 0x0, 0x0)
r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/dsp\x00', 0x80, 0x0)
ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000140)={0x55, 0x0, 0x49, {0x3}, {0x4, 0x2}, @period={0x5a, 0x9, 0x9, 0x0, 0x10000, {0x0, 0x0, 0x7ff, 0x200}, 0x0, 0x0}})
ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611)
ioctl$int_in(r4, 0x800000c0045005, &(0x7f00000004c0)=0x100040000)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)={0x52, 0x2, "3229808b517a7774585c936e2004be624128d6f5ca3ea481c18519e7423a53d89cfd39e84ae04725038ea2139815afb3d0684311cc0ecd89b9fa14e254f0c3c71be6f989edac87d3360a"}, 0x80000)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'bond0\x00'})
r5 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
ioctl$KIOCSOUND(r5, 0x4b2f, 0x6)
ioctl$KVM_SET_XSAVE(r5, 0x5000aea5, &(0x7f0000000080)={"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"})
ioctl(r0, 0xffffffffffffffbc, &(0x7f0000000100))

[ 1042.131991][ T7642] binder_alloc: 7638: binder_alloc_buf size 50343936 failed, no address space
19:20:10 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000480))
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000580)="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")
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500), 0x1, 0x0, 0x0, 0x8000}, 0x4040)
r2 = socket$inet6(0xa, 0x3, 0xfb)
fgetxattr(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="d0a44c8a5bdad77dbfb3ce112fddda0a10d3ac9f5deb75127bbe62cd38011be60d31e9e229a4e9537caa2d28ae41920d81ccf91ce2b24cc24bf57543a8a8ed9bad7ed40818875356ea4b14d7ec723a5b2291ef617f1fc734bd4dc116d85e688bf7a4ba36aeffe766b30267061e0ca46f8da6b7db829715c2b1b2d36139ff4cfac99ef865558a768ba1679ff3adc75f7aa585a04075b1329c660f8ab6ab2c017767b7ce31f7d5f27739cee0403eff23f7ba615e8381536d092f57235b1d662157f111124babafd7151d297f46af93cad26bfcd88eb8e2760a6d9121b41e167c6ff146fdf20873e1c469a45bfab744073379bb90ad"], 0x0, 0x0)
r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/dsp\x00', 0x80, 0x0)
ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000140)={0x55, 0x0, 0x49, {0x3}, {0x4, 0x2}, @period={0x5a, 0x9, 0x9, 0x0, 0x10000, {0x0, 0x0, 0x7ff, 0x200}, 0x0, 0x0}})
ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611)
ioctl$int_in(r4, 0x800000c0045005, &(0x7f00000004c0)=0x100040000)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)={0x52, 0x2, "3229808b517a7774585c936e2004be624128d6f5ca3ea481c18519e7423a53d89cfd39e84ae04725038ea2139815afb3d0684311cc0ecd89b9fa14e254f0c3c71be6f989edac87d3360a"}, 0x80000)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'bond0\x00'})
r5 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
ioctl$KIOCSOUND(r5, 0x4b2f, 0x6)
ioctl$KVM_SET_XSAVE(r5, 0x5000aea5, &(0x7f0000000080)={"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"})
ioctl(r0, 0xffffffffffffffbc, &(0x7f0000000100))

[ 1042.197415][ T7642] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1042.210686][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1042.217341][    C0] protocol 88fb is buggy, dev hsr_slave_1
19:20:10 executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f346d6f64653d30303030303030303030303030303030303034303030302c7573020000009438ace0ec1fd9583dd0797c05cc5283033b3346b18f68dbecd7ec81643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140), 0x0, 0xfb, 0x1000, &(0x7f0000001240)=""/4096}, 0x48)
r1 = syz_open_dev$media(&(0x7f0000002600)='/dev/media#\x00', 0x0, 0x0)
ioctl$EVIOCGKEY(r1, 0xc0487c04, &(0x7f0000000000)=""/226)
write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000001c0)={0x26, 0x3, 0x0, {0x0, 0x5, 0x0, 'fuse\x00', 0x1000000000000000}}, 0x26)

[ 1042.344618][ T7651] binder_alloc: binder_alloc_mmap_handler: 7638 20004000-20007000 already mapped failed -16
[ 1042.433167][ T7642] binder: BINDER_SET_CONTEXT_MGR already set
[ 1042.456364][ T7657] binder_alloc: 7638: binder_alloc_buf, no vma
[ 1042.464526][ T7642] binder: 7638:7642 ioctl 40046207 0 returned -16
[ 1042.472998][ T7657] binder_transaction: 9 callbacks suppressed
[ 1042.473016][ T7657] binder: 7638:7657 transaction failed 29189/-3, size 50331648-12288 line 3147
[ 1042.493577][T19041] binder: undelivered TRANSACTION_ERROR: 29201
[ 1042.504502][T19041] binder: undelivered TRANSACTION_ERROR: 29189
[ 1042.861530][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1043.256850][ T7663] netlink: 'syz-executor.4': attribute type 17 has an invalid length.
19:20:11 executing program 4:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nullb0\x00', 0x2, 0x0)
mmap(&(0x7f0000bbf000/0x1000)=nil, 0x1000, 0x200000e, 0x13, r0, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0)
preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0)
pipe2(&(0x7f0000000080)={<r2=>0xffffffffffffffff}, 0x800)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={<r3=>0x0, 0x9, 0xe4c1}, &(0x7f0000000100)=0x8)
ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000180)={0x9, 0x8, 0x1, 0x4})
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000140)={r3}, 0x8)

[ 1043.312585][ T7663] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
19:20:11 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

19:20:11 executing program 2:
syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0)
r0 = syz_open_dev$usb(0x0, 0x0, 0x0)
ioctl$PPPIOCSCOMPRESS(r0, 0x400c744d)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x0, 0x0)
dup3(r1, r0, 0x0)

19:20:11 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x2, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:20:11 executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f346d6f64653d30303030303030303030303030303030303034303030302c7573020000009438ace0ec1fd9583dd0797c05cc5283033b3346b18f68dbecd7ec81643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140), 0x0, 0xfb, 0x1000, &(0x7f0000001240)=""/4096}, 0x48)
r1 = syz_open_dev$media(&(0x7f0000002600)='/dev/media#\x00', 0x0, 0x0)
ioctl$EVIOCGKEY(r1, 0xc0487c04, &(0x7f0000000000)=""/226)
write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000001c0)={0x26, 0x3, 0x0, {0x0, 0x5, 0x0, 'fuse\x00', 0x1000000000000000}}, 0x26)

19:20:11 executing program 5:
socket$xdp(0x2c, 0x3, 0x0)

[ 1043.404864][ T7675] binder_alloc: 7674: binder_alloc_buf size 67121152 failed, no address space
[ 1043.425319][ T7675] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
19:20:11 executing program 2:
syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0)
r0 = syz_open_dev$usb(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x0, 0x0)
dup3(r1, r0, 0x0)
ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000000)={0x400, 0x19})
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00')
sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xd4, r2, 0x820, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xa0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x92}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x543}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40}, 0x20004000)
ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f00000002c0)={'hwsim0\x00', {0x2, 0x4e22, @broadcast}})
ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000080))

19:20:11 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x4, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1043.448313][ T7675] binder: 7674:7675 transaction failed 29201/-28, size 67108864-12288 line 3147
19:20:11 executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f346d6f64653d30303030303030303030303030303030303034303030302c7573020000009438ace0ec1fd9583dd0797c05cc5283033b3346b18f68dbecd7ec81643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140), 0x0, 0xfb, 0x1000, &(0x7f0000001240)=""/4096}, 0x48)
r1 = syz_open_dev$media(&(0x7f0000002600)='/dev/media#\x00', 0x0, 0x0)
ioctl$EVIOCGKEY(r1, 0xc0487c04, &(0x7f0000000000)=""/226)
write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000001c0)={0x26, 0x3, 0x0, {0x0, 0x5, 0x0, 'fuse\x00', 0x1000000000000000}}, 0x26)

19:20:11 executing program 5:
futex(0x0, 0xe97ffc304f88bb57, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xc7, 0x2000)
ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000040)=""/4096)

[ 1043.596235][ T7693] binder_alloc: binder_alloc_mmap_handler: 7674 20004000-20007000 already mapped failed -16
19:20:11 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100))
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x200800, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
io_setup(0x0, &(0x7f0000000000))
clone(0x0, 0x0, 0x0, 0x0, 0x0)
arch_prctl$ARCH_SET_GS(0x1001, 0x200)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f00000014c0)=[@in6={0xa, 0x4e21, 0x3f, @empty}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e20, 0xffff, @mcast2, 0x2}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e22, 0x8, @mcast1, 0x1}, @in6={0xa, 0x4e20, 0xfffffffffffffffd, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x56}, @in={0x2, 0x4e23, @rand_addr=0x2}, @in={0x2, 0x4e24, @loopback}], 0xd0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000002c0)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0x0, 0xf5ffffff]}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)

19:20:11 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000280))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})
r3 = dup3(r1, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x1, 0x0, &(0x7f0000000200)=[@enter_looper], 0x128, 0x0, &(0x7f00000000c0)="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"})
fcntl$setflags(r3, 0x2, 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r3)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x9, 0x0, &(0x7f0000000480)=[@dead_binder_done], 0x0, 0xfdfdffff, 0x0})

[ 1043.649905][ T7675] binder: BINDER_SET_CONTEXT_MGR already set
[ 1043.674986][ T7675] binder: 7674:7675 ioctl 40046207 0 returned -16
[ 1043.682517][ T7697] binder_alloc: 7674: binder_alloc_buf, no vma
[ 1043.688872][ T7697] binder: 7674:7697 transaction failed 29189/-3, size 67108864-12288 line 3147
[ 1043.752207][ T7706] binder: BINDER_SET_CONTEXT_MGR already set
[ 1043.758284][ T7706] binder: 7705:7706 ioctl 40046207 0 returned -16
[ 1043.759924][T29136] binder: undelivered TRANSACTION_ERROR: 29201
[ 1043.802280][ T7706] binder: 7705:7706 BC_DEAD_BINDER_DONE 0000000000000000 not found
[ 1043.827393][ T7708] binder: 7705:7708 BC_DEAD_BINDER_DONE 0000000000000000 not found
[ 1043.846805][T29136] binder: undelivered TRANSACTION_ERROR: 29189
19:20:11 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl(r0, 0x837b9, 0x0)

19:20:11 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x8000, 0x0)
ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = syz_open_dev$mouse(0x0, 0x0, 0x0)
ioctl$RTC_PIE_OFF(r2, 0x7006)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='smaps_rollup\x00')
fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, 0x0)
pread64(r3, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x8, 0x0, 0xfffffffffffffff8, 0xd81, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x2, 0x0, 0x50495667, 0x0, 0x3ff, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x7, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x4, 0x101, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x40, 0x2}, 0x0, 0x6, 0xffffffffffffffff, 0x8)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0)
bind$tipc(r3, &(0x7f0000000380)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x1, 0x1}}, 0x10)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f00000003c0)={0x0, [0x0, 0x500000000000000]})
dup2(r0, 0xffffffffffffffff)
ioctl$VIDIOC_S_FBUF(r3, 0x4030560b, &(0x7f0000000080)={0x0, 0x1, 0x0, {0x8, 0x58112be4, 0x0, 0x0, 0xfde, 0x6, 0x1, 0xff}})

19:20:11 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x34000, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:20:11 executing program 2:
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380)='/dev/hwrng\x00', 0x0, 0x0)
r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xffffffffffffff4c, 0x109000)
ioctl$TIOCGPTPEER(r1, 0x5441, 0x7fffffff)
syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000001000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, 0x0, &(0x7f00000003c0))
r3 = syz_open_dev$evdev(&(0x7f0000000500)='/dev/input/event#\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x85a1035adf4fb4ed)
r4 = socket$inet6(0xa, 0x3, 0x3a)
setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c)
setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0)
utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080))
getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000180), &(0x7f00000001c0)=0x30)
ioctl$KVM_ASSIGN_PCI_DEVICE(r0, 0x8040ae69, &(0x7f0000000300)={0x80000000, 0x0, 0x9, 0x5, 0xa302})
setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x80000000, 0x10000, 0x3}, 0xc)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000002c0))
r5 = epoll_create(0xdaf)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000100))
r6 = dup(r3)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000140))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x3, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
userfaultfd(0x80000)
r7 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x100082)
r8 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
pwritev(r8, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0xe})
sendfile(r7, r8, &(0x7f0000000240), 0x20000102000007)

19:20:11 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

19:20:11 executing program 3:
openat$rtc(0xffffffffffffff9c, 0x0, 0xa000, 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e21, 0x7, @empty}, 0x1c)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000000)={0xfff7fffffffffffe}, 0x8)
sendto$inet6(r0, 0x0, 0xfffffffffffffee8, 0x8000, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
set_robust_list(&(0x7f0000000240)={&(0x7f0000000040)}, 0xc)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10)
r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x105082)
sched_yield()
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000a00)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@broadcast}}}, &(0x7f0000000b00)=0xe8)
r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3)
sendfile(r1, r2, 0x0, 0x102000002)

[ 1044.020146][ T7720] binder_alloc: 7717: binder_alloc_buf size 83898368 failed, no address space
[ 1044.060398][ T7720] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1044.091279][ T7720] binder: 7717:7720 transaction failed 29201/-28, size 83886080-12288 line 3147
19:20:12 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x400300, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1044.169227][ T7733] binder_alloc: binder_alloc_mmap_handler: 7717 20004000-20007000 already mapped failed -16
[ 1044.240081][ T7720] binder: BINDER_SET_CONTEXT_MGR already set
19:20:12 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x1000000, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1044.284101][ T7720] binder: 7717:7720 ioctl 40046207 0 returned -16
[ 1044.284147][ T7736] binder_alloc: 7717: binder_alloc_buf, no vma
[ 1044.331779][T19041] binder: undelivered TRANSACTION_ERROR: 29201
[ 1044.353375][ T7736] binder: 7717:7736 transaction failed 29189/-3, size 83886080-12288 line 3147
[ 1044.418915][T19041] binder: undelivered TRANSACTION_ERROR: 29189
19:20:12 executing program 3:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x101100, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000100)={{0x0, @remote, 0x4e22, 0x3, 'sh\x00', 0x1, 0xf5, 0x61}, {@rand_addr=0x8, 0x4e21, 0x2000, 0x5, 0xf04, 0x5}}, 0x44)
r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2)
ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f00000000c0)={0x32})

19:20:12 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

19:20:12 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x2000000, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:20:12 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
connect$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @local}, 0x1c)

[ 1044.584744][ T7756] binder_alloc: 7755: binder_alloc_buf size 100675584 failed, no address space
[ 1044.656874][ T7756] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
19:20:12 executing program 4:
timer_create(0x3, 0x0, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000002e000)={{}, {0x0, 0x9}}, 0x0)
arch_prctl$ARCH_GET_CPUID(0x1011)
r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x88080)
ioctl$FS_IOC_SETVERSION(r0, 0x40047602, &(0x7f0000000040)=0x3)
clock_gettime(0x0, &(0x7f0000000080)={<r1=>0x0, <r2=>0x0})
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r0, 0xc0245720, &(0x7f00000000c0)={0x1, {r1, r2+30000000}, 0xa8, 0x4})
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000))

19:20:12 executing program 2:
openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x80000, 0x0)
ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f00000001c0)={0x3, 0x9115e98})
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0186415, &(0x7f0000000100)={&(0x7f0000ffd000/0x2000)=nil, 0x81, 0x5, 0x40, &(0x7f0000ffd000/0x2000)=nil, 0x5})
r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2)
acct(&(0x7f0000000180)='./file0\x00')
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)=0x6)
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0xffffffffffffffd3, 0x12, 0x100000000000000, {0x0, 0x0, 0x0, 0xb}}, 0xfffffffffffffddf)

19:20:12 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58)
ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, 0x0)
ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, 0x0)
setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000100)=0x1, &(0x7f0000000140)=0x4)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x240000, 0x0)
ioctl$IOC_PR_RELEASE(r2, 0x401070ca, 0x0)
connect$inet6(r1, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000001200)=[{{&(0x7f0000000180)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f00000002c0)=""/72, 0x48}, {&(0x7f0000000340)=""/2, 0x2}, {&(0x7f00000004c0)=""/211, 0xd3}, {&(0x7f0000000a00)=""/99, 0x63}, {&(0x7f0000000a80)=""/202, 0xca}, {&(0x7f0000000b80)=""/84, 0x54}], 0x7, &(0x7f0000000c00)=""/239, 0xef}, 0xfff}, {{&(0x7f0000000d00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000d80)=""/220, 0xdc}, {&(0x7f0000000e80)=""/157, 0x9d}, {&(0x7f0000000f40)=""/192, 0xc0}, {&(0x7f0000001000)=""/141, 0x8d}, {&(0x7f00000010c0)=""/167, 0xa7}, {&(0x7f0000001180)=""/97, 0x61}], 0x6}, 0x7}], 0x2, 0x40, &(0x7f0000001240)={0x77359400})
syz_open_dev$mouse(&(0x7f00000005c0)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000033c0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f00000000c0)=""/45, 0x2d}], 0x1ffffcb9, 0x0, 0x26, 0x2000}}], 0x1, 0x0, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f0000000140)='cgroup.threads\x00', 0x2, 0x0)
preadv(r5, &(0x7f00000009c0)=[{&(0x7f00000003c0)=""/68, 0x44}, {&(0x7f00000005c0)=""/214, 0xd6}, {&(0x7f00000006c0)=""/194, 0xc2}, {&(0x7f00000007c0)=""/146, 0x92}, {&(0x7f0000000880)=""/144, 0x90}, {&(0x7f0000000480)=""/13, 0xd}, {&(0x7f0000000940)=""/71, 0x47}], 0x7, 0x0)
sendfile(r1, r3, 0x0, 0x1000007ffff000)

19:20:12 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x4000000, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:20:12 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x1, 0x0)
getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000240), &(0x7f0000000280)=0x18)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc100)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="b10b938636ea69df7b5a9984bb1bc72ef58d96e56e11df900a707f4946b1637e2096c584b9a1b4e017163fbdb35160a56c11dfbe74df97d36d19ad6a91c6fb4ad19581b8cf707131830f7a22b1b263c9da0e443c5e969ed6a0d3bc508bf75c3147447379f585759ceba0de5cda46291dc1b8f106a83e1cde43a862d95413ce2616b261ed9f79913ae781b3b843ea1b4429a750b8ccb1952a7b863d0bada9f61df6609fe368eaf47c0ce9e46a22b0d75b063deeaa94285d0c43353046e0a308296a76b0b014", 0xc5}], 0x1}, 0x8000)
setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000000)=0x398, 0x4)
recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)="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", 0x2d5}], 0x1}, 0x0)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer\x00', 0x101000, 0x0)
ioctl$KDGKBLED(r2, 0x4b64, &(0x7f0000000340))

[ 1044.704221][ T7756] binder: 7755:7756 transaction failed 29201/-28, size 100663296-12288 line 3147
[ 1044.755944][ T7770] binder_alloc: binder_alloc_mmap_handler: 7755 20004000-20007000 already mapped failed -16
19:20:12 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x80ffffff, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1044.826289][ T7756] binder: BINDER_SET_CONTEXT_MGR already set
[ 1044.846008][ T7756] binder: 7755:7756 ioctl 40046207 0 returned -16
[ 1044.882800][ T7776] binder_alloc: 7755: binder_alloc_buf, no vma
[ 1044.905123][T29950] binder: undelivered TRANSACTION_ERROR: 29201
[ 1044.917359][ T7776] binder: 7755:7776 transaction failed 29189/-3, size 100663296-12288 line 3147
19:20:12 executing program 5:
r0 = socket$inet_sctp(0x2, 0x402000000000005, 0x84)
getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000000)={'raw\x00', 0x4, "0d74589c"}, &(0x7f0000000040)=0x28)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x8)
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffff9c, 0xc008640a, &(0x7f00000000c0)={<r2=>0x0})
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x480000, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000140)={r2, 0x80000, r3})

19:20:12 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0xffffff7f, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:20:12 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

[ 1044.951854][T19041] binder: undelivered TRANSACTION_ERROR: 29189
19:20:12 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000080)={0xfffffffffffffffd, 0x3, 0x9})
syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x2400)
ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3)
chroot(0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x1263, 0x0)

19:20:13 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x83, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mremap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000011000/0x3000)=nil)
r1 = dup2(r0, r0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000065050088d8d7fb41a16976a4c6efa90a24d35afb9764217e351e72b870ec53ba33f42c8a0bab6f6d398be81c177e680469e6646f5233895a39e9dbcf1f8a8c2e9140072fe657cb5058f2ed182cf830bb43c8fc4749e16e9be6bc4debaaa6d8fb1aafaeca7a9dbd56a3d8f269b0afd7bf8dba75634352d4e43f273b1f8c5aa733488bf4eb183d438ba96845c188b3ecafa62bd622578a1191cb4716c025022da4f6319414133dcdadbd7217cfd1781d4d61590809f60f1850a33c9b87e5f94a7ea283e2151a9b3b104a0fae9a2b454765bf905d4cd1be15bcb40de8c3632a332256bef36e5dd5be176f41d7a30449e1671969e6527e34b909c632c429cad6d84e9081f0797663d2efcbc9e5ac97ebda034d09fa9202c7be78fb997c3afa36cb63d1871f53b81aef523e8f04c169d9beea98d3667ee6", @ANYRES32=0x0, @ANYRES32=<r2=>0x0, @ANYRES32=0x0], &(0x7f0000000080)=0x10)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000240)={r2, 0x94, &(0x7f0000000180)=[@in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e24, 0x1f00000000, @local, 0x9}, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e21, 0x81, @mcast1, 0x9}, @in6={0xa, 0x4e22, 0xffffffff, @empty, 0x3}, @in={0x2, 0x4e23, @loopback}]}, &(0x7f0000000280)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000002540)={{{@in6=@mcast2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000002640)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000002680)={'vcan0\x00', r3})
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r2, 0x800, 0x5}, 0xc)
syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x77234e06, 0x52000)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)=<r4=>0x0)
fcntl$setown(r1, 0x8, r4)

[ 1045.084312][ T7807] binder_alloc: 7806: binder_alloc_buf size 117452800 failed, no address space
19:20:13 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0xffffff80, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1045.125616][ T7807] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1045.176782][ T7807] binder: 7806:7807 transaction failed 29201/-28, size 117440512-12288 line 3147
[ 1045.222197][ T7839] binder_alloc: binder_alloc_mmap_handler: 7806 20004000-20007000 already mapped failed -16
[ 1045.274587][ T7807] binder: BINDER_SET_CONTEXT_MGR already set
[ 1045.287232][ T7807] binder: 7806:7807 ioctl 40046207 0 returned -16
[ 1045.303239][ T7845] binder_alloc: 7806: binder_alloc_buf, no vma
[ 1045.309897][ T7845] binder: 7806:7845 transaction failed 29189/-3, size 117440512-12288 line 3147
19:20:13 executing program 4:
mkdir(&(0x7f0000000080)='./file0\x00', 0x90)
r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0)
unshare(0x40600)
pwrite64(r0, 0x0, 0x0, 0x0)

19:20:13 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000080), &(0x7f0000000100)=0x8)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x8150000}, 0x200000})

19:20:13 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x40030000000000, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:20:13 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000380))
getresgid(&(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)=<r1=>0x0)
setregid(r1, 0x0)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0)
r3 = socket$l2tp(0x18, 0x1, 0x1)
syz_genetlink_get_family_id$nbd(&(0x7f0000000880)='nbd\x00')
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000ac0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a80)={&(0x7f0000001dc0)=ANY=[@ANYBLOB="008265923c950f52856ba56acb98a91a3bf61dabfc8a7a4cb260ed822c45e60fff006a70592da7bc0d7b07b0131aabc37b0827607ff230d270f245fce6b7d14dfc0ad90d585fadb7cef6e74bfccc72b3504b6e119f", @ANYRES32=r2], 0x2}, 0x1, 0x0, 0x0, 0x40}, 0xfa010ee18ed9c8a0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r2, 0x0)
ioctl$BLKBSZSET(r2, 0x40041271, &(0x7f0000000240)=0x7)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0405405, &(0x7f00000001c0)={{0xffffffffffffffff}, 0x1003, 0x4, 0x80})
syz_genetlink_get_family_id$team(&(0x7f0000000340)='team\x00')
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={r2, 0x1, 0x1, 0x20, 0x0, 0xfffffffffffffd57}, 0x20)
getpeername(r2, &(0x7f00000008c0)=@xdp, &(0x7f0000000700)=0x80)
sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000000bc0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x1)
ioctl$TCSBRK(r2, 0x5409, 0x1e6)
utime(&(0x7f0000000000)='./file0\x00', 0x0)
clone(0x2, 0x0, 0xfffffffffffffffe, &(0x7f0000000300), 0xffffffffffffffff)
perf_event_open$cgroup(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x5324, 0xffffffff, 0x0, 0x0, 0x30000, 0x0, 0x9, 0x0, 0x2, 0x3ff, 0x0, 0xe8c, 0x0, 0x0, 0xfff, 0x7, 0x400, 0xff, 0x0, 0x7f, 0xffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff7fffffff, 0x0, 0x6, 0x9e, 0x0, 0x80000001, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x9}, 0x102, 0x1f, 0x26, 0x0, 0x81}, 0xffffffffffffffff, 0x7, r2, 0x0)
setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000040)=0x3, 0x4)
socketpair(0x20000000007, 0x80005, 0x7f, &(0x7f0000000640)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
preadv(r0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/243, 0xf3}], 0x1, 0x0)
close(r2)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[])
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000500)={<r5=>0x0, 0x8}, &(0x7f0000000580)=0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000005c0)={r5, 0xc0, &(0x7f0000000940)=[@in6={0xa, 0x4e20, 0x2, @ipv4={[], [], @multicast2}, 0x401}, @in6={0xa, 0x4e22, 0xffff, @ipv4={[], [], @local}, 0x3}, @in6={0xa, 0x4e24, 0x2, @loopback, 0x80}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8}, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e22, @rand_addr=0x8}, @in={0x2, 0x4e23, @multicast2}]}, &(0x7f0000000740)=0xc)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000180)={0x0, r2})

19:20:13 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0xfffffffffffffffd)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x10040, 0x0)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000000c0)=0xfffffffffffffedd, 0x4)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000080)={<r2=>0x0, 0x9}, &(0x7f0000000180)=0x8)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000001c0)={r2, 0xffffffff00000000, 0x7, 0x2, 0x7, 0x15}, &(0x7f0000000200)=0x14)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x2a4000, 0x0)
ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x3)
ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x6)
sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x74, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="000020e9e20000000000000000000000000000002c116271e377228b8f8815e5b69430141f3a827214f9cd0049fd62ed33ace880edf46d05b26152b2849251c05adaa40f458c009ada20758046cbf694258ce46f9ff0de68acb530e3d321d45ac7ad7a4988ec11e14575b06d", @ANYRES32=0x0, @ANYBLOB="0000000003000000000000000000000008000a0010000000fe567a401ff70a521a29814c11ab68ba462f7f7470b7480cfd41baf0cc540d765e1676ebda54793be5c2408f9ad61e4109e95e5e5055aada5af5e91b251dd379be609dcff755de4f6b933eefa8c7804d5611b474170a95b29c6b7e82e1624f3aff75c4f101093b43d3afd2bfeb0b78fb096f41b89fca73139019aa6fb50ace26e1de8b4e50efd661"], 0x30}}, 0x0)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000140)=0x9, 0x4)
ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000240)={0x7, 0xcccd, 0x0, 0x80000001, 0x2, 0xfffffffffffffffb})

19:20:13 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

19:20:13 executing program 4:
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40042406, &(0x7f0000000040)='&ppp1\x00')
r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x401, 0x0)
ioctl$ASHMEM_SET_SIZE(r1, 0x40047703, 0x7)

[ 1045.638818][ T7859] binder_alloc: 7858: binder_alloc_buf size 167784448 failed, no address space
19:20:13 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x100000000000000, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:20:13 executing program 5:
r0 = socket(0x40000000002, 0x3, 0x2)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x28, &(0x7f0000000100)}, 0x10)
r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x10040, 0x0)
ioctl$BLKDISCARD(r1, 0x1277, &(0x7f00000000c0)=0x8)
ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000000000)={0x0, 0x2})

[ 1045.680911][ T7859] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1045.707881][ T7859] binder: 7858:7859 transaction failed 29201/-28, size 167772160-12288 line 3147
[ 1045.769920][ T7875] binder_alloc: binder_alloc_mmap_handler: 7858 20004000-20007000 already mapped failed -16
[ 1045.808281][ T7859] binder: BINDER_SET_CONTEXT_MGR already set
19:20:13 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x200000000000000, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1045.816169][ T7875] binder_alloc: 7858: binder_alloc_buf, no vma
[ 1045.839953][ T7859] binder: 7858:7859 ioctl 40046207 0 returned -16
19:20:13 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

19:20:13 executing program 3:
r0 = socket$packet(0x11, 0x10000000000002, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x4000000028, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x8)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00')
r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2000, 0x100)
setsockopt$inet_dccp_int(r1, 0x21, 0xb, &(0x7f0000000100)=0xff, 0x4)
lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.capability\x00', &(0x7f00000001c0)=@v2={0x2000000, [{0x3ff, 0x9}, {0x10000, 0x43f655b8}]}, 0x14, 0x3)

19:20:13 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x400000000000000, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1045.970128][ T7889] binder_alloc: 7888: binder_alloc_buf size 302002176 failed, no address space
[ 1046.000962][ T7889] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1046.046705][ T7899] binder_alloc: binder_alloc_mmap_handler: 7888 20004000-20007000 already mapped failed -16
19:20:14 executing program 2:
r0 = syz_open_dev$video(&(0x7f0000000240)='/dev/video#\x00', 0x8, 0x0)
ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f00000000c0)={0x0, @reserved})
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400200, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000040))

19:20:14 executing program 5:
r0 = getpgrp(0x0)
r1 = gettid()
rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8)
rt_tgsigqueueinfo(r0, r1, 0xb, &(0x7f0000055000)={0x0, 0x0, 0x4})
rt_sigtimedwait(&(0x7f0000001ff8)={0x3fff7}, &(0x7f0000f0aff0), &(0x7f0000000000)={0x0, 0x989680}, 0x8)

19:20:14 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x80ffffff00000000, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1046.106849][ T7899] binder_alloc: 7888: binder_alloc_buf, no vma
[ 1046.137848][ T7904] binder: BINDER_SET_CONTEXT_MGR already set
19:20:14 executing program 5:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r0, &(0x7f0000000340), 0x10)
r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x20000, 0x0)
ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000040))
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00', <r2=>0x0})
ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0086426, &(0x7f0000000140)={0x5, &(0x7f0000000100)=[{}, {}, {}, {}, {<r3=>0x0}]})
ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000180)={r3, 0x2})
syncfs(r0)
bind$can_raw(r0, &(0x7f0000000280)={0x1d, r2}, 0x10)
syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0x3, 0x0)
epoll_wait(r1, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x10000)
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)
socket$xdp(0x2c, 0x3, 0x0)

19:20:14 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0xffffff7f00000000, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1046.190328][ T7904] binder: 7888:7904 ioctl 40046207 0 returned -16
[ 1046.370703][    C0] net_ratelimit: 16 callbacks suppressed
[ 1046.370711][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1046.382284][    C0] protocol 88fb is buggy, dev hsr_slave_1
19:20:14 executing program 4:
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet6(0xa, 0x6, 0x0)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000200)={0x400, 0x3, 0x1, 0x6, 0x4, [{0x9, 0x100000001, 0x32c, 0x0, 0x0, 0x80}, {0x1, 0x8, 0x7ff, 0x0, 0x0, 0x4}, {0x401, 0x6, 0x6, 0x0, 0x0, 0x108}, {0x5, 0x100000001, 0xfff, 0x0, 0x0, 0x1a05}]})
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, 0x0)
ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000380))
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000340)={0x0, 0x4, 0x4, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x1000000210007f9, 0x0, 0xfffffffffffffffe, &(0x7f00000001c0), 0xffffffffffffffff)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000480)={'broute\x00', 0x0, 0x4, 0xb8, [], 0x4, &(0x7f0000000040)=[{}, {}, {}, {}], &(0x7f00000003c0)=""/184}, &(0x7f0000000080)=0x50)
openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x12d281, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'lo\x00'}, 0x18)
ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0)
close(r0)
getsockopt$inet_buf(r0, 0x0, 0x2d, &(0x7f0000000100)=""/42, &(0x7f0000000140)=0x2a)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000180)={0x1, r2})
ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000500)={0x0, 0x3, 0x4a53})
ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000540)=<r4=>0x0)
syz_open_procfs$namespace(r4, &(0x7f0000000580)='ns/cgroup\x00')

19:20:14 executing program 5:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0xffffff7f00000000, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:20:14 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

19:20:14 executing program 2:
syz_open_dev$sg(0x0, 0x0, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380)='/dev/hwrng\x00', 0x0, 0x0)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7fffffff)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x8, 0x6, 0x17, 0x18, "e084c70b02274271f63c60523d04ba59fb498992ffe27cd5344858885f0953c989a3d4641e2213b6f00ef70700ef114d86470f11fb91324cdf59a1c3b176f9e7", "cecc7c41d30b9718b4ab34c2e075f71026fa9cc91137e2779e4add15ab620d96", [0x9f07, 0x80]})
r1 = syz_open_dev$sndctrl(0x0, 0x1, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, &(0x7f00000003c0))
r2 = syz_open_dev$evdev(&(0x7f0000000500)='/dev/input/event#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1)
syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x3, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x3a)
setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, {0xa, 0x0, 0x0, @remote}}, 0xb)
ioctl$KVM_ASSIGN_PCI_DEVICE(r0, 0x8040ae69, &(0x7f0000000300)={0x80000000, 0x0, 0x9, 0x5, 0xa302})
setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000002c0))
r4 = epoll_create(0xdaf)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000100))
r5 = dup(r1)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x3, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x100082)
r7 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
pwritev(r7, &(0x7f0000000000)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
r8 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)='!\x00', 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f0000000580)='\x9e\x18g(x\x0e\v\xd8\xc0\x1b0{\x1b\xbe\xdb2\xb4m\xa6\xbaT\xc7\x17]\xbe\xd2ZK\xf88P\tF\x89\xd6\xc5,c\xf2[NnC\xea5\xa0\xe7', &(0x7f00000004c0)=@secondary='builtin_and_secondary_trusted\x00')
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0xe})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0)={@empty, 0x41})
ioctl$LOOP_CHANGE_FD(r7, 0x4c00, r1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendfile(r6, r7, 0x0, 0x20000102000007)

19:20:14 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000100), 0x1c)
ioctl$int_in(r0, 0x5421, &(0x7f0000000380)=0x400000000801)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180), 0x0)
r1 = accept4(r0, 0x0, &(0x7f0000000040), 0x80000)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="18010000", @ANYRES16=r2, @ANYBLOB="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"], 0x118}, 0x1, 0x0, 0x0, 0x4800}, 0x40)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00')
sendfile(r0, r3, &(0x7f0000000000)=0x100000, 0x10000)

19:20:14 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0xffffffff00000000, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1046.505411][ T7935] binder_alloc: 7934: binder_alloc_buf size 536883200 failed, no address space
19:20:14 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x2, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1046.575185][ T7935] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
19:20:14 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='clear_refs\x00')
pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)='5', 0x1}], 0x1, 0x40000)
ioctl$DRM_IOCTL_DMA(r0, 0xc0286429, 0xfffffffffffffffe)

[ 1046.637849][ T7948] binder_alloc: binder_alloc_mmap_handler: 7934 20004000-20007000 already mapped failed -16
[ 1046.676561][ T7935] binder: BINDER_SET_CONTEXT_MGR already set
19:20:14 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x4, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:20:14 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0)
r1 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
r2 = dup2(r0, r0)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000040)={<r3=>0x0, @in6={{0xa, 0x4e23, 0x2, @ipv4={[], [], @multicast2}, 0x80000000}}}, &(0x7f0000000100)=0x84)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000200)={r3, 0x1ff}, 0x8)
ioctl$VT_WAITACTIVE(r2, 0x5607)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0x402c5342, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'})
readlink(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=""/34, 0x22)

19:20:14 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x0, 0x20002)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000001440)={0x53, 0x0, 0x6, 0x2, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="7ae475eab0f4", 0x0, 0x4, 0x4, 0xffffffffffffffff, &(0x7f0000000280)})
r1 = openat$sequencer(0xffffffffffffff9c, 0xfffffffffffffffe, 0x100, 0x0)
setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000000)={0x3f, @broadcast, 0x4e22, 0x4, 'ovf\x00', 0x18, 0x2, 0x39}, 0x2c)

[ 1046.695843][ T7935] binder: 7934:7935 ioctl 40046207 0 returned -16
19:20:14 executing program 3:
recvmsg(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8e67, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup(0xffffffffffffff9c, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x400)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={0x0, r1}, 0x14)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000380))
perf_event_open(&(0x7f0000000d80)={0xdf3b1f7d4f7d61f3, 0x70, 0x9, 0x0, 0x0, 0xfff, 0x0, 0x1, 0x1, 0x3, 0xe00000, 0x0, 0x6, 0x0, 0x685, 0xcf1, 0x81, 0xfffffffffffffff8, 0x401, 0x0, 0x1, 0xd3, 0x0, 0xbc4, 0x7, 0x6, 0x0, 0x5, 0xff, 0x691, 0x0, 0x3, 0x8, 0x4, 0x0, 0x7, 0x0, 0x3e0000000000000, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x400, 0x1}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bpq0\x00', 0x4005})
write$cgroup_type(r1, &(0x7f0000000280)='threaded\x00', 0x9)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0)
r3 = socket$kcm(0x29, 0x5, 0x0)
ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000080)=0x82)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000240)=0x1, 0x4)
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8984413869d6e3ae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r1, 0x0)
write$cgroup_subtree(r2, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd'}]}, 0xfdef)

[ 1046.756990][ T7958] binder_alloc: 7934: binder_alloc_buf, no vma
19:20:14 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x34000, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:20:14 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

19:20:14 executing program 2:
r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10000, 0x0)
r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x7fff, 0x40200)
ioctl$PPPIOCDISCONN(r1, 0x7439)
getsockname$netlink(r1, &(0x7f00000002c0), &(0x7f0000000300)=0xc)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000080)={<r2=>0x0, 0x25, 0x30}, &(0x7f0000000140)=0xc)
setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000180)='tls\x00', 0x4)
ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000280)={0x9, 0x1, 0x7fffffff, 0xe3, 0x5, 0x101, 0x2, 0x1, 0x0, 0x8})
getresuid(&(0x7f0000000340), &(0x7f0000000380)=<r3=>0x0, &(0x7f00000003c0))
ioprio_get$uid(0x3, r3)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000600)=ANY=[@ANYRES32=r2, @ANYBLOB="0300cf00241dcff80dc417cfb12111411be4c3389cefdb0a447be104eac486af47b56522d2d5e86b68e3268fd14b7d99ec2fd828b9baa522eab084dd48436e7ba34a010c4b000000005bcd21a1e27c688087fb91da89980ad148772080de0c6b4f6ed3d53334c6a3454139a8e3ce677e3aa0fc6c00f0323d2e6f5e5ffca46726ef3b877818d590233b89d05b8056c421a3137b12b67170a1c9b5487ebe3e0902bebfea3df420240430573b5909a4c1bdffa9f37a16b85486122e0534d63d7d2ce0caa889a6f4b1489882bb20f1f2f1df98a8d054f76cc128efdc433d69ceee183716856f08362a9f2d909a485925f5c52201fe546eade430690000000000000000000000e3569f2cea93f40ddcab5cdc6808d305b727152d11d821046b78949a42419274a8c44c7d41ff8a14c5d8f5fad223a215671d7f90c40c3b5b42a7119ca5833b373e366386f24e9f1e64f74328fa949a428ded3b82886ce44fa14ff2bc08f9397d00fe5f7500f34967789998a83c697e4c23c4a33964a8f7a10080000000000000d6246171a248cc6f81085059c53fe034d75f694739f20be72f234986d8e74bb06eab7f0c91c2e5a12d9e7a357297a8b71e528cce1fb771"], 0xd7)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f90a, 0x800, [], @value=0x8121000}})

19:20:14 executing program 4:
r0 = syz_open_dev$sndctrl(&(0x7f0000000340)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 'syz0\x00', 0x0})
r1 = socket$rds(0x15, 0x5, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000001040)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)=""/211, 0xd3}], 0x1, &(0x7f0000000380)=""/156, 0x9c}, 0x5}, {{&(0x7f0000000440)=@caif, 0x80, &(0x7f0000000300)=[{&(0x7f00000004c0)=""/100, 0x64}, {&(0x7f0000000540)=""/119, 0x77}, {&(0x7f00000005c0)=""/186, 0xba}, {&(0x7f0000000680)=""/226, 0xe2}], 0x4, &(0x7f0000000780)=""/51, 0x33}, 0x7}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f00000007c0)=""/171, 0xab}, {&(0x7f0000000880)=""/225, 0xe1}, {&(0x7f0000000980)=""/141, 0x8d}, {&(0x7f0000000a40)=""/116, 0x74}, {&(0x7f0000000ac0)=""/74, 0x4a}, {&(0x7f0000000b40)=""/196, 0xc4}], 0x6, &(0x7f0000000c80)=""/157, 0x9d}, 0x400}, {{&(0x7f0000000d40)=@ll={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000dc0)=""/101, 0x65}, {&(0x7f0000000e40)=""/108, 0x6c}, {&(0x7f0000000ec0)=""/163, 0xa3}, {&(0x7f0000000f80)=""/120, 0x78}], 0x4}, 0x6}], 0x4, 0x20, &(0x7f00000010c0)={0x0, 0x989680})
socketpair$tipc(0x1e, 0x7, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1d, &(0x7f0000001a80)={@initdev, <r4=>0x0}, &(0x7f0000001ac0)=0x14)
sendmmsg(r1, &(0x7f00000039c0)=[{{&(0x7f0000001100)=@ll={0x11, 0x17, r2, 0x1, 0xf2, 0x6, @random="7ae94dddf93b"}, 0x80, &(0x7f0000001300)=[{&(0x7f0000001180)="4a4763d40ef945f63ffd77a3bd5ebe29f3eecdc492a7e9b6533058529cca3cc1ae3a3ff4263a57ac1c0b7abd2a03166156a2bcf055d9bee77ee996f2fd1e14f8dd71f2b6de18058b8b55631d3de08ebcfe", 0x51}, {&(0x7f0000001200)="96325a5e09bda62c3dd19d5bc88df0fc999ccb836f1e7d9f3cec6d6698a184a14e4763799320a675b1cc3ef71fbd2825813405fc4e5b2d676a2fa0d2793c83528776f02444b7bc2eecc0615cc00ed734ca016ae1097d6c695567edc3f323810f3b312b431a8394bb6c88e0aae9002bc03e835b50032a39f10d07c9abd3a1ce86629d644a6e0e2a2369c447532c18ce913426d370bb7521bed0e71310bbba37f2ace51d068b9d8189495b66fcb5e6c248c1354af11245d61d4973417a7ee2e11783247598b728d18bccd43d91f43f632e346805", 0xd3}], 0x2, &(0x7f0000001340)=[{0xdc, 0x109, 0x66, "f67a08e379ccc45ef42182226abe8e893be2083bd54a936a7dd3ac42e9271434eff94adc83d4a3579215e22fb1080dbb78afba08f801b4ce0dd0866b138308dd9ab72e7660a7682558c987ba2e203c3c5045d159b664215186f256d2822e6d9be20610f49ded25e20ab631ea40deafea3533a70e2dd53ac5374a4c18967d5ed1e96b5c88a832bdaad797263cc39e7f3ef302c172cc57e19fa1c686b9acaea68e87a5b7ff368541a1708791ea754a6799351bb1c80bb61b09928e47743e697856ba8bbb7632664578e3f7f5d796f36b8b"}, {0x54, 0x11f, 0xffffffffffffffff, "4fa939a9c0445c814ae2946c20173347c77c2bee56dfa59b9a2bebb7bc6d5909839b9c38a9dce9bf161b3647abc1502ef28fff2379e56a77e7e00712913b190f3977d719db44"}], 0x130}, 0x3}, {{&(0x7f00000014c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x3, 0x1, 0x2, 0x4, {0xa, 0x4e23, 0x200, @rand_addr="c3bbf0a86240667fd0c7c4390d86a16d", 0x7}}}, 0x80, &(0x7f0000001700)=[{&(0x7f0000001540)="01f31375e145943c65b559130b629312d9089316fa9d6ddb7b05476ea9173d30c7c065ecc6a16c95e1194209aedd98e544e1d130db9484f3122c9df070424200ce6dc7d1de8a5a6069853aa3db6bee4e554b723479c19b9539e29cbcad66a7ea1958a52f9cb785fc7c6d67f28f709f5b4d0af985d20589adeb7e4d8e51ab3f40c1e6baaa64e0755d6409c9045f733fe3d53beb3daa6f0df31ffda88ffd2e460365f842dbd8ac05af1767f4c1424703c778fd62d0", 0xb4}, {&(0x7f0000001600)="2b211abf6eeeead04cffd6bd405a83129d6119dff3673fa7b048342ba902baba464939bd59058fa5e12525c0d8a0bc3c2b4e07b67cc78dbfdc8ae805a8b1f8037298058313df1313c2b9eed96dfc7fec4a153afb11bd1b53f6650900cfee91009c3566692820dce9ff265d1070b1b2cce43c226e6dc6739ef85ee7fda13d0c73c64c453a938fa1346b68724f6d13e1a47891ff527ffa27732d40ad1db2071132698d3fbfffda26b707e5d3aa441de51e243d6c9f4693448ce3aeb7d7e4229f78f8c9d44f069355f7", 0xc8}], 0x2, &(0x7f0000001740)=[{0xcc, 0x0, 0x0, "efffd83d29b60b4e53e080923d681a25d397eebab3213eb441f8352b832685432173f5231e995963ce1eb9a6dd5a9c6d83b6b494e201be4c0c0918820d88a264a2035b0ae87f479d3a6c49daf143fdb30bde1efc140a52b7c7463a6496300950d8904c3b6732531850d7c4362295c5ee9683d91ffaf69a227c7fcad34714be802c6aae3107677724e8e7e2b8339e3ccdfd26792424f3dba4b5741e93ebfd8005e833ef5baaaa2e0853a5f98606d559f5daaa8093c86e7d5e139d74cf2fb7f5"}, {0xdc, 0x1ff, 0x7fffffff, "4b2958f0c1db74205423fff89b4d971ee752cb626e38910f78eaa4e18bc1992a85da495ed07554a414a49e868e3459120bddfde42c3a3b3ad92c8c1c916cceb58061303141d90c977ddc2ddd3ae0fcc2a2be013e863d0fff94722e0294ca6466c342f0881adf3c763f880085a4b5234bc28ffcf3550fe2ecfa431f1192c56e8bd531b64e429bcbcf39f2011be1a63ffb0d01137e1e01d150f5906136532e8394d9994e06d750a05f752ff0fddc734d898a8630de87a197f8586a913e48f6f462d42d6e173bfa31dd25b87e6cfa7f1a4d"}, {0xb4, 0x29, 0xc00000000, "6f2f65dd25bada0a78d9d180d06a06a90fe224d40d8bd6bc68695c1eb173250f0ca0e768353a09878e0dd12aeb0a0f7c55facb8944cc5de67344b7417e21231290f83883fd870f72a74b6d5fee20e99b56ae6ffdbc98f3a1bdfdc8d33ca2b5e1aafa55819f4d9e6d9e1998a3ae8a463f6dc009fdce08005c57a46f19bab430e33e10a36e3b82a19827f58d22e3a9d9901420b807d1060ad53414fe8ef44e23aa9ffe9c7ef79ac8"}, {0x60, 0x0, 0x5, "97ce1ba8e04bc5308f8b6c52d61e8dd281ad1f0e5a21e0990139d222100537889661d75509d7fa0c432af5e9f9c3434daaa3bacee9f60d3ce47369a256456574a9c1567e97c77630c921247a797a5f24c7"}, {0x1c, 0x13f, 0x39, "e5cbe1d3c595e676926b57b34003d4e8"}], 0x2d8}, 0xfffffffffffffffc}, {{0x0, 0x0, &(0x7f0000001a40)}, 0x5d0fcdac000000}, {{&(0x7f0000001b00)=@xdp={0x2c, 0x0, r4, 0x11}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001b80)="3503036f436203f6178df6738e95ddb44557b1739d2150c637519ab652567a290c7747c8987c0f15c8452e6055c0e2cbda48f760f01e33198f6eddb3287f8ca7c1568d4d030660869d9bcd4eba1bd5bae28dac5068a5a969a3a298eca939d358af89d597ad4f8c26e9f00a299fe2049dd129427bf672689804d0b34b6b0c62aae2b118221f1f3e49d1b783333a1c61c63d184bc7822723676b2881c3c9f15fc7069178f30192f456569d9a6477076f30e154c87dc47365ecf3b46b7c7b066d86e7d01914082c540b332950721b1f1057596e7fc49942a754a07804d9b7bae1928e44202c", 0xe4}, {&(0x7f0000001c80)="1e5cab23652fedd0d44ad154247eae30f1f25e5a8d5ef1df287be8f44607518a06c1c9a1ca46c7950009efdd0ee81c3484c782939f8271", 0x37}], 0x2, &(0x7f0000001d00)=[{0xb4, 0x13b, 0xb77, "4d3a00d255aab5508c6b0fa6a5ded435d67498b091f04321b70fa5496500f54f74bf75bd8469a5698bd3767b804d0d666e7da545587a97a38e55f7fc284236c6e730d473374a9760eb016bd9299ed39be18252b80097897bafd1e56553b14a15ac602c7b9014475bd46997442220fc9725b25cba4b2c62c78edebea05a9b45ec410b34f320ebfc452218102c19f90c50dfb7c311423dfe28257ce008b1b21541fe771b3861"}, {0x68, 0x19d, 0x100, "75b07c85525d11754ad975a110970ff0434f6b114785eea0d2ab6a6dbe7e54a4dda23f7c7102994034bec5d2af6cac198d2be7808248659b5d3759af3d710dc876754abef38703626bd1284b9c1c84a2db390a14aff30417ba86dd"}, {0x7c, 0x117, 0x6731, "9d8190bb8729206705ec12a8b8a863f8468b4c6c3013fe821dd02a27ee1e6f5e2ca6ce3ffbabd011cc9bcc3fc4c0bf46dbb07502d38c0a792bc649633a1abc06b471f0306c28161623712773b257b8aa9c4afcf9c94b301d15b7f643948bc6a500c855f4a6f56536203d689438"}], 0x198}, 0x7}, {{&(0x7f0000001ec0)=@generic={0x4, "4152a80f6c75e9e487765cae4960d2082ef92bd0d2538ad02e9f6c9bf56a43347eabf8ecb22c2ca3b9cf268542e3227b41f57854f005cba0760f06889e7e2125a3348f0cf8548cc65fd5e93985c22bc4735890792fee4b68e81645cb8bbc70e79a66451b8b0ceffdb05d89f52bef5b04b96bebf4673b81c87c4bb0cb0a55"}, 0x80, &(0x7f0000003280)=[{&(0x7f0000001f40)="2da23408ace5379d233ee9ebfade2669777bc9735f4a3285cdf1b6670fdbf0b6a0c5977c0d0ee00cb384b833e0a15895ca25eecda35145e9be", 0x39}, {&(0x7f0000001f80)="2be24c0e1c650c81dc83caad89dc97e53b6cef410e4f937b4d228120b04ace25c8ba8d73a8a72c6a110781626eb4bbf08b327791a2f13423a60ead6e3e99f48b183a90d66ecdd302e79e3289b520b9024ece6af07bab4df73c9c880de629f931b86d81aa75e57fb4b64bbfb3b4f6cad3db78a1ccf483d8de885e05fb894dd1c2e11c9b91bd403111ff9496fa03cdc1963152bd2d9c5dd80b50d8a212e762ab3f0bcd240ba6ba2e6567a049ee4e488122d11803f24de0c39d3d616cae0c50a1a0d8890cc8fd69b214f6698de3bfbc4da5e23752e527ce74df7319a4b6f2c81b8c2a76502902b8b0873932fa9e31e77ee14f8f5d39", 0xf4}, {&(0x7f0000002080)="cfd5bd4b511a7cfb2d7e9e94df992c91bff5efed616e607a47ff3f914012331f935e", 0x22}, {&(0x7f00000020c0)="b74c5b8d165ddd19807ced140c08a9ab41174fba387073", 0x17}, {&(0x7f0000002100)="eeb8b77e389461f0d28c1bb3219501001ddbf2e60a593e50658f5857fe5096b5a98477e972bf932e4c7f4bb10884ad825fbfe76c09b024fc4c6a592b20d9632082c9b1af150ae3d10c81ca1f0d2c929a84a1337d04fa60bf6d0e2a7654a37d90535c0d3eb156c703b0b6d883facd9a1146bc93c634505c4835b36d05f8f4ddfa45fe94060de4e3b98cb5a07c10efa57a0c67570c88f2f1f0731de2cd0260b802", 0xa0}, {&(0x7f00000021c0)="067015823edd734817c75fde7b5b3b3f4803de3bb5f3e0ff8307ca58f003186f4f77c529ee57657cb6d479c5292b1f7f3347407d0ad7ffe7e98a8947d4ae593c419fb96bc4d7a0525f79bfe2463ccc7995896a55a138556b3cc754954aef4c5f3e8e779df87f5e96292714fa6e1dfcc6978aec191a24b22d7349ebbbefcdc12c37d0c8f74c459172a566", 0x8a}, {&(0x7f0000002280)="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", 0x1000}], 0x7, &(0x7f00000032c0)=[{0x88, 0x117, 0x695e, "79bf6905a1e1bd974f336ac928b77703eaeedc39af896aca8b68e65db1fdf5cc851ff41970148eab2845707f4de75d37c18c1330d11279fecd10021f3c09a2171e36706ee4afb39b18328fbaeb26954f0cc3656a74b782dd5c2d291ad394c9437af21a699082e8189a1de035249b3103c066ccab476429b23412"}, {0xb8, 0x11, 0x6, "94ee7d023aa7c790b68f68043bd85ba18ea48e5b41c4fbdd4e27f659c3dda48be9a83cbe3a1d93ee817c9a43de4dae0a6000db8a6ae488b371e7f2a2139e0c559520bf6f88698514e24d2dfe551012525bb7193b445f0a38e40774a1c57cc688e1b32e3cc49d4a16bb7b0e77bc399ad4a7de1520d0f9d27b966abe79d3a1f14d51898cb82b9b7589e2b946b2c48c6bd3b649afe6500acd605700dd89551058b9feff5f561125357278310f"}], 0x140}, 0xfc64}, {{&(0x7f0000003400)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x80, &(0x7f0000003980)=[{&(0x7f0000003480)="9c5e28fb0c8f23c9b65da5f16c84f47f739e67a509affc090fe998a246cc66cc55d9c909952df85d3bbdf98b488ba06177217555f749f0908f8c7d530c0053268deec86b3d9699f17c8f59defa5fca132847f92a3e235870f2f2ffa4c5205a9b0f404ab4537d911521bd87172cb5e7e6d36574adeca32be701cf3ad35085af540a9f688d0bb29149b9", 0x89}, {&(0x7f0000003540)="d23dec65bf93c25a0818b18631dfe0a1da0b4fdc580a18be786fad089ae8942bbfc9c9facb2c1ebd1f682398e650e5ff4f68ce2e36b6067331c72e460d0c44a17e464e5bfb664bce22bd4ecab4509c62fff1b461453e8d3866a48cf413a29ac4", 0x60}, {&(0x7f00000035c0)="28fca471e9e83c6e933f9e555da580e1ac839b8f7f2346ce982a1b88c6", 0x1d}, {&(0x7f0000003600)="054734ae5b66d6b7db40ba4894cea6347eea3e2ad08c6661fafedc6fb8975f3d7a5b01020f79147adfba737f869e785db3db76ee86571685f932a7abb3c37ae403d92907fbfbf881c086cb9c1d4465d4819606a3275459f7ec39366df1be2fb1dc8428db679588a22d47257eeee4d7fc4b0f859987cc920e3fed794f777fe5742d5645462f1dc141f94df514e10161e27ac10057be375640", 0x98}, {&(0x7f00000036c0)="bd842cc3b48c9a9328abacf9eb474b7835433620caa5843510a770914f153af9eef155e4898e9dbe208b8813145b45621c57f4d9fe679640c6550707c5c26b79cd62eae1a4e29e0adbd84e21209b6ccfdb35994b1f3248cc9d44657fa72d0d134047abf60a6e65ae36050806ff154befa7f39a8a9a48eb973e7cbcbed7956496caa04ecda593d5fc645f430597710a900ed708f4f6008cf62d309215a296932e570b12c926f99f2e2269e45e1226083a11f6aae70481620225148a1ec1371d2cbd09a139e4471ffeacadd7516206d6d2d8b3be25fb06b64e3170958de5ddeb41b0c67a8538746d85db90d0bd229ecc6bcd5c77d3", 0xf4}, {&(0x7f00000037c0)="1fb083c5b7b3bd89a7d40e41cb750bc2bb2b96e190c6339adf9982a5", 0x1c}, {&(0x7f0000003800)="cce4477b293e0e0d05d39061f81e069d0af8e2fd4b9c7851e575cd3f770538932d064b2b3d195cce97cbc3ef94e03fbefb599ace6eb98ef6a24c1ba86e3abdfcedb7c85447fc2aba8300fb9bff6245ea5f6789bdac88188d7df2128faf792540246b2267cc364d0c219090263ae9e596af3666603a0a898be500f8ca91022eebd16334ca04d0f9ab13a454b117251df2a5fde0166d01a8e235e98cfc8bf475a9942ead46afb3f73d429001e54743ec4cb5115e8ceb41f902f265c08bafd6b7cf8649ce38", 0xc4}, {&(0x7f0000003900)="61e3468a6f13fb9f5708b85eaa840f6da0516ac74e3fd83813ea5b0c33a755b75545771e91d75cd7e52b231aab7c4778398925c41873154d0b1166e27fefd87d006907d158b25663e3eca7", 0x4b}], 0x8}, 0x3}], 0x6, 0x4)

19:20:14 executing program 3:
r0 = socket$inet(0x2, 0x80005, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)='U', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x40, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={<r2=>0xffffffffffffffff}, 0x2, 0x1007}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f00000001c0)={0x1, 0x10, 0xfa00, {&(0x7f00000000c0), r2}}, 0x18)

[ 1047.010697][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1047.016788][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1047.039772][ T7982] binder_alloc: 7981: binder_alloc_buf size 1073754112 failed, no address space
19:20:15 executing program 3:
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
read$alg(0xffffffffffffffff, &(0x7f0000000400)=""/191, 0xbf)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmget$private(0x0, 0x3000, 0x404, &(0x7f0000ffc000/0x3000)=nil)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={<r0=>0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f00000000c0)='&$self\x00', 0xffffffffffffffff}, 0x30)
timer_create(0x2, &(0x7f0000000140)={0x0, 0x19, 0x1, @tid=r0}, &(0x7f0000000180))
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000340))
socket$alg(0x26, 0x5, 0x0)
setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, &(0x7f0000000080), 0x4)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x180000000)
shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x10000, 0x0)
ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f0000000300))
mkdirat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x2a)

[ 1047.101170][ T7982] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1047.114300][ T7991] snd_dummy snd_dummy.0: control 0:0:0:syz1:0 is already present
19:20:15 executing program 2:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x1, 0x2000)
r2 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x8001, 0x200000)
ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f0000000240))
r3 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00')
sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, r3, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
r4 = fcntl$dupfd(r0, 0x0, r0)
ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000300)=""/246)
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f00000001c0)=0x7)
ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000280)={0x3, 0x4})

19:20:15 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x400300, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1047.180881][ T7995] binder_alloc: binder_alloc_mmap_handler: 7981 20004000-20007000 already mapped failed -16
[ 1047.201144][ T7982] binder: BINDER_SET_CONTEXT_MGR already set
[ 1047.207856][ T7995] binder_alloc: 7981: binder_alloc_buf, no vma
19:20:15 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x1000000, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1047.243182][ T7982] binder: 7981:7982 ioctl 40046207 0 returned -16
[ 1047.272241][T29950] binder_release_work: 8 callbacks suppressed
[ 1047.272248][T29950] binder: undelivered TRANSACTION_ERROR: 29201
19:20:15 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

[ 1047.296239][T29950] binder: undelivered TRANSACTION_ERROR: 29189
[ 1047.425482][ T8015] binder_alloc: 8014: binder_alloc_buf size 1207971840 failed, no address space
[ 1047.438632][ T8015] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1047.479752][ T8017] binder_alloc: binder_alloc_mmap_handler: 8014 20004000-20007000 already mapped failed -16
[ 1047.490343][ T8015] binder: BINDER_SET_CONTEXT_MGR already set
[ 1047.496626][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1047.496679][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1047.500721][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1047.502868][ T8015] binder: 8014:8015 ioctl 40046207 0 returned -16
[ 1047.508670][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1047.521704][ T8017] binder_alloc: 8014: binder_alloc_buf, no vma
[ 1047.534225][ T8017] binder_transaction: 8 callbacks suppressed
[ 1047.534241][ T8017] binder: 8014:8017 transaction failed 29189/-3, size 1207959552-12288 line 3147
[ 1047.541922][   T17] binder: undelivered TRANSACTION_ERROR: 29201
[ 1047.565508][   T17] binder: undelivered TRANSACTION_ERROR: 29189
[ 1047.571345][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1047.578082][    C0] protocol 88fb is buggy, dev hsr_slave_1
19:20:15 executing program 5:
r0 = socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'rose0\x00', {0x2, 0x4e23, @remote}})
r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x6c2, 0x8080)
ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000080)={0x7fffffff, 0x7f, 0x1, 0x200})
ioctl$BLKFRASET(r1, 0x1264, &(0x7f00000000c0)=0xe68f)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in=@remote}}, {{@in=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8)
ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x6672)
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x408000, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@empty, @in6=@mcast1}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000380)=0xe8)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nullb0\x00', 0x48000, 0x0)
r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer\x00', 0x100, 0x0)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000440)={0x0, 0xffffffffffffff9c})
ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000000480)=0x100)
ioctl$BLKBSZSET(r1, 0x40041271, &(0x7f00000004c0)=0x480)
accept4$unix(r0, 0x0, &(0x7f0000000500), 0x80000)
tee(r3, r2, 0x5, 0xa)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_tcp_buf(r1, 0x6, 0xe, &(0x7f0000000540)="386673b2d8c228a6ce9a2efff631feecb3d8993faa7fc6a9e05b0d10de3facb64526f5c37496059bb67f29938cedbb97529863d6b986caabc5fbb993f942376ecab6b8f8fe420559fcfa5fe271852db9b89c6cf74564915e20a8e4b1b9ac258e3ac439edc007a5e01d98172a0d7ae131ca0751edb67fad5f21e5f918ebefcab6c815d8e5e104a17bcceecfac624dbafcf1b79c5e5a0387bec4d9d7cd1fbce26c4c19157637037638594b604eedd6da746f4f82f06ba57cfce05bbf872383bb63a18c2edd6291ee45edd25ee05f308645f75a5d57f5d13e0819751d606289", 0xde)
ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000640))
ioctl$VIDIOC_SUBDEV_G_FMT(r5, 0xc0585604, &(0x7f0000000680)={0x1, 0x0, {0x81, 0x0, 0x2007, 0x6, 0xd, 0x7, 0x0, 0x7}})
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000700)="6f45a777d1c8af9c4a99bf18cf15f93af18d8acd750e44cdb8405c5dad0464f4da811c550ea63184faef757188640ab20e5c80")
ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5387, &(0x7f0000000740))
getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000780), &(0x7f00000007c0)=0x4)
sync_file_range(r0, 0x4, 0xffffffff, 0x4)
ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000800)={0x8})
ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000840)={0xfffffffffffffff8})
ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0086426, &(0x7f00000008c0)={0x4, &(0x7f0000000880)=[{}, {<r6=>0x0}, {}, {}]})
ioctl$DRM_IOCTL_DMA(r1, 0xc0286429, &(0x7f0000000a00)={r6, 0x2, &(0x7f0000000900)=[0x6, 0x7], &(0x7f0000000940)=[0x7, 0x5, 0xfffffffffffff3ea, 0xb0, 0xa2f, 0x8], 0x20, 0x5, 0x7, &(0x7f0000000980)=[0x7, 0xff, 0x4, 0x80, 0x1], &(0x7f00000009c0)=[0x0]})
r7 = add_key(&(0x7f0000000ac0)='pkcs7_test\x00', &(0x7f0000000b00)={'syz', 0x1}, &(0x7f0000000b40)="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", 0xfa, 0x0)
add_key$keyring(&(0x7f0000000a40)='keyring\x00', &(0x7f0000000a80)={'syz', 0x3}, 0x0, 0x0, r7)

19:20:15 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x120, 0x36b)
setsockopt$sock_int(r0, 0x1, 0x3a, &(0x7f0000000040)=0x5, 0x4)
write(r0, &(0x7f00000001c0), 0x0)
recvmmsg(r0, &(0x7f0000000d80)=[{{&(0x7f0000000140)=@l2, 0x80, &(0x7f0000000580), 0x0, &(0x7f00000005c0)=""/212, 0xd4}}], 0x1, 0x2000, &(0x7f0000000e40))

19:20:15 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x2000000, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:20:15 executing program 3:
r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0xc0000, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='mem\x00\x01y7SwaS.\x06\x95r\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd3\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"v\x19n{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t', 0x0, 0x0)
lseek(0xffffffffffffffff, 0x20400000, 0x0)
mremap(&(0x7f000084d000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'nlmon0\x00', 0x1400})
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000040)=""/77, 0x13000, 0x1800, 0x100000001}, 0x18)
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_TSC_KHZ(0xffffffffffffffff, 0xaea2, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
bind$can_raw(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x65, 0x10000000002, &(0x7f0000000000)="c8", 0x1)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000001c0)={0x4, 0x7, 0x1ff})
fadvise64(r2, 0x0, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
unshare(0x40000000)

19:20:15 executing program 4:
setrlimit(0xf, &(0x7f00000000c0)={0x4, 0x9})
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x3})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="2e0000002b00812de45ae087185082cf0124b0eba06ec4000500000000000019fffffffc03000000000000015b2f", 0x2e}], 0x1}, 0x0)
r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x2, 0x402)
setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f00000001c0)={0xaf, @multicast2, 0x4e24, 0x0, 'lc\x00', 0xe, 0x5, 0x5b}, 0x2c)

19:20:15 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

19:20:15 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x4000000, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1047.829664][ T8031] binder_alloc: 8029: binder_alloc_buf size 1275080704 failed, no address space
19:20:15 executing program 2:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x10, 0x0, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff)
r1 = inotify_init1(0x800)
fcntl$setown(r1, 0x8, 0xffffffffffffffff)
fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, <r2=>0x0})
ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, 0x0)
process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x8, 0x0)
ioctl$KVM_SET_NESTED_STATE(r0, 0x4138ae84, 0x0)

[ 1047.911176][ T8031] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1047.937090][ T8031] binder: 8029:8031 transaction failed 29201/-28, size 1275068416-12288 line 3147
19:20:15 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x80ffffff, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1047.964533][ T8042] ptrace attach of "/root/syz-executor.2"[7820] was attempted by "/root/syz-executor.2"[8042]
[ 1047.986645][ T8044] binder_alloc: binder_alloc_mmap_handler: 8029 20004000-20007000 already mapped failed -16
[ 1048.000532][ T8045] ptrace attach of "/root/syz-executor.2"[7820] was attempted by "/root/syz-executor.2"[8045]
19:20:15 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2000, 0x0)
ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1)
syz_emit_ethernet(0xffffffffffffff67, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300003, 0xffffff88, 0x0, @ipv4={[0x6], [], @multicast2}, @mcast2={0xff, 0x2, [0x700000000000000]}, {[], @icmpv6=@time_exceed={0xffffff83, 0x0, 0x0, 0x0, [0x0, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0)

19:20:15 executing program 5:
getpeername(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, <r0=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=<r1=>0x0)
fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x2, r1})
bind$rxrpc(r0, &(0x7f0000000540)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @loopback}}, 0x24)
r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
request_key(&(0x7f0000000140)='syzkaller\x00', 0x0, &(0x7f0000000400)='mime_type\x81]keyring\x00', 0xfffffffffffffffb)
get_mempolicy(&(0x7f0000000280), &(0x7f00000002c0), 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x0)
socket(0x0, 0x0, 0x1)
ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0)
r3 = socket(0x11, 0x802, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'team-\x00\x10\x02L\x00\x00\xb2\x00`\x00'})
syz_genetlink_get_family_id$tipc(0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000240)={'team0\x00\xfd\xff\xff\xff\xc0\x00\x03\x00\x02\xff', 0x4bfd})

[ 1048.030236][ T8031] binder: BINDER_SET_CONTEXT_MGR already set
[ 1048.077004][ T8031] binder: 8029:8031 ioctl 40046207 0 returned -16
19:20:16 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0xffffff7f, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1048.157564][ T8025] IPVS: ftp: loaded support on port[0] = 21
[ 1048.164343][ T8052] binder_alloc: 8029: binder_alloc_buf, no vma
[ 1048.166213][T29950] binder: undelivered TRANSACTION_ERROR: 29201
[ 1048.183116][ T8052] binder: 8029:8052 transaction failed 29189/-3, size 1275068416-12288 line 3147
19:20:16 executing program 2:
io_setup(0x9, &(0x7f0000000080)=<r0=>0x0)
r1 = socket(0x2, 0x803, 0x8)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x0, 0x0)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10)
sendfile(r1, r2, 0x0, 0x80000001)
io_submit(r0, 0x1ea, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x160}])

[ 1048.210974][T29950] binder: undelivered TRANSACTION_ERROR: 29189
19:20:16 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

19:20:16 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0xffffff80, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1048.397480][ T8070] binder_alloc: 8069: binder_alloc_buf size 1610625024 failed, no address space
[ 1048.466486][ T8070] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1048.499635][ T8070] binder: 8069:8070 transaction failed 29201/-28, size 1610612736-12288 line 3147
[ 1048.541082][ T8076] binder_alloc: binder_alloc_mmap_handler: 8069 20004000-20007000 already mapped failed -16
[ 1048.588167][ T8070] binder: BINDER_SET_CONTEXT_MGR already set
[ 1048.603770][ T8078] binder_alloc: 8069: binder_alloc_buf, no vma
[ 1048.610195][ T8078] binder: 8069:8078 transaction failed 29189/-3, size 1610612736-12288 line 3147
[ 1048.620113][ T8070] binder: 8069:8070 ioctl 40046207 0 returned -16
[ 1048.627852][   T17] binder: undelivered TRANSACTION_ERROR: 29201
[ 1048.641000][   T17] binder: undelivered TRANSACTION_ERROR: 29189
[ 1048.679776][ T8079] IPVS: ftp: loaded support on port[0] = 21
19:20:18 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6}, 0x0, @in6=@remote}}, &(0x7f0000000040)=0xe8)
lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000380)={<r4=>0x0, 0x5, 0x100000001, 0xfffffffffffffffc}, &(0x7f00000003c0)=0x10)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000400)={r4, 0xc8a8}, 0x8)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000440)={r4, 0xa7, "9766ee103147fc4915054a34bd79f46106efa491a8ca1e4dd0701ce2906f1cefc430bb77a4029a4c16cee5b9621a3677c23352433780d1c43457e3ea831a8f188252b03587a1dc1c4534dbf38e51b1a60165ad9e7af6dff8cd0f5436f7730bad0b0a323a2d8f29501b358d6f13fcd3c5d4954ccbc9bb8fa2eb65cf08ffa16e69e821eef88662bd020cad1d16b34bae7b50fa7196268001187dd66e40cfc19d8211f7112d72f243"}, &(0x7f0000000500)=0xaf)
write$P9_RGETATTR(r1, &(0x7f00000002c0)={0xa0, 0x19, 0x1, {0x3002, {0xb0, 0x2, 0x4}, 0x50, r2, r3, 0x3, 0x1, 0x10001, 0xa22, 0x0, 0x3, 0x9, 0x6, 0x7ebdb8d3, 0x8001, 0x8, 0xa5e, 0x4b73, 0xf068, 0x8}}, 0xa0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
shutdown(r0, 0x1)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000080), 0x4)

19:20:18 executing program 2:
r0 = socket$inet(0x2, 0x3, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x396)
getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, <r1=>0x0}, &(0x7f0000001240)=0x80)
setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @loopback, @loopback}, 0xc)
syz_emit_ethernet(0x2a, &(0x7f0000000140)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x8}}}}}, 0x0)

19:20:18 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x40030000000000, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:20:18 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x1000080002, 0x100000000000088)
r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x8000, 0x0)
ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000080))
bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c)
r2 = socket$inet6(0xa, 0x802, 0x88)
setsockopt$inet6_udp_int(r2, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4)
sendto$inet6(r2, 0x0, 0x0, 0x8800, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c)
sendto$inet6(r2, &(0x7f00000000c0)="dd", 0x1, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0xfef3, 0x0, 0x0, 0x0, 0xfffffffffffffdcc}}], 0x400000000000490, 0x6, 0x0)

19:20:18 executing program 4:
syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a45352, &(0x7f00000006c0)={{}, 'port1\x00', 0x8, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7})
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x416, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pread64(r0, 0x0, 0xfffffffffffffd83, 0x0)
r1 = syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00')
setns(r1, 0x0)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000a00)={"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"})
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)

19:20:18 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

[ 1050.505847][ T8093] binder_alloc: 8091: binder_alloc_buf size 1744842752 failed, no address space
19:20:18 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x100000000000000, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1050.550498][ T8093] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
19:20:18 executing program 2:
r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x80000000009, 0x4001)
ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000100)={0xf, @raw_data="b29c87b5b9e61018a71462d915140584a2d3d842051f38cabf92e76e5a166f77e0e51614a88ea884074ce2a0fa08f4e68e70afad4dd2bcc6d325c7d032a3866d2cca84738b2e0a9750f9c0c80d566b994017bea9d7436da0c8d169219d585fe81055a4f57a6324dd76d4229a51c03bceb2f57514289fe08d8d3d016c3e8890768539d0f314546416e367280ceb9813c522973961cd49233790fe99c4145a62fe6f9e539837d49d01f3f402155ad73da4528bd4a5fb36ce3101a64c988d27b36907688140ed4aede1"})

19:20:18 executing program 3:
r0 = memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="00fbd004019fc4e7b5349d19543b2de7dce0f17daee819fa43a9ea8ac8e596ba5bfb86652c05052056ee7669936f002ba13b715f203247c63cc2ae3d5e28f651b74fc132f5127cea3e8ce1bd3e93fbf120cdc18a39c1766468fad5f05000525bff0000003de611a376c1b4b1087674aad5d3d421045a9e70a1f61fa0d81d0b312a8f0ce26ec2263b9864e0f2d2f375bed6bba52842f6baf15676730a07ff57dbb9c8c3aa8fd00dec6545c425310f078192ef940d3f2976500ab1b95d683d0e40ab40c7abd9a6b21e8630d26cb1e40d9d"], 0xd0, 0x2)
write$sndseq(r1, &(0x7f0000000180), 0x0)
dup2(r1, r0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x400000, 0x0)
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0xfffffffe}, @connect}], 0xffffff76)

[ 1050.621095][ T8093] binder: 8091:8093 transaction failed 29201/-28, size 1744830464-12288 line 3147
19:20:18 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x200000000000000, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1050.677195][ T8103] binder_alloc: binder_alloc_mmap_handler: 8091 20004000-20007000 already mapped failed -16
19:20:18 executing program 2:
r0 = socket(0xa, 0xffffd, 0x3)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x398)
getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14)
getsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000000), &(0x7f0000000100)=0x4)

[ 1050.744258][ T8093] binder: BINDER_SET_CONTEXT_MGR already set
[ 1050.750516][ T8093] binder: 8091:8093 ioctl 40046207 0 returned -16
[ 1050.812448][ T8114] binder_alloc: 8091: binder_alloc_buf, no vma
19:20:18 executing program 3:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x10040, 0x0)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100), 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0cc5640, 0x0)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x8)
ioctl$RTC_PIE_ON(r1, 0x7005)
ioctl$CAPI_NCCI_OPENCOUNT(r0, 0x80044326, 0x0)
ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000140))
semget$private(0x0, 0x1, 0x80000000000005c)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)=ANY=[@ANYRES32=<r2=>0x0, @ANYBLOB="ac00caa393470200"], &(0x7f00000001c0)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={r2, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e21, 0xffffffff, @empty, 0x800000000}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e22, 0x5, @local, 0x2}, @in6={0xa, 0x4e23, 0x9, @mcast1, 0xf000000000000000}]}, &(0x7f00000002c0)=0xc)
ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000040)={0x34})
unshare(0x40000000)

19:20:18 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x400000000000000, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1050.858236][   T17] binder: undelivered TRANSACTION_ERROR: 29201
[ 1050.897735][ T8114] binder: 8091:8114 transaction failed 29189/-3, size 1744830464-12288 line 3147
19:20:18 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
write$selinux_attr(r0, &(0x7f0000000000)='system_u:object_r:system_dbusd_var_run_t:s0\x00', 0x2c)
preadv(r0, &(0x7f0000000040), 0x0, 0x0)

19:20:18 executing program 5:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)=[0x0])
r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0xffffffffffff0001, 0x40)
ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000140)={0x1})
r1 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x1c, 0x80000)
ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0))

19:20:18 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

[ 1050.921416][   T17] binder: undelivered TRANSACTION_ERROR: 29189
[ 1051.002221][ T8126] IPVS: ftp: loaded support on port[0] = 21
[ 1051.061514][ T8138] binder_alloc: 8136: binder_alloc_buf size 1811951616 failed, no address space
[ 1051.123621][ T8138] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1051.143770][ T8138] binder: 8136:8138 transaction failed 29201/-28, size 1811939328-12288 line 3147
[ 1051.190806][ T8144] binder_alloc: binder_alloc_mmap_handler: 8136 20004000-20007000 already mapped failed -16
[ 1051.203102][ T8144] binder_alloc: 8136: binder_alloc_buf, no vma
[ 1051.209735][ T8138] binder: BINDER_SET_CONTEXT_MGR already set
[ 1051.216770][ T8138] binder: 8136:8138 ioctl 40046207 0 returned -16
[ 1051.224436][ T8144] binder: 8136:8144 transaction failed 29189/-3, size 1811939328-12288 line 3147
19:20:19 executing program 4:
r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x8882)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f0000000580)={{0x80}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x05\x10\a\x00', 0x82})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{0x0, 0x1}, {0x200004000080}})
r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2)
write$P9_RSYMLINK(r1, &(0x7f0000000100)={0x14, 0x11, 0x1, {0x20, 0x0, 0x5}}, 0x14)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/73, 0x1c}], 0x97)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, &(0x7f00000004c0)=""/53)

19:20:19 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x80ffffff00000000, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:20:19 executing program 2:
r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)="071db41e46153896afbea5f431766c630bfed4a7742e6ea8337cff6d79478fe65e1b88c3fcae86702ee4375ba9f72d9d14a21d0c9875e09e7541b4ef48ed122543022d5cc1d94c0b8b106f2e1614f8ef0aa365959ce08dab2e55043f81a7ff6c300f8594e1d92913ab4e6f4acd05ab0617f091cd90a7a347c042726855fd79e87a3b39d8e8aaf432a863a97e421bddb0814321432e3c9596cc849d22fbd88cbe694cfb9909563953b777a24783b1355c1f3f5c14f30d484e7b37747446bf3d7e", 0xc0, 0xfffffffffffffffb)
r1 = request_key(&(0x7f0000000940)='.request_key_auth\x00', &(0x7f0000000980)={'syz', 0x2}, &(0x7f00000009c0)='ppp0}lo.\\\x88ystemcp\x00set(\x00\x90\x1d\x19\xcb\x9d<{d\x9b\x1e\xcc9\xffm^\xaa\xe4\x04\x1f\x95\x99#\x98\b\xd46\x93Q:\x87-\xc8\xca\xc8\xea\xd5\xef\xd50 L\x95a#\f\xfd:e\xa3\xee\xca\xf6\x1e\a\x11\xbb?\x89F\xe4\x80F\xd1)LT$I\r&\xa5\xd6%\xf7@@\x1d\x9f', 0xfffffffffffffffc)
keyctl$instantiate_iov(0x14, r0, &(0x7f0000000700)=[{&(0x7f0000000200)="d41c1fcc1eb9365c02a53ec5dea07ffab209f819f7071dfcbc6cb3718f6c3d799b7d47804b13df54fb2ee72c074cd53417034f1186e8e65e2196790f97fe76de5bec1d9c", 0x44}, {&(0x7f0000000280)="259744255ba3783f33ca33019f314fb6fb1170ad4eddd2021636a975b7524bba03c59437cabb8a748e59690e1dee279a8d1e1e3de25bd47090a90b3d46bbd16b3728e3999db53368d68bff646f", 0x4d}, {&(0x7f0000000300)="6240754b38d492015a42090cee332fba8bacd2400f6ad7eb01801f7f2cb9aba2a417f744c88eef46827918c8d2c422298908dd5cb3dabacfae198795789f885700c89fbd1d524614d67e94d80ffec9425670be0d17b29cbee84bf7308c85127860e999df6e006824185f4ebd4a6514d37936f30519dfe0193f7dd0cfc110ce7bd69ae742f014d9ba04195a74ab879d50c177abf336ff0ee5a9403e72438a3d50996d91adb185dc3396f82a842f825677c089add56a78a8e49fb580c517798d33899663c7d9401278eb5321e09b8095aff2e3", 0xd2}, {&(0x7f0000000400)="ec899e9118d41979ee66d26d8c105d37216e226ba6bd6be56b224606dc9d9a4f0385ac9a1a85122f1c7bd888eb472aafd64ce2267b8030dadb0a54d036e8e979a77dc57d59af83537d1a8ed61370cfef96db06d038dcc8775957c044c2238fb9a82c6487366960b5e4ea652cb6649e35ffe546df1e479daa718e93fa665d3b9eaafe746adabd15800e6bfa52dc049fe741c5480c5896c436388b2969f1b62986124828678bc7a4bac44e8f0fb30edcb00d11887ce9fb13eb9ec04fbff7de157e86aaa53fa23c554c3845079dbd10b44a6f53c65d4b88c12479e75d8ff68184bbfad3576b0b6d70436d00f242", 0xec}, {&(0x7f0000000500)="e7e0a4edb8bcd54de4d1b0ea352fd528a67ac00d2bf54b3ad7a29e916b5f96288f582902390e6054658dcebbce9b733c6584f6a3396ef6cef1ce5180679d56ad324d7963088637221df96aa070cc11a3cd27157fac5a7d20622a92066641e436c74ca994fc26cf67d59f381d536b4a3b8b790b6a5f3946f9b79ef4e4de63ff06eb8e19bc0e9374af1c8750218e105001546867bbd1df82b744f344f1d36fb1961030ac58b773e6ab49afc9f6a6251d140abf2cc7c82cd8c27de1da304161367fb77558caa27f53", 0xc7}, {&(0x7f0000000600)="eed897ec10c1b66adcc0a2047f74b274f5c1185eb5fb68c59a8124d37b4b54167b9c775bcb2767e72e3b11547c154736f2474628d5f085241eecb6bac8b7d658407a283520d7a7c8f9e46a898c965db24c86851d72c53d7f35c4278569f7c175f360091753cd289e3ed2437781a4dfa2dd68285f4825c241b88d9b64f326504845120a1572c025db311919884c4f9caa2cf437d494eae3e09f01d3cd3a18a1f8da84e91d41d02251ea3aadd13f49563c72a5aa63c8825cf99b77101ca52c64dae5fac07bfe4f09703bb3d794a5a3cc975fd80dd53affd8a04b8e3752", 0xdc}], 0x6, r1)
r2 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000800)='/dev/ubi_ctrl\x00', 0x208000, 0x0)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000840)={<r4=>0x0, 0xaae8}, &(0x7f0000000880)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000008c0)={r4, 0x3}, &(0x7f0000000900)=0xc)
ioctl$INOTIFY_IOC_SETNEXTWD(r3, 0x40044900, 0x4)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0xc058534f, &(0x7f0000000000)={{0x0, 0x1}})

19:20:19 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=<r1=>0x0)
perf_event_open(&(0x7f0000000000)={0x7, 0x70, 0xd4e, 0xfffffffffffffffa, 0x0, 0x10001, 0x0, 0x80000001, 0x20, 0x8, 0x400, 0xffffffffffffffff, 0x0, 0x5, 0x1, 0x8, 0x1ff, 0x9, 0x1f, 0x2, 0x2, 0x0, 0x18, 0x6, 0xffff, 0x0, 0x9, 0xffff, 0x2, 0xb94, 0x9, 0x401, 0x0, 0x20, 0xd2, 0x8, 0x5, 0x4, 0x0, 0x3, 0x4, @perf_config_ext={0x15, 0x22}, 0x1, 0x7, 0x1f, 0x3, 0x40, 0x4, 0x1}, r1, 0xd, 0xffffffffffffff9c, 0xb)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
r2 = accept4(r0, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000700)='net/route\x00')
sendfile(r2, r3, 0x0, 0x10000000000443)

19:20:19 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

19:20:19 executing program 3:
r0 = socket$inet_sctp(0x2, 0x1000000000005, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000300)=@assoc_value, &(0x7f0000000340)=0x8)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000680)={<r1=>0x0, 0x4, 0x6, 0x8, 0xffff, 0x400, 0x80, 0x400, {0x0, @in6={{0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, [], 0x22}, 0x6}}, 0x62d, 0x27, 0x9, 0x2, 0x3}}, &(0x7f0000000740)=0xb0)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000780)={r1, @in={{0x2, 0x4e24, @empty}}}, 0xffffffe4)
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001640)='/dev/vsock\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000001680), &(0x7f00000016c0)=0x4)
munlockall()
prctl$PR_GET_THP_DISABLE(0x2a)
ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f0000000000))
sendto$rxrpc(r2, &(0x7f0000000080)="d7c8268256cd2d5a67a7853b089b68656e219439743eb7", 0x17, 0x4090, &(0x7f0000000040)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4}}, 0x24)
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1051.336262][ T8154] Unknown ioctl 1074033725
[ 1051.345792][ T8156] binder_alloc: 8150: binder_alloc_buf size 1946169344 failed, no address space
[ 1051.369823][ T8161] Unknown ioctl 1074033725
[ 1051.376901][ T8156] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
19:20:19 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0xffffff7f00000000, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:20:19 executing program 2:
r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
r1 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0)
ioctl(r1, 0xc0884123, &(0x7f0000000000))
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)
poll(&(0x7f0000000000)=[{r1}], 0x1, 0x0)

[ 1051.411498][ T8156] binder: 8150:8156 transaction failed 29201/-28, size 1946157056-12288 line 3147
19:20:19 executing program 3:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00')
ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040))
r1 = syz_open_dev$sndctrl(&(0x7f0000000240)='/dev/snd/controlC#\x00', 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f00000000c0)={0x0, 0x0, 0x7})

19:20:19 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x7, 0x0)
r0 = socket$kcm(0x29, 0x5, 0x0)
sendmmsg(r0, &(0x7f0000007e00), 0x8000000000003d0, 0x0)

[ 1051.489529][ T8168] binder_alloc: binder_alloc_mmap_handler: 8150 20004000-20007000 already mapped failed -16
19:20:19 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0xffffffff00000000, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:20:19 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)='\x00')
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000180)={0x4, 0x0, 0xffffffffffffffc0, 0x5032e96a, [], [], [], 0x81, 0x1, 0xe1, 0x2, "2adffddfaf2958829b61a1e61d2933db"})

[ 1051.587776][ T8156] binder: BINDER_SET_CONTEXT_MGR already set
[ 1051.603857][ T8156] binder: 8150:8156 ioctl 40046207 0 returned -16
[ 1051.611833][ T8179] binder_alloc: 8150: binder_alloc_buf, no vma
[ 1051.650716][    C0] net_ratelimit: 14 callbacks suppressed
[ 1051.650725][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1051.650749][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1051.656502][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1051.730744][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1051.736627][    C0] protocol 88fb is buggy, dev hsr_slave_1
19:20:19 executing program 4:
r0 = socket(0x10, 0x2, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000080)=0x30)
setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x77359400}, 0x2b9)
getsockopt$sock_cred(r0, 0x1, 0x14, &(0x7f0000caaffb), &(0x7f0000000440)=0xfe8f)
getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14)

19:20:19 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

19:20:19 executing program 3:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
lsetxattr$security_capability(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='security.capability\x00', &(0x7f00000002c0)=@v1={0x1000000, [{0x2}]}, 0xc, 0x0)
bind$inet(r1, 0x0, 0x0)
r2 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x0, 0x2)
ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000000480))
r3 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x0, 0x2)
connect$netlink(0xffffffffffffffff, &(0x7f0000000440)=@proc={0x10, 0x0, 0x25dfdbfc, 0x42020}, 0xc)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x20000080)
r6 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000180))
write$binfmt_misc(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x0)
io_setup(0x101, &(0x7f0000000040)=<r7=>0x0)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000600)={<r8=>0x0, 0xc8, "1e0086672dfc53ce60241ee2f691efab7745b186e770bcaa2d9849883a9c713e29511fd9d25fd43b1349e3a45e4434803bdb880761ecfaa1143551def7908f56919c53703c09163de140c80282353b64d0fb4ea1bf8a3e7901aa9a70e4898389b2549dfa13e96fd96d05f512e65c244f36dbce5195af7e21bc0d4f7827681900733e5f47f47304b967f912f3113cddeebbca8852c281740834fbaeaf014cffb36391c50e312cd946a65e3a72d5ea7a04c90c20ab3504553eed5b7e29a70c49824012d1abba6885e0"}, &(0x7f0000000240)=0xd0)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000380)={r8, @in={{0x2, 0x4e23, @broadcast}}}, 0x84)
ioctl$NBD_DISCONNECT(r5, 0xab08)
io_submit(r7, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x700, 0x0, 0xd, 0x0, 0x0, r4, &(0x7f0000000000), 0xfffffce4}])
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
ioctl$FS_IOC_SETFSLABEL(r6, 0x41009432, &(0x7f0000000500)="22fb82d4c44fe2db154cbfe8c3ac5aa9cbf3d5585b4345301bcb0b550ade3b0e1bf03c9a6724ed83b6bb5a3aca6e83326177189c59a9b41c769e7af19e1286c7941af161222438bc207b89abcae5a6896aabd1f668b45b9cfe60bc5b47cd87d09e988fb88a3972d30d7debe8407605c8f3faeeca86015c2b3000d465ff2c7957d9b77010c2ffa8f296ede32faad9ce950bb6267699c127211c146b1962f6a347876e44e6e46f89a24e9fe8d63869e828f2fd4637be198f7432fc364ca4d66ff8c839d0c59bfbc7e4d20166ba0795cb9a1a36448ee86f570362c67c8c07caad6be9395a442de92673b8f646f3735a7f2d561cc65a3803db1936b14684f0fe9821")
ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, 0x0)
syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2)

19:20:19 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:20:19 executing program 5:
r0 = socket$inet6(0xa, 0x5, 0x0)
select(0x40, &(0x7f0000002000), &(0x7f0000000040), &(0x7f0000000fc0)={0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000001000)={0x0, 0x2710})
r1 = open(&(0x7f0000000000)='./file0\x00', 0x80002, 0x12a)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
setsockopt$inet6_buf(r0, 0x29, 0x40, &(0x7f0000000f9b), 0x0)

[ 1051.957233][ T8200] binder_alloc: 8195: binder_alloc_buf size 2046832640 failed, no address space
[ 1051.980700][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1051.997298][ T8200] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
19:20:19 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1052.080511][ T8212] binder_alloc: binder_alloc_mmap_handler: 8195 20004000-20007000 already mapped failed -16
19:20:20 executing program 5:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1052.154436][ T8200] binder: BINDER_SET_CONTEXT_MGR already set
19:20:20 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0x2}, 0x10)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xfffffe83, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a001fff00001c000000000058000000000000000f481baeff30d0e578ad03f4b205530000010020"], 0x1}}, 0x0)

19:20:20 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000))
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0xa28, [0x0, 0x200005c0, 0x200005f0, 0x20000fb8], 0x0, 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="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"]}, 0xa7e)
fcntl$getown(r0, 0x9)

[ 1052.221603][ T8200] binder: 8195:8200 ioctl 40046207 0 returned -16
19:20:20 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:20:20 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf82f0000, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

19:20:20 executing program 3:
r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x2, 0x0)
getsockname(0xffffffffffffff9c, &(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000100)=0x80)
getsockopt$inet6_buf(r1, 0x29, 0x3f, &(0x7f00000003c0)=""/4096, &(0x7f0000000180)=0x1000)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000080)={0x1, 0x4000000000001}, 0x2)
read(r0, &(0x7f0000000200)=""/71, 0x47)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2)
r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xcc, 0x101000)
ioctl$KVM_GET_REGS(r0, 0x8090ae81, &(0x7f0000000280))
ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000040))

[ 1052.451663][ T8233] binder_alloc: 8232: binder_alloc_buf size 4163842048 failed, no address space
[ 1052.501120][ T8233] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1052.526349][ T8239] binder_alloc: binder_alloc_mmap_handler: 8232 20004000-20007000 already mapped failed -16
[ 1052.537104][ T8233] binder: BINDER_SET_CONTEXT_MGR already set
[ 1052.544659][ T8233] binder: 8232:8233 ioctl 40046207 0 returned -16
[ 1052.551422][ T8239] binder_alloc: 8232: binder_alloc_buf, no vma
[ 1052.565972][ T8239] binder_transaction: 4 callbacks suppressed
[ 1052.565990][ T8239] binder: 8232:8239 transaction failed 29189/-3, size 4163829760-12288 line 3147
[ 1052.583217][T19041] binder_release_work: 6 callbacks suppressed
[ 1052.583224][T19041] binder: undelivered TRANSACTION_ERROR: 29201
19:20:20 executing program 5:
r0 = socket(0x10, 0x802, 0x0)
write(r0, &(0x7f0000000080)="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", 0xfc)
r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x8000, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x5, 0x5, 0x5})

19:20:20 executing program 4:
openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x1, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0)

19:20:20 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8457, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20000000, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
r2 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000380)={<r3=>0xffffffffffffffff}, 0x2, 0x1000}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {&(0x7f0000000180), r3, 0x3}}, 0x18)
setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x28)
setsockopt$inet_buf(r1, 0x0, 0x2d, &(0x7f0000000040)="ab8ed4cb63bd4d9f84229aae3374618533e26dd21b7e96d23ab99a6815506016c986ae9f925d374d6f70681f989bcab10547b38d20a08943616fbfdf3739d82d3bdf40c864620ad74f0cce9ceecc865e526dc92a70a439095ce8c7eef3c523cd136a62aa3ecc98de16716221cfc48fca25084c072bf3d3d7af79222d6041dc730287d30c7afc8142754dbbf4787d18188793f0a781a564dfd57ffab790d5abbf3535653e5c97b80449387a7c71586f7cb796e8c3bfcfe7a33beb3793f49c5dbb", 0xc0)
syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x3, 0x400)
ioctl$FS_IOC_GETVERSION(r0, 0x80047601, &(0x7f0000000000))

19:20:20 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:20:20 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

[ 1052.604560][T19041] binder: undelivered TRANSACTION_ERROR: 29189
[ 1052.620687][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1052.626644][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1052.699840][ T8250] binder_alloc: 8249: binder_alloc_buf size 4261294080 failed, no address space
[ 1052.736209][ T8250] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
19:20:20 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:20:20 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000240)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58)
accept4$alg(r0, 0x0, 0x0, 0x80800)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, 0x0, 0x8)

[ 1052.768771][ T8250] binder: 8249:8250 transaction failed 29201/-28, size 4261281791-12288 line 3147
19:20:20 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
r1 = socket$packet(0x11, 0x4000000000000003, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
sendmmsg(r0, &(0x7f00000092c0), 0x40000000000020f, 0x0)
keyctl$set_reqkey_keyring(0xe, 0x7)

[ 1052.820910][ T8258] binder_alloc: binder_alloc_mmap_handler: 8249 20004000-20007000 already mapped failed -16
[ 1052.870250][ T8250] binder: BINDER_SET_CONTEXT_MGR already set
[ 1052.896764][ T8250] binder: 8249:8250 ioctl 40046207 0 returned -16
19:20:20 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1052.919538][ T8270] binder_alloc: 8249: binder_alloc_buf, no vma
[ 1052.934401][ T8270] binder: 8249:8270 transaction failed 29189/-3, size 4261281791-12288 line 3147
[ 1052.962809][T29950] binder: undelivered TRANSACTION_ERROR: 29201
[ 1052.972899][T29950] binder: undelivered TRANSACTION_ERROR: 29189
19:20:20 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

19:20:20 executing program 2:
socket$packet(0x11, 0xfffffffffffffffe, 0x300)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
lgetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=@known='com.apple.system.Security\x00', &(0x7f0000000140)=""/53, 0x35)
mkdir(&(0x7f0000000640)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000000000)={0x20000000000006, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000))
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@rand_addr="46c47c1ed4a15ba5634a38620c96604b"})

[ 1053.083409][ T8281] binder_alloc: 8280: binder_alloc_buf size 4294979072 failed, no address space
[ 1053.148420][ T8281] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1053.201127][ T8281] binder: 8280:8281 transaction failed 29201/-28, size 4294966781-12288 line 3147
[ 1053.241807][ T8289] binder_alloc: binder_alloc_mmap_handler: 8280 20004000-20007000 already mapped failed -16
[ 1053.252121][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1053.252182][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1053.268159][ T8289] binder: BINDER_SET_CONTEXT_MGR already set
[ 1053.301112][ T8290] binder_alloc: 8280: binder_alloc_buf, no vma
[ 1053.307522][ T8289] binder: 8280:8289 ioctl 40046207 0 returned -16
[ 1053.314772][T19041] binder: undelivered TRANSACTION_ERROR: 29201
[ 1053.325365][ T8290] binder: 8280:8290 transaction failed 29189/-3, size 4294966781-12288 line 3147
[ 1053.337281][T19041] binder: undelivered TRANSACTION_ERROR: 29189
19:20:21 executing program 2:
syz_emit_ethernet(0x37, &(0x7f00000000c0)={@local, @broadcast, [], {@mpls_uc={0x8847, {[{0xf77800, 0x1ff, 0x200, 0x6}], @generic="b2dff821ff2e8833dbb5bdccc14da01d6c07c39ff2a045471e475a8b1495698ad87c305a6d"}}}}, 0x0)
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffffff7, 0x8000)
write$P9_RREAD(r0, &(0x7f0000000100)={0xb8, 0x75, 0x2, {0xad, "0eb5e166678e71af6b78a633e3bd7019b97f0293eac5ce7ae19dae0a58c2e16506b964882ca5956bb300ee0d4054ab0db88a9ee15857de2ab7bff361f8cd64c8c7e70243a6ccf5613893975a45b7678bc97461c5e63200e485de4d3d068c2857b2275ce4f174f72ca6ed5c59f5a24cf4d947554ddfda8cb61f64edb6a07a58c0d900b99e95587e8643ccc48712c8082dd463d599ec721ea9e44fdc2e0868ece3452896bc37f28706c50b82da70"}}, 0xb8)

19:20:21 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:20:21 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x0, 0x0)
write$FUSE_INTERRUPT(r0, &(0x7f0000000080)={0x10, 0x0, 0x5}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080600010000000000000000ffffffff7f000000aaaaaaaaaa03000000aa"], 0x0)
prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000))

19:20:21 executing program 3:
io_setup(0x545, &(0x7f0000000280))
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x0)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2})
r3 = eventfd(0x0)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r3})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r4 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x8, 0x400000)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xa017000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@mpls_newroute={0x60, 0x18, 0x1, 0x70bd2a, 0x25dfdbfc, {0x1c, 0x10, 0x10, 0x9, 0xff, 0x2, 0x0, 0x7, 0x200}, [@RTA_TTL_PROPAGATE={0x8, 0x1a, 0x1000}, @RTA_DST={0x2c, 0x1, [{0x4, 0xfffffffffffffffe, 0x7fff, 0xc1}, {0x3, 0x4, 0xffffffff, 0x2a}, {0x3ff, 0x5, 0x101}, {0x4, 0x8000, 0x7, 0xfffffffffffffffd}, {0x3ff, 0x4, 0x2, 0x5}, {0x1, 0x10001, 0x9, 0x2}, {0xffff, 0x7, 0x8, 0x3}, {0x2, 0x8, 0x10001, 0x9}, {0x5, 0x99c1, 0x6, 0x400}, {0x910, 0x5, 0x8, 0x80}]}, @RTA_TTL_PROPAGATE={0x8, 0x1a, 0x1}, @RTA_OIF={0x8, 0x4, r5}]}, 0x60}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0)

19:20:21 executing program 4:
mmap(&(0x7f0000000000/0x7f2000)=nil, 0x7f2000, 0x3, 0x31, 0xffffffffffffffff, 0x0)
pipe2(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000), 0x138f}], 0x1, 0x0)
sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="02100a001400000027bd7000fddbdf2508009f00000000000a004e2400000006ff020000000000000000000000000001050000000a004e200000000700000000000002000100000004d400035c04000000200100140046000000070019000000000002004e21ac1414bb00000000000000000a004e23000000007f16deef66778ad9514220b7cd4800ee9500000000000000"], 0xa0}}, 0x801)
mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3)

19:20:21 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000000000000, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

19:20:21 executing program 2:
r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000280))
readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1)
r1 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000180)={<r2=>0x0, 0xaa, "04c9e02d48a04ade5129325bbe4c44a321436ca1ecd1e04b1e9c9da6ae3c917ea59eb24b2de7d79bd90912c6263d75560f1017144b4e262d9a4d45c579b438f929216532e5e6e684d53439d58371fa70ef656453563bda44d449476b74120917a04fe5d81863e30d32665fad9c7f1ce42b586f29bc4dfc47c30f45a73f35f3b8023991e90be4502df250538990304bc16a9067154298bc0d9bee6bfc2677a98a4c21cf9faf02232c6375"}, &(0x7f0000000080)=0xb2)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)={r2, 0x493, 0x4, [0x7f, 0x4, 0x8, 0x4]}, &(0x7f0000000240)=0x10)
tkill(r1, 0x1000000000016)
ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0xc0000000000000, 0x3ff})

19:20:21 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x2, 0x2c0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, &(0x7f0000000000), &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036746e6c300000000000000000006c6f000000000000000000000000000079616d30000000000000000000000000626373683000000000000000000000000000000000000000000000000180c20000000000000000000000700000007000000098000000726564697265637400000000000000000000000000000000000000000000000004000000fdffffff00000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff01000000150000000100000086dd76657468305f746f6e64000000000000622f6e645f736c6176655f310000000065716c000000000000000000000000007465616d5f736c6176655f30000000000180c2000000000000000000aaaaaaaaaaaa0000000000000000e0000000280100009801000069703600000000000000000000000000000000000000000000000000000000004c000000ff010000000000000000000000000001000c0000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f67000000000000000000000000000000000000000000000000000000000024000000003deb6b0d6916d7152160daea4ad4c130789564342657e8ab26889adb9b2f00000000004e464c4f470000000000000000000000000000000000000000000000000000004c00000000000000000000000000000065df204637935621933eed1ec39d54ea6a1285a4d1ff2180f14623f2ab17e7c4c2491492f032d233f9b86e503a31a4e8b62191dfd4e85c4a85b7e6c43a8a5c1f00000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000"]}, 0x310)
r1 = syz_open_dev$sndpcmc(&(0x7f0000004dc0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x4000)
setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000004e00)={0xffffffff, 0x1, 0xffffffff, 0x9, 0x3}, 0xc)

[ 1053.878264][ T8304] binder_alloc: 8303: binder_alloc_buf size 13510798882123776 failed, no address space
19:20:21 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1053.960942][ T8304] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1054.006209][ T8304] binder: 8303:8304 transaction failed 29201/-28, size 13510798882111488-12288 line 3147
[ 1054.040811][ T8316] irq bypass consumer (token 000000001e3a3644) registration fails: -16
19:20:21 executing program 5:
perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
gettid()
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000002000)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}})
inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x100000)
inotify_rm_watch(0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002880)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x2}, 0x0)

[ 1054.054021][ T8319] binder_alloc: binder_alloc_mmap_handler: 8303 20004000-20007000 already mapped failed -16
[ 1054.093579][ T8316] irq bypass consumer (token 000000006707b6f6) registration fails: -16
19:20:22 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1054.119547][ T8323] binder: BINDER_SET_CONTEXT_MGR already set
[ 1054.162873][ T8323] binder: 8303:8323 ioctl 40046207 0 returned -16
[ 1054.162911][ T8319] binder_alloc: 8303: binder_alloc_buf, no vma
19:20:22 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0xb, 0x1)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x490180, 0x0)
faccessat(0xffffffffffffffff, 0x0, 0x30, 0x1000)
close(0xffffffffffffffff)
r2 = getpid()
setitimer(0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x2710}}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a})
getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={<r4=>0x0, 0x9}, &(0x7f0000000140)=0x8)
getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000180)={r4, 0x101}, &(0x7f00000001c0)=0x8)
ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f00000000c0)=0x7fffffff)
r5 = dup2(0xffffffffffffffff, r3)
kcmp(r2, r2, 0x6, r5, r5)

19:20:22 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:20:22 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

[ 1054.217611][ T7831] binder: undelivered TRANSACTION_ERROR: 29201
[ 1054.232249][ T8319] binder: 8303:8319 transaction failed 29189/-3, size 13510798882111488-12288 line 3147
[ 1054.249143][ T7831] binder: undelivered TRANSACTION_ERROR: 29189
19:20:22 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x4400)
setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e21, 0x2, @mcast2}, {0xa, 0x4e22, 0x100000000, @mcast2, 0x7}, 0x0, [0xffffffffffffa5fb, 0x8, 0x109, 0x9, 0x7, 0x8, 0x6]}, 0x5c)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000100)={0x4, 0x1, 'client0\x00', 0x2, "cdd79de88949881d", "805b8476c106a4bd8272a7106acd680c2d2976cbb48db626197c26b379b346d8", 0x0, 0xbb93})
sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip={{0xc, 0x1, 'ipip\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_TYPE={0x8, 0xa, 0x2}]]}}}]}, 0x3c}}, 0x0)
ioctl$BLKTRACESTOP(r1, 0x1275, 0x0)

[ 1054.355593][ T8338] binder_alloc: 8337: binder_alloc_buf size 72057594037940224 failed, no address space
19:20:22 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x34000, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1054.408139][ T8338] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
19:20:22 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x400300, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1054.460098][ T8338] binder: 8337:8338 transaction failed 29201/-28, size 72057594037927936-12288 line 3147
[ 1054.479255][ T8342] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1054.495058][ T8348] binder_alloc: binder_alloc_mmap_handler: 8337 20004000-20007000 already mapped failed -16
[ 1054.525941][ T8350] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1054.558208][ T8338] binder: BINDER_SET_CONTEXT_MGR already set
[ 1054.566220][ T8348] binder_alloc: 8337: binder_alloc_buf, no vma
[ 1054.573189][ T8338] binder: 8337:8338 ioctl 40046207 0 returned -16
[ 1054.580135][ T8348] binder: 8337:8348 transaction failed 29189/-3, size 72057594037927936-12288 line 3147
[ 1054.598855][ T7831] binder: undelivered TRANSACTION_ERROR: 29201
[ 1054.646061][ T7831] binder: undelivered TRANSACTION_ERROR: 29189
19:20:22 executing program 4:
clone(0x200000041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = getpid()
rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0))
ptrace$getregs(0xe, r0, 0x6b, &(0x7f0000000000)=""/181)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x200000, 0x0)
fdatasync(r1)
ptrace(0x10, r0)
ptrace$getsig(0x4204, r0, 0x0, 0x0)

19:20:22 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:20:22 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x80, 0x4)
bind(r0, &(0x7f0000000580)=@in={0x2, 0x4e20}, 0x70)
setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000040)=0x80000001, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10)
recvmmsg(r0, &(0x7f00000016c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)={0x2, [<r1=>0x0, 0x0]}, &(0x7f00000000c0)=0xc)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000100)={r1}, &(0x7f0000000140)=0x8)

19:20:22 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x40)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x84000)
ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000040)={0x2, 0x401, [{0x80000001, 0x0, 0x7ff}, {0x1, 0x0, 0x6ab}]})

19:20:22 executing program 2:
r0 = syz_open_dev$swradio(&(0x7f0000000240)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000))
ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000280)={0x1, 0x5})

19:20:22 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

19:20:22 executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffffe}, 0xfffffffffffffe3d)
syz_emit_ethernet(0x2a, &(0x7f0000000180)={@random="cb9672fb8a00", @broadcast, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=0xac1414bb, @multicast1=0xac14140a}, @udp={0x0, 0x0, 0x8}}}}}, 0x0)

[ 1054.763657][ T8365] binder_alloc: 8364: binder_alloc_buf size 144115188075868160 failed, no address space
19:20:22 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.mems\x00', 0x2, 0x0)
pwrite64(r1, &(0x7f0000000000)='0,', 0x2, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=<r2=>0x0)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x8, &(0x7f0000000100)={0x2})

19:20:22 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:20:22 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x0, @local}], 0x10)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xcf}, 0x13c)

[ 1054.809488][ T8365] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1054.880914][ T8365] binder: 8364:8365 transaction failed 29201/-28, size 144115188075855872-12288 line 3147
[ 1054.913191][ T8383] binder_alloc: binder_alloc_mmap_handler: 8364 20004000-20007000 already mapped failed -16
19:20:22 executing program 5:
r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2)
ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0)
write$eventfd(r0, &(0x7f0000000080)=0x800, 0x8)
r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x3f, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$KDENABIO(r2, 0x4b36)

19:20:22 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in=@remote}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6}}, &(0x7f0000000000)=0xe8)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = dup(r2)
shutdown(r3, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0002220000f4c5a8deff16fe4073b33535aa1c022bec60b66ccc17e7eefb"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})

[ 1054.952897][ T8365] binder: BINDER_SET_CONTEXT_MGR already set
[ 1054.977751][ T8365] binder: 8364:8365 ioctl 40046207 0 returned -16
[ 1055.095237][ T8396] binder: 8395:8396 ioctl c0306201 0 returned -14
[ 1055.182675][ T8402] binder: 8395:8402 BC_INCREFS_DONE u0000000000000000 node 2106 cookie mismatch 0000000000000000 != a8c5f40000220200
19:20:23 executing program 5:
r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
keyctl$clear(0x7, r0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
fchdir(r1)

19:20:23 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

19:20:23 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x3, 0x0)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7, 0x200)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = eventfd(0x80000001)
r4 = eventfd(0x8)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000200)={r3})
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000800}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x190, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3eb5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x58}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA={0xa4, 0x5, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7e51}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfb01}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x240000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffffffff801}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffc}]}, @TIPC_NLA_NODE={0x3c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x800}, 0x880)
dup3(r4, r3, 0x0)

19:20:23 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@llc, &(0x7f0000000100)=0x80, 0x80800)
r1 = socket(0xa, 0x80005, 0x0)
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0)
mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x80000000)
ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000040)={'team0\x00\x00\x00\x00\n\x00\x00\x05\x00', 0x79})

19:20:23 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1055.868777][ T8403] binder_alloc: binder_alloc_mmap_handler: 8395 20001000-20004000 already mapped failed -16
[ 1055.879584][ T8403] binder: 8395:8403 ioctl c0306201 0 returned -14
[ 1055.886815][ T8403] binder: BINDER_SET_CONTEXT_MGR already set
[ 1055.893268][ T8403] binder: 8395:8403 ioctl 40046207 0 returned -16
[ 1055.901571][ T8403] binder_alloc: 8395: binder_alloc_buf, no vma
19:20:23 executing program 3:
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000800)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)
r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000040))
write$binfmt_misc(r0, 0x0, 0x0)

19:20:23 executing program 5:
r0 = dup(0xffffffffffffff9c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="250000001d008110e00f8080814cb9d94a63190408000f003b000000090001000300000040", 0x25}], 0x36b}, 0x0)

[ 1055.957154][ T8415] binder: BINDER_SET_CONTEXT_MGR already set
19:20:23 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x80ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1056.050908][ T8415] binder: 8409:8415 ioctl 40046207 0 returned -16
[ 1056.051256][   T17] binder: send failed reply for transaction 2105 to 8395:8396
19:20:24 executing program 2:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
write$apparmor_current(r0, &(0x7f0000000480)=@profile={'permprofile ', ':\"//em0ppp1vboxnet0-user\x00'}, 0xfffffffffffffe66)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x400000, 0x0)
ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000100)={0x0, @bt={0x8000, 0x7, 0x1, 0x3, 0x3, 0x2, 0x1, 0x80, 0x4, 0xfffffffffffffffd, 0x80000001, 0x8000, 0x40, 0x75000000000000, 0x2, 0x4}})

[ 1056.092024][ T8417] binder_alloc: binder_alloc_mmap_handler: 8409 20004000-20007000 already mapped failed -16
[ 1056.102168][   T17] binder: undelivered TRANSACTION_COMPLETE
19:20:24 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0xffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:20:24 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = dup2(r0, r0)
r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00')
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', <r3=>0x0})
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000240)=0xe8)
recvmmsg(0xffffffffffffffff, &(0x7f0000005580)=[{{&(0x7f0000002b40)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000002bc0)=""/215, 0xd7}], 0x1, &(0x7f0000002d00)=""/165, 0xa5}, 0xe7}, {{&(0x7f0000002dc0)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000002e40)=""/114, 0x72}], 0x1}}, {{&(0x7f0000002f00)=@ll={0x11, 0x0, <r5=>0x0}, 0x80, &(0x7f00000042c0)=[{&(0x7f0000002f80)=""/68, 0x44}, {&(0x7f0000003000)=""/4096, 0x1000}, {&(0x7f0000004000)=""/116, 0x74}, {&(0x7f0000004080)=""/228, 0xe4}, {&(0x7f0000004180)=""/126, 0x7e}, {&(0x7f0000004200)=""/181, 0xb5}], 0x6, &(0x7f0000004300)=""/236, 0xec}, 0x8}, {{&(0x7f0000004400)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000005480)=[{&(0x7f0000004480)=""/4096, 0x1000}], 0x1, &(0x7f00000054c0)=""/168, 0xa8}, 0x3}], 0x4, 0x2, &(0x7f0000005600)={0x0, 0x1c9c380})
getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000000180)={@local}, &(0x7f00000001c0)=0x14)
sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000005840)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000005800)={&(0x7f0000005640)={0x194, r2, 0x308, 0x70bd29, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x74, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xcb}}}]}}, {{0x8, 0x1, r5}, {0xb0, 0x2, [{0x74, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x44, 0x4, [{0x4, 0x3ff, 0x42, 0x80000001}, {0x6223, 0x9, 0x3, 0x7cbc6b9}, {0x7ff, 0x6, 0x5d, 0x9}, {0x6, 0xea2, 0x0, 0x2}, {0x19, 0x3, 0x80000000, 0x9}, {0x30, 0x9, 0xfffffffffffffffe, 0xffffffffffffffe1}, {0x10000, 0x81, 0x2}, {0x4, 0x8, 0x80000000, 0x2}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x8}}}]}}]}, 0x194}, 0x1, 0x0, 0x0, 0x20004010}, 0x4000090)
r6 = socket$inet6(0xa, 0x3, 0x6)
r7 = syz_open_procfs(0x0, &(0x7f0000000300)='net/tcp\x00')
sendfile(r6, r7, &(0x7f00000000c0)=0x202, 0x2)

[ 1056.134222][ T8417] binder_alloc: 8409: binder_alloc_buf, no vma
19:20:24 executing program 5:
r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/42)
shmctl$SHM_LOCK(r0, 0xb)
shmctl$IPC_RMID(r0, 0x0)

19:20:24 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

[ 1056.193317][   T27] audit: type=1400 audit(1553541624.084:47): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A222F2F656D307070703176626F786E6574302D75736572 pid=8431 comm="syz-executor.2"
19:20:24 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="9300080000000000"], 0x0, 0x0, 0x0})
r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0xfffffffffffff801, 0x0)
ioctl$RTC_UIE_OFF(r2, 0x7004)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB="26630c4000000004"], 0x0, 0x0, 0x0})

19:20:24 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0xffffff80, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1056.264601][ T8443] binder_alloc: 8437: binder_alloc_buf size 288230376151724032 failed, no address space
[ 1056.323817][ T8443] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1056.356889][ T8454] binder_alloc: binder_alloc_mmap_handler: 8437 20004000-20007000 already mapped failed -16
[ 1056.377645][ T8443] binder: BINDER_SET_CONTEXT_MGR already set
[ 1056.396583][ T8455] binder: BINDER_SET_CONTEXT_MGR already set
[ 1056.411751][ T8455] binder: 8453:8455 ioctl 40046207 0 returned -16
[ 1056.412126][ T8454] binder_alloc: 8437: binder_alloc_buf, no vma
[ 1056.418334][ T8443] binder: 8437:8443 ioctl 40046207 0 returned -16
[ 1056.419966][ T8455] binder: 8453:8455 unknown command 524435
[ 1056.463267][ T8455] binder: 8453:8455 ioctl c0306201 20012000 returned -22
[ 1056.477782][ T8455] binder: 8453:8455 unknown command 1074553638
[ 1056.491520][ T8455] binder: 8453:8455 ioctl c0306201 20008fd0 returned -22
[ 1056.500306][ T8458] binder: 8453:8458 unknown command 524435
[ 1056.511407][ T8459] binder: 8453:8459 unknown command 1074553638
[ 1056.517679][ T8459] binder: 8453:8459 ioctl c0306201 20008fd0 returned -22
[ 1056.524957][ T8458] binder: 8453:8458 ioctl c0306201 20012000 returned -22
[ 1056.770722][    C0] net_ratelimit: 18 callbacks suppressed
[ 1056.770731][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1056.782277][    C0] protocol 88fb is buggy, dev hsr_slave_1
19:20:24 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x40030000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:20:24 executing program 5:
getresuid(0x0, 0x0, 0x0)
socket$unix(0x1, 0x3, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0xa000, 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
madvise(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0xb)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f00000005c0)={'nat\x00'}, &(0x7f00000003c0)=0x54)
getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300), &(0x7f0000000340)=0x4)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fa, 0x0, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x10000004, 0x105082)
clock_gettime(0x0, &(0x7f00000002c0)={<r4=>0x0, <r5=>0x0})
pselect6(0x40, &(0x7f0000000040)={0x0, 0x100000001, 0x7fff, 0x4dd, 0x1000, 0xfffffffffffffffa, 0x6, 0x8}, &(0x7f0000000080)={0x98, 0x4, 0xffffffffffffff00, 0xe0, 0x40, 0x3, 0x7, 0x5}, &(0x7f0000000200)={0x7b97219c, 0x2, 0xc00, 0x77bd, 0x3ff, 0xfffffffffffffff9, 0xdd, 0xffffffffffffffc1}, &(0x7f0000000400)={r4, r5+10000000}, &(0x7f0000000480)={&(0x7f0000000440)={0x7fffffff}, 0x8})
r6 = syz_open_dev$mice(0x0, 0x0, 0x1)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180)={<r7=>0xffffffffffffffff}, 0x13f, 0xd}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000580)={0x5, 0x10, 0xfa00, {&(0x7f0000000640), r7, 0x2}}, 0x18)
ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r2)
ioctl$sock_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000000240))
r8 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
pwritev(r8, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r8)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f00000004c0)={0x9, 0x2, 0x10000, 'queue0\x00', 0x5})
sendfile(r3, r3, &(0x7f00000ddff8), 0x6)

19:20:24 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

19:20:24 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-monitor\x00', 0x1, 0x0)
ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, &(0x7f00000001c0))
r2 = shmget(0x0, 0x1000, 0x54000001, &(0x7f0000ffd000/0x1000)=nil)
shmctl$IPC_RMID(r2, 0x0)
r3 = getpid()
get_robust_list(r3, &(0x7f0000000100)=&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)}}, &(0x7f0000000140)=0xc)
setsockopt$inet_tcp_int(r0, 0x6, 0x1000000000024, &(0x7f0000000040)=0x6, 0x101a0)
shmctl$IPC_RMID(r2, 0x0)

19:20:24 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@llc, &(0x7f0000000100)=0x80, 0x80800)
r1 = socket(0xa, 0x80005, 0x0)
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0)
mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x80000000)
ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000040)={'team0\x00\x00\x00\x00\n\x00\x00\x05\x00', 0x79})

19:20:24 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x101004, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400000, 0x0)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000140)=0xfffffffffffffff8, 0x4)
read(r0, 0x0, 0xffffff00)
openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x10101, 0x0)
ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000240)={0x0, {0x2, 0x4e20, @rand_addr=0x10001}, {0x2, 0x4e24, @empty}, {0x2, 0x4e22, @local}, 0x40, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)='team0\x00', 0x2, 0x52c, 0xfffffffffffffffd})
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)

19:20:24 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1056.907357][ T8475] binder_alloc: 8474: binder_alloc_buf size 360287970189651968 failed, no address space
19:20:24 executing program 3:
r0 = socket$inet6(0xa, 0x5, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000001080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005980)=[{&(0x7f00000015c0)=@abs, 0x6e, &(0x7f0000001980)=[{&(0x7f0000003040)="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", 0xf21}], 0x1, &(0x7f0000001e40)}], 0x1, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x40, &(0x7f0000000f9b), 0x0)

19:20:24 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1056.994811][ T8475] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1057.022108][ T8475] binder: BINDER_SET_CONTEXT_MGR already set
[ 1057.029131][ T8475] binder: 8474:8475 ioctl 40046207 0 returned -16
[ 1057.030931][ T8486] binder_alloc: 8474: binder_alloc_buf, no vma
19:20:25 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:20:25 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x2, 0x0)
io_setup(0x4e, &(0x7f0000000100)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000005, 0x0, r0, 0x0}])
ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x80)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612)
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)=0x2)
ioctl$KDDELIO(r1, 0x4b35, 0x8)

19:20:25 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

19:20:25 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(0x0)
statfs(0x0, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x1, 0x40000)
munlockall()
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f00000000c0)="3058020af10cb8b56c96d27c44d58e94ea51a7dfc59e92e80d9482ca7839173a8f1143a711f5a939b4fd0072693a46c08df6616dd21be3453ecf73039a20f43acbc5376139a9070ae27dd847474d1e59b2697801e6ebd80f75ca", 0x5a, 0xfffffffffffffffd)

19:20:25 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x80ffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1057.225322][ T8510] binder_alloc: 8507: binder_alloc_buf size 432345564227579904 failed, no address space
[ 1057.248463][ T8510] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1057.265098][ T8514] binder_alloc_mmap_handler: 1 callbacks suppressed
19:20:25 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(0x0)
statfs(0x0, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x1, 0x40000)
munlockall()
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f00000000c0)="3058020af10cb8b56c96d27c44d58e94ea51a7dfc59e92e80d9482ca7839173a8f1143a711f5a939b4fd0072693a46c08df6616dd21be3453ecf73039a20f43acbc5376139a9070ae27dd847474d1e59b2697801e6ebd80f75ca", 0x5a, 0xfffffffffffffffd)

[ 1057.265116][ T8514] binder_alloc: binder_alloc_mmap_handler: 8507 20004000-20007000 already mapped failed -16
[ 1057.287143][ T8512] PKCS8: Unsupported PKCS#8 version
[ 1057.295419][ T8510] binder: BINDER_SET_CONTEXT_MGR already set
[ 1057.307427][ T8514] binder_alloc: 8507: binder_alloc_buf, no vma
19:20:25 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0xffffff7f00000000, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1057.319877][ T8510] binder: 8507:8510 ioctl 40046207 0 returned -16
19:20:25 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x10000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x4041, 0x0)

[ 1057.410775][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1057.416665][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1057.442937][ T8522] PKCS8: Unsupported PKCS#8 version
19:20:25 executing program 2:
r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1000, 0x800)
getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000002c0)={<r1=>0x0, 0x200, 0x8, 0x9}, &(0x7f0000000300)=0x10)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x89, 0x7ae643a9c8c883a4, 0xf0, 0x34, 0x400, 0x3ff, 0x8000019ba6, <r2=>r1}, &(0x7f00000000c0)=0x20)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000200)={r2, @in={{0x2, 0x4e21, @empty}}}, 0x30)
r3 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e0000003702c993cb00f63d86cb2b000105000000000000000200000000000000", @ANYRES32=r3, @ANYBLOB='\x00\x00'], 0x1e)
r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x200800, 0x0)
ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000100)={0x80033d, 0x20000000209, 0x0, <r5=>0xffffffffffffffff})
lseek(r5, 0xfffffffffffffffe, 0x4)

19:20:25 executing program 5:
readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/252, 0xfc}], 0x1)

19:20:25 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

19:20:25 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(0x0)
statfs(0x0, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x1, 0x40000)
munlockall()
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f00000000c0)="3058020af10cb8b56c96d27c44d58e94ea51a7dfc59e92e80d9482ca7839173a8f1143a711f5a939b4fd0072693a46c08df6616dd21be3453ecf73039a20f43acbc5376139a9070ae27dd847474d1e59b2697801e6ebd80f75ca", 0x5a, 0xfffffffffffffffd)

19:20:25 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:20:25 executing program 4:
r0 = socket$kcm(0x2, 0x2, 0x0)
close(r0)
r1 = socket$kcm(0xa, 0x5, 0x0)
syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x100, 0x20a002)
syz_open_dev$usb(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x2, 0x42040)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0)
r2 = openat$vfio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000240)=r2, 0xffffffffffffff1e)
sendmsg(r1, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)="f77ef3c041b6a0ec4369aa8865e2ce1268c7f5e4c2c3e9e7334fb5c38c11a9aaa945a3b7f216d887590b4027db4250ea6d0128188c707917b9dcd5cc3c26ade27f2c2b28ba4011f7d7d14eb09cb8bdc7f2c8526fc37534cef75436e82c82a2d14e9dd2acd434a06bf9e6bbe46b75e16b211eff511a9197973269683139a69f236dcc23a8d42dac97983e0c87d86027e5bd22da2e02362a32a596f3", 0x9b}], 0x1}, 0x4040000)
recvmsg$kcm(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)=""/43, 0x2b}], 0x1}, 0x42)

[ 1057.785221][ T8542] binder_alloc: 8536: binder_alloc_buf size 504403158265507840 failed, no address space
[ 1057.805630][ T8542] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1057.810005][ T8541] PKCS8: Unsupported PKCS#8 version
19:20:25 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(0x0)
statfs(0x0, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x1, 0x40000)
munlockall()
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f00000000c0)="3058020af10cb8b56c96d27c44d58e94ea51a7dfc59e92e80d9482ca7839173a8f1143a711f5a939b4fd0072693a46c08df6616dd21be3453ecf73039a20f43acbc5376139a9070ae27dd847474d1e59b2697801e6ebd80f75ca", 0x5a, 0xfffffffffffffffd)

19:20:25 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x4, 0x0, 0xffffffffffffff4b)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r1 = dup2(r0, r0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000140)={@empty, 0x0, 0x0, 0x0, 0x5}, 0x20)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={<r2=>0x0, 0x10001, 0x30}, &(0x7f0000000040)=0xc)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000080)={r2, @in={{0x2, 0x4e24, @local}}, 0x0, 0x65b3, 0x7, 0x200, 0x20}, &(0x7f0000000180)=0x98)

19:20:25 executing program 5:
r0 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0xd, 0x401)
r1 = socket$xdp(0x2c, 0x3, 0x0)
r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000040))
perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = semget$private(0x0, 0x0, 0x400)
semctl$IPC_INFO(r3, 0x3, 0x3, &(0x7f00000001c0)=""/74)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f000000a000))
clone(0x2000003, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f0000000080)={0x24000000, 0x3, 0x2})
setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x1, 0x4)
r4 = memfd_create(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0x4004550c, 0x0)
ioctl$FICLONE(r4, 0x40049409, r1)
readahead(r2, 0xff, 0x100)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000100)=0x1000200, 0xfffffffffffffeb0)

[ 1057.867743][ T8542] binder_transaction: 10 callbacks suppressed
[ 1057.867761][ T8542] binder: 8536:8542 transaction failed 29201/-28, size 504403158265495552-12288 line 3147
[ 1057.890713][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1057.890745][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1057.896585][    C0] protocol 88fb is buggy, dev hsr_slave_1
19:20:25 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1057.970714][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1057.976590][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1057.994585][    T7] rpcbind: RPC call returned error 22
[ 1058.002285][ T8564] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
19:20:25 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000040)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}]})

[ 1058.011620][ T8568] binder_alloc: binder_alloc_mmap_handler: 8536 20004000-20007000 already mapped failed -16
[ 1058.013012][ T8559] PKCS8: Unsupported PKCS#8 version
[ 1058.042434][    T7] rpcbind: RPC call returned error 22
[ 1058.060865][ T8542] binder: BINDER_SET_CONTEXT_MGR already set
19:20:26 executing program 5:
clock_gettime(0x0, &(0x7f00000000c0))
futimesat(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
request_key(0x0, 0x0, 0x0, 0xfffffffffffffffb)
r1 = socket(0x11, 0x802, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000080)={0x0, <r2=>0x0, 0x1})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={r2, 0x80000, r0})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'team0\x00\x10\x00L\x00`\x00\x00`\x00'})
prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000180))
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0)
getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, 0x0, &(0x7f0000000340))
ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000200))
getpeername$tipc(0xffffffffffffffff, 0x0, 0x0)
ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000400)=""/4096)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'team0\x00\xfd\xff\xff\xff\xc0\x00\x03\x00\x02\xff', 0x4bfd})

[ 1058.082838][ T8542] binder: 8536:8542 ioctl 40046207 0 returned -16
[ 1058.089519][ T8568] binder_alloc: 8536: binder_alloc_buf, no vma
[ 1058.099829][ T8568] binder: 8536:8568 transaction failed 29189/-3, size 504403158265495552-12288 line 3147
19:20:26 executing program 3:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x5, 0x2)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x20320})
rt_sigreturn()

19:20:26 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1058.132910][   T17] binder_release_work: 11 callbacks suppressed
[ 1058.132918][   T17] binder: undelivered TRANSACTION_ERROR: 29201
19:20:26 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

19:20:26 executing program 2:
clone(0x2102101ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pselect6(0x5, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0)

[ 1058.228378][ T7831] binder: undelivered TRANSACTION_ERROR: 29189
19:20:26 executing program 3:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x80200, 0x0)
r1 = geteuid()
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@ipv4={[], [], @broadcast}, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@mcast1}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f0000000340)=0xe8)
getresuid(&(0x7f0000000380)=<r4=>0x0, &(0x7f0000002480), &(0x7f00000024c0))
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000002a80)={0x0, @speck128})
lstat(&(0x7f0000002500)='./file0\x00', &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000025c0)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f00000026c0)=0xe8)
r7 = getuid()
r8 = getuid()
ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000002a00))
fstat(r0, &(0x7f0000002700)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000002a40)={0x0, @random="8144a2d54637"})
fstat(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0})
stat(&(0x7f0000002800)='./file0\x00', &(0x7f0000002840)={0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0})
r12 = getgid()
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000028c0)={0x0, 0x0, <r13=>0x0}, &(0x7f0000002900)=0xc)
r14 = getgid()
fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000002940)={{}, {0x1, 0x1}, [{0x2, 0x2, r1}, {0x2, 0x6, r2}, {0x2, 0x1, r3}, {0x2, 0x2, r4}, {0x2, 0x4, r5}, {0x2, 0x1, r6}, {0x2, 0x2, r7}, {0x2, 0x3, r8}, {0x2, 0x1, r9}], {0x4, 0x2}, [{0x8, 0x4, r10}, {0x8, 0x3, r11}, {0x8, 0x3, r12}, {0x8, 0x3, r13}, {0x8, 0x3, r14}], {0x10, 0x6}, {0x20, 0x5}}, 0x94, 0x1)
ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f0000000400)={0x1, 0x0, 0x2080, {0x10f004, 0x1f002, 0x2}, [], "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", "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"})
r15 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2)
ioctl$SG_IO(r15, 0x2285, &(0x7f00000003c0)={0x53, 0xffffffffffffffff, 0x6, 0x0, @scatter={0x0, 0x200000, 0x0}, &(0x7f0000000200)="5f39203a1ec6", 0x0, 0x0, 0x0, 0x0, 0x0})

[ 1058.292646][ T8589] device team0 left promiscuous mode
[ 1058.317543][ T8589] device team_slave_0 left promiscuous mode
[ 1058.338926][ T8600] binder_alloc: 8596: binder_alloc_buf size 720575940379291648 failed, no address space
[ 1058.356483][ T8589] device team_slave_1 left promiscuous mode
[ 1058.362813][ T8600] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
19:20:26 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x34000, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:20:26 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'})
r1 = socket(0x840000000002, 0x3, 0xff)
setsockopt$inet_int(r1, 0x0, 0x16, &(0x7f0000000040)=0x1, 0x4)
r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vfio/vfio\x00', 0x20001, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000380)=0x16be496672951ca1)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20ncci\x00', 0x2000, 0x0)
writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="1ffd21d320a6555eb0019d1bfc7446be25d66a8a3a73d0b7d0522cdedba8114cd53cfd19fb0fa29c327674c362919d2604a55266ed709553f07f1db9", 0x3c}], 0x1)
getsockopt$inet_mreqsrc(r0, 0x0, 0x2d, &(0x7f0000000240)={@initdev, @multicast2, @broadcast}, &(0x7f0000000280)=0xc)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x20000000304, @broadcast}, 0x5, {0x2, 0x0, @local}, 'syzv\xfb\xbdH\x10lMK\x00'})

[ 1058.391199][ T8600] binder: 8596:8600 transaction failed 29201/-28, size 720575940379279360-12288 line 3147
[ 1058.425552][ T8604] binder_alloc: binder_alloc_mmap_handler: 8596 20004000-20007000 already mapped failed -16
[ 1058.459127][ T8600] binder: BINDER_SET_CONTEXT_MGR already set
[ 1058.471004][ T8600] binder: 8596:8600 ioctl 40046207 0 returned -16
19:20:26 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x400300, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1058.502931][ T8604] binder_alloc: 8596: binder_alloc_buf, no vma
[ 1058.506553][   T17] binder: undelivered TRANSACTION_ERROR: 29201
[ 1058.533927][ T8604] binder: 8596:8604 transaction failed 29189/-3, size 720575940379279360-12288 line 3147
[ 1058.557352][ T7831] binder: undelivered TRANSACTION_ERROR: 29189
19:20:26 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

19:20:26 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1058.702234][ T8614] binder_alloc: 8613: binder_alloc_buf size 1297036692682715136 failed, no address space
[ 1058.745751][ T8614] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1058.756171][ T8614] binder: 8613:8614 transaction failed 29201/-28, size 1297036692682702848-12288 line 3147
[ 1058.782968][ T8619] binder_alloc: binder_alloc_mmap_handler: 8613 20004000-20007000 already mapped failed -16
19:20:26 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1058.834675][ T8619] binder_alloc: 8613: binder_alloc_buf, no vma
[ 1058.834961][ T8614] binder: BINDER_SET_CONTEXT_MGR already set
[ 1058.863850][ T8619] binder: 8613:8619 transaction failed 29189/-3, size 1297036692682702848-12288 line 3147
[ 1058.885824][ T8614] binder: 8613:8614 ioctl 40046207 0 returned -16
[ 1058.886430][ T7831] binder: undelivered TRANSACTION_ERROR: 29201
[ 1058.909499][ T7831] binder: undelivered TRANSACTION_ERROR: 29189
19:20:27 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

19:20:27 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:20:27 executing program 2:
mmap(&(0x7f0000946000/0xd000)=nil, 0xd000, 0xffffffffffffffff, 0x8032, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x5, 0x0)
finit_module(r0, &(0x7f0000000140)='[GPLmime_typesystem\x00', 0x2)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40086410, &(0x7f0000000180)={0x0, &(0x7f00000000c0)})
connect$rxrpc(r1, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x400, @empty, 0x6}}, 0x24)
r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x0, 0x8000)
write$input_event(r2, &(0x7f0000000040)={{0x77359400}, 0x3, 0x1000, 0x6}, 0x10)

19:20:27 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
socket$netlink(0x10, 0x3, 0x400000000000a)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r1, 0x200004)
sendfile(r0, r1, 0x0, 0x8000ffffffff)

19:20:27 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x201}, 0x14}}, 0x0)
r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)="2f1bdb928a7761c4b3c1293964c545c1e7aff47c51dfeeccf191463544b19135e65379d111fc8c4387eb09111b13650a7f5a1fcb8b8ad45e83ea0e9a6877c385ea45e2ea693f07a9c9b37527dd190afe05401ff758bd808f0dddf6c77d930ecec5dc44ded03a41687d485f518faa1aaf8908547ddc60467abb54a46eb212e7cd612d9f0a015ca2a216609a7e93e5c8842885125664c1c0992adbf03fb3f4cf609d", 0xa1, 0xfffffffffffffffa)
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000340)={r1, 0x100000001, 0xffff}, &(0x7f0000000380)={'enc=', 'raw', ' hash=', {'cmac(cast5)\x00'}}, &(0x7f0000000400)="fe9c1bc42663bd4764b0ed5bfaf4468f69ba04674283a0867fb8219e05f66f8ecc7fa8bcf42a41e0b24a531b0ca30f4292654803f398e297656d4fb83c9fa89b1236d9111194dd179e4390484e79a9b3d0eacc0ae0a4132466ee625f2d3510e55ad21c97ac96ef835b4bbc0e87c6204d7da25ab3ab3b57f7f4ec3264c45bf496adbdf068d590c51c7baf7b1e7881ee4d27d8cdf8b5db75886b09e09fb36277e08d570f483ceea5dae4873593f2363b578a61d4d61cd5878f3ef5f14be181f38a6f01ba8e439b077fec", &(0x7f0000000500)=""/209)
r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x3, 0xff)
write$P9_RREADDIR(r2, &(0x7f00000000c0)={0x122, 0x29, 0x2, {0x9fc, [{{0x2e, 0x3, 0x7}, 0x5, 0x2, 0x7, './file0'}, {{0x2, 0x1, 0x5}, 0x200000000, 0xf306, 0x7, './file0'}, {{0x10, 0x100, 0x4}, 0x7, 0xffffffffffff8000, 0x7, './file0'}, {{0x1, 0x0, 0x1}, 0x81, 0x7fffffff, 0x7, './file0'}, {{0x0, 0x2, 0x2}, 0x1000, 0xfff, 0x7, './file0'}, {{0x2, 0x7}, 0x7, 0x100, 0x7, './file0'}, {{0x40, 0x4, 0x7}, 0x9, 0x6, 0x7, './file0'}, {{0x4, 0x2, 0x9}, 0xd79, 0x8, 0x7, './file0'}, {{0xa, 0x2}, 0x1c, 0x200, 0x7, './file0'}]}}, 0x122)
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x15)

19:20:27 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x5c101, 0x0)
write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x2}, 0x7)
syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
syz_genetlink_get_family_id$nbd(&(0x7f00000001c0)='nbd\x00')
lstat(0x0, 0x0)
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x2, 0x0)

[ 1059.314243][ T8640] binder_alloc: 8632: binder_alloc_buf size 2305843009213706240 failed, no address space
19:20:27 executing program 2:
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r0 = getpgrp(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r1, 0x103)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
recvmmsg(r1, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2)
write$cgroup_pid(r3, &(0x7f0000000080)=r0, 0x12)
write(r2, &(0x7f0000000100), 0x34000)

19:20:27 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x80ffffff, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1059.367048][ T8640] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1059.382755][ T8640] binder: 8632:8640 transaction failed 29201/-28, size 2305843009213693952-12288 line 3147
[ 1059.438691][ T8652] binder_alloc: binder_alloc_mmap_handler: 8632 20004000-20007000 already mapped failed -16
[ 1059.467517][ T8652] binder_alloc: 8632: binder_alloc_buf, no vma
19:20:27 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0xffffff7f, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1059.514428][ T8640] binder: BINDER_SET_CONTEXT_MGR already set
[ 1059.530560][ T8652] binder: 8632:8652 transaction failed 29189/-3, size 2305843009213693952-12288 line 3147
[ 1059.564659][ T8640] binder: 8632:8640 ioctl 40046207 0 returned -16
[ 1059.567532][ T7831] binder: undelivered TRANSACTION_ERROR: 29201
[ 1059.597325][T29106] binder: undelivered TRANSACTION_ERROR: 29189
19:20:27 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

[ 1059.710264][ T8666] binder_alloc: 8664: binder_alloc_buf size 4611686018427400192 failed, no address space
[ 1059.733798][ T8666] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1059.756939][ T8666] binder: 8664:8666 transaction failed 29201/-28, size 4611686018427387904-12288 line 3147
[ 1059.789637][ T8668] binder_alloc: binder_alloc_mmap_handler: 8664 20004000-20007000 already mapped failed -16
19:20:27 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0x1e, 0x1, 0x0)
sendmsg(r1, &(0x7f0000000140)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0)
getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000040)={<r2=>0x0, 0xc4d}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0)={r2, 0x8}, 0x8)
write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x1, 0x352, 0x9, 0x7, 0x7, 0x5f, 0xff, 0x1, 0xfff, 0x6, 0x1}, 0xb)

[ 1059.814456][ T8666] binder: BINDER_SET_CONTEXT_MGR already set
[ 1059.829358][ T8666] binder: 8664:8666 ioctl 40046207 0 returned -16
[ 1059.844470][ T8668] binder_alloc: 8664: binder_alloc_buf, no vma
19:20:27 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0xffffff80, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:20:27 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x5, 0x0)
fsetxattr$security_smack_transmute(r0, &(0x7f0000000100)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000240)='TRUE', 0x4, 0x1)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, 0x0, &(0x7f0000000040))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x0, 0x0)
sendmsg$rds(r2, &(0x7f0000004140)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000002c0)=""/166, 0xa6}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/246, 0xf6}, {&(0x7f0000001480)=""/160, 0xa0}], 0x4, &(0x7f0000003f80)=[@zcopy_cookie={0x10, 0x114, 0xc, 0x2385}, @cswp={0x58, 0x114, 0x7, {{0xa4, 0x1}, &(0x7f0000001580)=0x3, &(0x7f00000015c0)=0x1, 0x8bc2, 0xcff, 0x4, 0x3, 0x40, 0x3}}, @rdma_dest={0x18, 0x114, 0x2, {0x9, 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{0x0, 0x9}, {&(0x7f0000001600)=""/133, 0x85}, &(0x7f0000002d80)=[{&(0x7f00000016c0)=""/218, 0xda}, {&(0x7f00000017c0)=""/236, 0xec}, {&(0x7f00000018c0)=""/72, 0x48}, {&(0x7f0000001940)=""/237, 0xed}, {&(0x7f0000001a40)=""/28, 0x1c}, {&(0x7f0000001a80)=""/221, 0xdd}, {&(0x7f0000001b80)=""/157, 0x9d}, {&(0x7f0000001c40)=""/122, 0x7a}, {&(0x7f0000001cc0)=""/174, 0xae}, {&(0x7f0000001d80)=""/4096, 0x1000}], 0xa, 0xa, 0x400}}, @zcopy_cookie={0x10, 0x114, 0xc, 0x5}, @cswp={0x58, 0x114, 0x7, {{0x80, 0x8}, &(0x7f0000002e40)=0x401, &(0x7f0000002e80)=0x20, 0xb8, 0x7ff, 0x3, 0x81, 0x41, 0x8}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000002ec0)=""/4096, 0x1000}, &(0x7f0000003ec0), 0x10}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000003f00)=""/34, 0x22}, &(0x7f0000003f40), 0x20}}], 0x190, 0x4048000}, 0x40001)
getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000080)=0xc)
fcntl$getownex(r1, 0x10, 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0xc009, 0x8)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180))
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000200)=<r3=>0x0)
ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000140)=r3)
ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40106435, &(0x7f00000001c0)={0x6, 0x0, 0x10000})

[ 1059.895043][ T8668] binder: 8664:8668 transaction failed 29189/-3, size 4611686018427387904-12288 line 3147
[ 1059.908400][ T7831] binder: undelivered TRANSACTION_ERROR: 29201
19:20:27 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x5c101, 0x0)
write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x2}, 0x7)
syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
syz_genetlink_get_family_id$nbd(&(0x7f00000001c0)='nbd\x00')
lstat(0x0, 0x0)
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x2, 0x0)

19:20:27 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f00000001c0)=0x100, 0x4)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/btrfs-control\x00', 0x10000, 0x0)
r4 = mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3000000, 0x10, r1, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x5c, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)=[@fda={0x66646185, 0x0, 0x2, 0x27}, @ptr={0x70742a85, 0x1, &(0x7f0000000200), 0x1, 0x1, 0x13}, @fd={0x66642a85, 0x0, r3, 0x0, 0x1}], &(0x7f0000000300)=[0x28, 0x38, 0x18]}}, @enter_looper, @free_buffer={0x40086303, r4}, @decrefs], 0xc0, 0x0, &(0x7f00000003c0)="a5d0ae9cd2af7f948e80846968ae09a262ed6d0ee9f6fc95b9ae4632e9153ee5fb4d3bc33a3cadd3080ed48af22a5f596c68360c1ef45ae41529aacee0ad5a7f444c0687734091178b33e5dbf7686ef9a09455e2061fcb2c41fe0370c2e53de48cc6ac4e5ddff6af514772c092e0189a96c281f071b3ed19a60efd8100e747825c78663f7e6b4a1bc4b2190bd6c338a21847dd9457021c321c53dadd86b1ac54482d28882ca03d3437289eb2d0b85216b5fa1fd1e693e042dfb250fb9808b6b3"})
fchmod(0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"})
pipe(&(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x46, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12634840000000000000000004000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0})

[ 1059.959523][ T7831] binder: undelivered TRANSACTION_ERROR: 29189
19:20:27 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

19:20:28 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x40030000000000, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1060.145867][ T8685] binder: 8684:8685 got reply transaction with no transaction stack
[ 1060.166596][ T8688] binder: BINDER_SET_CONTEXT_MGR already set
[ 1060.177071][ T8685] binder: 8684:8685 ERROR: BC_REGISTER_LOOPER called without request
[ 1060.189861][ T8685] binder: 8685 RLIMIT_NICE not set
[ 1060.196584][ T8685] binder: 8685 RLIMIT_NICE not set
[ 1060.198517][ T8688] binder: 8687:8688 ioctl 40046207 0 returned -16
[ 1060.234975][ T8685] binder: 8685 RLIMIT_NICE not set
19:20:28 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1060.258362][ T8685] binder_alloc: 8684: binder_alloc_buf, no vma
[ 1060.269563][ T8695] binder_alloc: 8684: binder_alloc_buf size 5188146770730823680 failed, no address space
[ 1060.316534][ T8685] binder: send failed reply for transaction 2138 to 8684:8685
[ 1060.350984][ T8695] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 12280 (num: 1 largest: 12280)
19:20:28 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1060.384358][ T8698] binder_alloc: binder_alloc_mmap_handler: 8684 20001000-20004000 already mapped failed -16
[ 1060.401602][ T8695] binder_alloc: binder_alloc_mmap_handler: 8687 20004000-20007000 already mapped failed -16
[ 1060.435306][ T8685] binder: BINDER_SET_CONTEXT_MGR already set
[ 1060.476213][ T8685] binder: 8684:8685 ioctl 40046207 0 returned -16
[ 1060.476229][ T8688] binder: BINDER_SET_CONTEXT_MGR already set
[ 1060.487062][ T8688] binder: 8687:8688 ioctl 40046207 0 returned -16
[ 1060.515582][ T8698] binder: 8684:8698 ERROR: BC_REGISTER_LOOPER called without request
19:20:28 executing program 3:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(r0, &(0x7f0000004180)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)=""/230, 0xe6}, {&(0x7f0000000300)=""/223, 0xfffffffffffffe86}], 0x2, &(0x7f0000000440)=""/236, 0xec}, 0x2}, {{&(0x7f0000000540)=@nfc, 0x80, &(0x7f0000000880)=[{&(0x7f00000005c0)=""/56, 0x38}, {&(0x7f0000000600)=""/46, 0x2e}, {&(0x7f0000000640)=""/26, 0x1a}, {&(0x7f0000000680)=""/77, 0x4d}, {&(0x7f0000000700)=""/108, 0x6c}, {&(0x7f0000000780)=""/127, 0x7f}], 0x6, &(0x7f00000008c0)=""/2, 0x2}, 0xd8e}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000900)=""/255, 0xff}, {&(0x7f0000000a00)=""/42, 0x2a}], 0x2, &(0x7f0000000a80)=""/225, 0xe1}, 0xff}, {{&(0x7f0000000b80)=@xdp={0x2c, 0x0, <r2=>0x0}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000c00)=""/86, 0x56}, {&(0x7f0000000c80)=""/231, 0xe7}], 0x2, &(0x7f0000000dc0)=""/73, 0x49}, 0x5}, {{&(0x7f0000000e40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f00000021c0)=[{&(0x7f0000000ec0)=""/244, 0xf4}, {&(0x7f0000000fc0)=""/17, 0x11}, {&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000002000)=""/157, 0x170}, {&(0x7f00000020c0)=""/217, 0xd9}], 0x5, &(0x7f0000002200)=""/34, 0x22}, 0xa2}, {{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000002240)}, {&(0x7f0000002280)=""/135, 0x87}, {&(0x7f0000002340)=""/124, 0x7c}], 0x3, &(0x7f0000002400)=""/27, 0x1b}, 0x8}, {{&(0x7f0000002440)=@x25={0x9, @remote}, 0x80, &(0x7f0000002940)=[{&(0x7f00000024c0)=""/62, 0x3e}, {&(0x7f0000002500)=""/201, 0xc9}, {&(0x7f0000002600)=""/191, 0xbf}, {&(0x7f00000026c0)=""/25, 0x19}, {&(0x7f0000002700)=""/204, 0xcc}, {&(0x7f0000002800)=""/218, 0xda}, {&(0x7f0000002900)=""/5, 0x5}], 0x7, &(0x7f0000002980)=""/113, 0x71}, 0xd3}, {{&(0x7f0000002a00)=@caif=@dbg, 0x80, &(0x7f0000003c00)=[{&(0x7f0000002a80)=""/20, 0x14}, {&(0x7f0000002ac0)=""/241, 0xf1}, {&(0x7f0000002bc0)=""/4096, 0x1000}, {&(0x7f0000003bc0)=""/61, 0x3d}], 0x4}, 0x791cfb05}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000003c40)=""/187, 0xbb}, {&(0x7f0000003d00)}, {&(0x7f0000003d40)=""/51, 0x33}, {&(0x7f0000003d80)=""/173, 0xad}, {&(0x7f0000003e40)=""/55, 0x37}, {&(0x7f0000003e80)}, {&(0x7f0000003ec0)=""/190, 0xbe}, {&(0x7f0000003f80)=""/139, 0x8b}, {&(0x7f0000004040)=""/4, 0x4}], 0x9, &(0x7f0000004100)=""/84, 0x54}, 0xe982}], 0x9, 0x2000, &(0x7f00000042c0)={0x77359400})
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000004300)={@rand_addr="70d05a0a4928b59247f43d207dff1b0f", @rand_addr="e25f75eefcea616a940187bf60582bb4", @loopback, 0x5, 0x8, 0x0, 0x500, 0x1000, 0x2, r2})
sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000800)="24000000660007031dfffd946fa2830020200a000000ffffa61d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b138a32052b44e099d881e02546dcda4cc7e6397", 0x4c}], 0x1}, 0x0)

19:20:28 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

[ 1060.531959][ T8695] binder_alloc: 8684: binder_alloc_buf, no vma
[ 1060.558453][ T8693] binder_alloc: 8684: binder_alloc_buf, no vma
19:20:28 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1060.621275][ T8685] binder: 8684:8685 got reply transaction with no transaction stack
[ 1060.629662][T19041] binder: undelivered TRANSACTION_COMPLETE
[ 1060.667884][ T8698] binder: 8698 RLIMIT_NICE not set
[ 1060.706780][ T8709] binder_alloc: 8708: binder_alloc_buf size 5476377146882535424 failed, no address space
[ 1060.759853][ T8709] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1060.796238][ T8717] binder_alloc: binder_alloc_mmap_handler: 8708 20004000-20007000 already mapped failed -16
[ 1060.807794][ T8709] binder: BINDER_SET_CONTEXT_MGR already set
[ 1060.814721][ T8709] binder: 8708:8709 ioctl 40046207 0 returned -16
[ 1060.821756][ T8717] binder_alloc: 8708: binder_alloc_buf, no vma
19:20:28 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0x1e, 0x1, 0x0)
sendmsg(r1, &(0x7f0000000140)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0)
getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000040)={<r2=>0x0, 0xc4d}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0)={r2, 0x8}, 0x8)
write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x1, 0x352, 0x9, 0x7, 0x7, 0x5f, 0xff, 0x1, 0xfff, 0x6, 0x1}, 0xb)

19:20:28 executing program 3:
r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0xffff, 0x0)
ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x0, 0x0, 0x2})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000080)={0x2, 0x1, 0x3, 0x8, 0x0, 0x8, 0x4})
r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x3, 0x10000)
ioctl$BLKRRPART(r1, 0x125f, 0x0)

19:20:28 executing program 4:
ioctl$VIDIOC_ENUMAUDOUT(0xffffffffffffffff, 0xc0345642, &(0x7f0000000100)={0x8001, "e604cf2c62d3d87b8ea3e201254da3a28137abdcae599fd7cd99bb99a96d00", 0x2, 0x1})
pipe2(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={<r2=>0x0, 0x3c, &(0x7f0000000180)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e23, 0xffffffffffff8000, @rand_addr="9bc1576e3f69c387ca8a943f33d3e88d", 0x4}]}, &(0x7f0000000200)=0xc)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000280)={<r3=>r2, 0xfd}, &(0x7f00000003c0)=0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000140)=r3, 0x4)
exit(0x7)
getdents64(r5, &(0x7f00000000c0)=""/11, 0xeb)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = shmget(0x2, 0x600000, 0x1124, &(0x7f0000032000/0x600000)=nil)
shmat(r6, &(0x7f0000ff9000/0x4000)=nil, 0x2000)
ioctl$UI_SET_FFBIT(r4, 0x4004556b, 0x26)
r7 = mmap$binder(&(0x7f000045b000/0x2000)=nil, 0x2000, 0x4, 0x4010, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={r7})
r8 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002)
ioctl$SG_IO(r8, 0x2285, &(0x7f0000000240)={0x53, 0x0, 0x0, 0x0, @buffer={0xee, 0xee, &(0x7f00000002c0)=""/238}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0})

19:20:28 executing program 5:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffffef}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020100030e000000030000000000000005000600000000000a000040000000040000a6999c1900000000802100004000000100000012000002000100010000fdff00000200fd000005000500000000000a004872bbb6896209000000000000009aec3f3f7710aa000000ff1700400000"], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000000000000ae, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b0000f1ff000800040000000000"], 0x30}}, 0x0)
r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x8d, 0x8000)
bind$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1e)
getsockopt$inet_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000200)=""/105, &(0x7f0000000280)=0x69)
setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000140)={0x80}, 0x4)

19:20:28 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

19:20:28 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x80ffffff00000000, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:20:28 executing program 3:
r0 = socket$kcm(0xa, 0x2, 0x73)
getpeername(r0, 0x0, 0x0)

[ 1061.008706][ T8736] binder_alloc: binder_alloc_mmap_handler: 8728 20004000-20007000 already mapped failed -16
19:20:28 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0xffffff7f00000000, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:20:28 executing program 3:
pipe(&(0x7f0000000540)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000000))
write$P9_RREADDIR(r1, &(0x7f00000000c0)={0xb}, 0xb)
vmsplice(r1, &(0x7f0000001700)=[{&(0x7f0000000700)="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", 0x5a1}], 0x1, 0x0)
close(r2)
r3 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c)
splice(r0, 0x0, r2, 0x0, 0x10005, 0x0)

19:20:29 executing program 5:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x3, 0xfa00, @id_resuseaddr={&(0x7f0000000480)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r1}}, 0x48)
prctl$PR_GET_FPEXC(0xb, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18)

[ 1061.056661][ T8729] binder: BINDER_SET_CONTEXT_MGR already set
[ 1061.087456][ T8729] binder: 8728:8729 ioctl 40046207 0 returned -16
[ 1061.090845][ T8739] binder_alloc: 8728: binder_alloc_buf, no vma
19:20:29 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

19:20:29 executing program 3:
r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0)
poll(&(0x7f0000000080)=[{r0, 0x2411}], 0x1, 0x0)
ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0045627, &(0x7f0000000180)={0x3, 0xfffffffffffffffe, 0xe562, [], &(0x7f0000000140)=0x400000000000000})

[ 1061.435528][ T8754] binder_alloc_new_buf_locked: 1 callbacks suppressed
[ 1061.435539][ T8754] binder_alloc: 8752: binder_alloc_buf size 7493989779944517632 failed, no address space
[ 1061.488349][ T8754] binder_alloc_new_buf_locked: 1 callbacks suppressed
[ 1061.488365][ T8754] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1061.608673][ T8754] binder: BINDER_SET_CONTEXT_MGR already set
[ 1061.624226][ T8754] binder: 8752:8754 ioctl 40046207 0 returned -16
19:20:29 executing program 2:
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x200000, 0x0)
fchmodat(r0, &(0x7f00000001c0)='./file0\x00', 0x81)
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000240))
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'v\x00\x00\xf0\xff\x00\x00\x00\x00\x00\b\x00', 0x43732e5398416f19})
r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000)
setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x4e23, 0x100, @mcast2, 0x3}}, 0x0, 0xfffffffffffffffe, 0x0, "2ef3fdf89b934d56a524fe8baa45d7696925fe12aea1c72c8415b0f1fe0aa114b57450660b219bf7708d14be6525b8c1e5f83847e58fc98ba2d9419f23995017663914c9addd343093d5a480057cd88a"}, 0xd8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r1)

19:20:29 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1062.050739][    C1] net_ratelimit: 15 callbacks suppressed
[ 1062.050748][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1062.051240][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1062.056551][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1062.062802][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1062.130771][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1062.136715][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1062.371726][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1063.011454][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1063.017893][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1063.650703][    C1] protocol 88fb is buggy, dev hsr_slave_0
19:20:31 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x1, 0xfffffffffffffe0f)

19:20:31 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x10000000002, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300000000000000000000", 0x23}], 0x1}, 0x0)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0xb2da412f7404e411, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, <r1=>0x0})
ptrace$getsig(0x4202, r1, 0x872, &(0x7f0000000200))
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
renameat(r2, &(0x7f0000000140)='./file0\x00', r2, &(0x7f0000000180)='./file0\x00')
write$sndseq(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_GETXATTR(r2, &(0x7f0000000100)={0x18, 0xfffffffffffffff5, 0x3, {0x1ff}}, 0x18)
ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000280)=0xfffffffffffffffd)
ioctl$KVM_NMI(r0, 0xae9a)

19:20:31 executing program 5:
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, <r2=>0x0}, &(0x7f0000000240)=0x2)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, <r3=>0x0}, &(0x7f0000000180)=0xc)
keyctl$chown(0x4, r1, r2, r3)

19:20:31 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

19:20:31 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:20:31 executing program 2:
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x200000, 0x0)
fchmodat(r0, &(0x7f00000001c0)='./file0\x00', 0x81)
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000240))
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'v\x00\x00\xf0\xff\x00\x00\x00\x00\x00\b\x00', 0x43732e5398416f19})
r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000)
setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x4e23, 0x100, @mcast2, 0x3}}, 0x0, 0xfffffffffffffffe, 0x0, "2ef3fdf89b934d56a524fe8baa45d7696925fe12aea1c72c8415b0f1fe0aa114b57450660b219bf7708d14be6525b8c1e5f83847e58fc98ba2d9419f23995017663914c9addd343093d5a480057cd88a"}, 0xd8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r1)

19:20:31 executing program 5:
r0 = socket$inet(0xa, 0x801, 0x84)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x1, 0x5, [@rand_addr=0x5, @remote, @multicast2, @empty, @rand_addr=0x5]}, 0x24)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000000), &(0x7f0000000040)=0x8)

19:20:31 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1063.930505][ T8791] binder_alloc: 8790: binder_alloc_buf size 7782220156096229376 failed, no address space
[ 1063.956101][ T8791] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1064.001435][ T8791] binder_transaction: 12 callbacks suppressed
[ 1064.001455][ T8791] binder: 8790:8791 transaction failed 29201/-28, size 7782220156096217088-12288 line 3147
[ 1064.037425][ T8798] binder_alloc_mmap_handler: 1 callbacks suppressed
19:20:31 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x10000000002, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300000000000000000000", 0x23}], 0x1}, 0x0)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0xb2da412f7404e411, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, <r1=>0x0})
ptrace$getsig(0x4202, r1, 0x872, &(0x7f0000000200))
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
renameat(r2, &(0x7f0000000140)='./file0\x00', r2, &(0x7f0000000180)='./file0\x00')
write$sndseq(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_GETXATTR(r2, &(0x7f0000000100)={0x18, 0xfffffffffffffff5, 0x3, {0x1ff}}, 0x18)
ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000280)=0xfffffffffffffffd)
ioctl$KVM_NMI(r0, 0xae9a)

[ 1064.037461][ T8798] binder_alloc: binder_alloc_mmap_handler: 8790 20004000-20007000 already mapped failed -16
[ 1064.083370][ T8791] binder: BINDER_SET_CONTEXT_MGR already set
[ 1064.114863][ T8791] binder: 8790:8791 ioctl 40046207 0 returned -16
[ 1064.116424][ T8807] binder_alloc_new_buf_locked: 1 callbacks suppressed
19:20:32 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x34000, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1064.116433][ T8807] binder_alloc: 8790: binder_alloc_buf, no vma
[ 1064.143421][ T8807] binder: 8790:8807 transaction failed 29189/-3, size 7782220156096217088-12288 line 3147
19:20:32 executing program 5:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x4000, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @remote}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, &(0x7f0000000240)=0xe8)
setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000280)={@local, r1}, 0x14)
r2 = fcntl$getown(r0, 0x9)
fcntl$setownex(r0, 0xf, &(0x7f00000002c0)={0x2, r2})
r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0)
ioctl$VIDIOC_QUERYCAP(r3, 0x80684d00, &(0x7f0000000080))
ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000000))

19:20:32 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2)
r1 = dup(r0)
ioctl$PPPIOCGFLAGS(r1, 0x8004745a, 0x0)
recvmsg(r1, &(0x7f0000001380)={&(0x7f0000000040)=@rc, 0x80, &(0x7f0000001240)=[{&(0x7f00000000c0)=""/100, 0x64}, {&(0x7f0000000140)=""/133, 0x85}, {&(0x7f0000000200)=""/13, 0xd}, {&(0x7f0000000240)=""/4096, 0x1000}], 0x4, &(0x7f0000001280)=""/244, 0xf4}, 0x2100)
getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f00000013c0)={'icmp\x00'}, &(0x7f0000001400)=0x1e)
connect$rxrpc(r1, &(0x7f0000001440)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x0, @empty, 0x3}}, 0x24)

[ 1064.234569][T19041] binder_release_work: 11 callbacks suppressed
[ 1064.234586][T19041] binder: undelivered TRANSACTION_ERROR: 29201
[ 1064.273722][T19041] binder: undelivered TRANSACTION_ERROR: 29189
19:20:32 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000400), 0x8)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x40, &(0x7f0000000180)=[@vmwrite={0x8, 0x0, 0x5, 0x0, 0x9, 0x0, 0x1, 0x0, 0x1ad}, @cstype0={0x4, 0xe}], 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfe], 0x1f000})
ioctl$KVM_RUN(r3, 0xae80, 0x400000000000000)
ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f0000000040))

19:20:32 executing program 3:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x2480, 0x0)
r1 = getuid()
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast2, @in6=@loopback, 0x4e23, 0x200, 0x4e24, 0x8001, 0xa, 0x20, 0x20, 0x2f, 0x0, r1}, {0x1, 0x5, 0x6, 0x25, 0x9, 0x711682c7, 0x3, 0x100000001}, {0xfffffffffffffffa, 0x800, 0xffff, 0x4}, 0x3, 0x6e6bb4, 0x0, 0x0, 0x2}, {{@in6=@empty, 0x4d5, 0x6c}, 0xa, @in6=@rand_addr="3bdcc4b0a96ccefc4036754c0d584f87", 0x34ff, 0x3, 0x0, 0x2, 0x1, 0x1ff}}, 0xe8)
r2 = socket$inet6(0xa, 0x3, 0x8001000000002c)
connect$inet6(r2, &(0x7f00000000c0), 0x1c)
sendmsg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x24d}, 0xa00)

19:20:32 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x400300, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:20:32 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

19:20:32 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001d000700000000002200000000ff00066fed94c77220194f4bb00a124d09c569f8c28a9e333b710c570be8c7e3c335f6f4393a1a6f69e335a61e86664a33ef610dd0be4a8fde89770b5eada8554cdacea1c2e9cf75ad28807abde6d53bdd16d199c04a49bc8e24e5bc62ed03fb2a19d75adafe74d84bc0bf03983647f06a9f84bd295fc60d9d357467de28ff431c487c6f4c46137a49402d9e59222e62b009870003f2b012b42f3576e7d37a5945f7af620ae383d681bc428d7359a2bda4e23155331542aee9a9"], 0x14}}, 0x0)

19:20:32 executing program 5:
unshare(0x24020400)
mknod(&(0x7f00000000c0)='./file0\x00', 0x7c, 0x0)
creat(&(0x7f0000000880)='./file0\x00', 0x40)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socketpair(0x10, 0xf, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x47c, 0x258, 0x258, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000300), {[{{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev={0xac, 0x14, 0x14, 0x2a}, @broadcast, 0x2, 0xffffffff}}}, {{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x5000000, 0x97fa, 0x2}}}, {{@arp={@rand_addr=0x3d8e, @multicast1, 0xff0000ff, 0x0, @empty, {[0x0, 0xff, 0xff, 0xff, 0xff]}, @empty, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}, 0xf10, 0x1, 0x8, 0x0, 0x430, 0x2, 'veth0_to_hsr\x00', 'team_slave_0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @rand_addr=0x2, @empty, 0x2, 0x1}}}], {{[], 0xc0, 0xe4}, {0x24}}}}, 0x4c8)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40000, 0x0)
statx(r1, &(0x7f0000000180)='./file0\x00', 0x7900, 0x440, &(0x7f00000001c0))
truncate(&(0x7f0000000140)='./file0\x00', 0x0)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080))
ioctl$TCSETS(r2, 0x5402, &(0x7f0000000840)={0x0, 0x0, 0x80000001, 0x7, 0x8, 0x7ff, 0x9, 0x7, 0xfffffffffffffffc, 0x1, 0x5, 0x6})

[ 1064.397995][ T8831] binder_alloc: 8830: binder_alloc_buf size 8358680908399652864 failed, no address space
19:20:32 executing program 3:
r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x204180)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000080)={0x0, r1})
mlockall(0x1)
sysfs$2(0x4, 0x0, 0x0)

19:20:32 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1064.464645][ T8831] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1064.496168][ T8831] binder: 8830:8831 transaction failed 29201/-28, size 8358680908399640576-12288 line 3147
[ 1064.531292][ T8844] binder_alloc: binder_alloc_mmap_handler: 8830 20004000-20007000 already mapped failed -16
19:20:32 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xc67a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d5, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
io_setup(0x1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0))
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0x5)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
prctl$PR_SET_THP_DISABLE(0x29, 0x0)
r2 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98)

19:20:32 executing program 5:
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x20800, 0x0)
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r0, 0x10d, 0x2, &(0x7f0000000180), &(0x7f0000000040)=0x4)

19:20:32 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1064.574945][ T8831] binder: BINDER_SET_CONTEXT_MGR already set
[ 1064.584168][ T8831] binder: 8830:8831 ioctl 40046207 0 returned -16
[ 1064.612620][ T8848] binder_alloc: 8830: binder_alloc_buf, no vma
[ 1064.664523][T19041] binder: undelivered TRANSACTION_ERROR: 29201
[ 1064.672060][ T8848] binder: 8830:8848 transaction failed 29189/-3, size 8358680908399640576-12288 line 3147
[ 1064.690055][T19041] binder: undelivered TRANSACTION_ERROR: 29189
19:20:33 executing program 2:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000600)='/proc/self/net/pfkey\x00', 0x80000, 0x0)
openat$cgroup(r0, &(0x7f0000000640)='syz0\x00', 0x200002, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000680)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={<r2=>0xffffffffffffffff}, 0x111}}, 0xd)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000040)=0x5, r2, 0x0, 0x0, 0x1}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff}, 0x106, 0x3}}, 0x20)
removexattr(&(0x7f0000000480)='./file0\x00', &(0x7f00000005c0)=@known='system.posix_acl_default\x00')
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000380)=[{}], r3, 0x1, 0x1, 0x400000}}, 0x20)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm-control\x00', 0x84000, 0x0)
recvmsg(r4, &(0x7f0000000580)={&(0x7f0000000400)=@caif=@rfm, 0x80, &(0x7f0000000480), 0x0, &(0x7f00000004c0)=""/183, 0xb7}, 0x2000)
close(r1)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0), 0x0, 0x9}}, 0x20)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a45320, &(0x7f0000000280)={{0x80000001, 0xffff}, 'port0\x00', 0x44, 0xc0001, 0x2, 0x7, 0x3, 0x9, 0x7ff, 0x0, 0x3, 0x5})

19:20:33 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, 0x0, 0x3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x250)
openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x60, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="e33b00005e37b05e731e", @ANYRES16=r1, @ANYBLOB="2508000000000000000001000000000000000c4100000014001462726f6144636173742d6c696e6b0000"], 0x30}}, 0x0)

19:20:33 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:20:33 executing program 5:
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000), 0x2)
r1 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x20, 0x18100)
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000340)=""/27, &(0x7f0000000380)=0x1b)
r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x2, 0x2)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f00000002c0)=0x70, 0x4)
r3 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x9, 0x50000)
setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x4e21, @broadcast}}, 0x0, 0x7ff, 0x0, "33441f9a23a56594ff75871b8d325c62f77353a1a10fdf7a58a5edfec34ad246eff33925c8faf340544401c2774f6ad17d30e816f6fd9700a7a518ba0b92e31cf619ec2fd5379ed9851c203fcc3a6ec5"}, 0xd8)

19:20:33 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

19:20:33 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x80, 0x0)
io_setup(0x0, &(0x7f0000000180)=<r2=>0x0)
io_submit(r2, 0x6, &(0x7f0000000a40)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x4, r1, &(0x7f0000000280)="f6c773ec5fbd8650c6c7f5191cccee01a88a22e85e635b3c1837bda216e375a4daf866ab67424efbc99aff6e04a0ba82b3b13150bad203c6a8228ebb5a7f824b17ee6ba33b093d169cf8ae2099211261985fc43d6bf3b4c7b69a6adea980c901ad5f95adce372455efa0654b2ed7a418c9bffca39651018ec51afb6d674f2cb0826178e0d4", 0x85, 0x9, 0x0, 0x0, r1}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x80, r0, &(0x7f0000000440)="64fc4a87e7cead69d0f3e8be5dc940662251cef7fbb12563a69a02087cb0fc901455b06d51372ab6293c4dc652d14f1d6c02bb549a4ef3d9a376056678f050ebd8322d8488d15adaf6abb45f179aa38f0dfd35f2771fc48f0e1a5ac4eeb16b3e5aacad49c086741f90d5880b28e59c3d135175cc721626e1e54c5744e74973880bc366735f6c8555eb918a3559a266439bcd4ed06fb902a7558b03a65b73009fd68af64114c406cbd2f20b057442dbb3d23eca9683d7239f4ef2b284dbbb657d819bacfa2f9804268027c75905a6fa87bd3c", 0xd2, 0x5, 0x0, 0x1, r1}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x6, 0xa84f, r0, &(0x7f0000000700)="7955f9186c6df9420b975a36efe6fd4a2ab9dbca4042cc16f7bdea51921bd6dca2301d76e5ca847970e427b05cee185c48eac3d17458bfe501c87d171fa470f9c6cb054a1c3e63e0576879409b5989ee225dbd4b52dadb5fe662e4a2ddf2149b03eb06ecff5e89c82f225d95a86b5f1f225e491cd6ef4f7eea80ef885c8d213cd356efda885ed8421a620c535383272baa5eafa1985d42a219798cf9dd0838c51742dbfa618920f45cb30918d775a285c0da3af46d3ab68843", 0xb9, 0x8001, 0x0, 0x1, 0xffffffffffffff9c}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x9, r1, &(0x7f00000007c0)="99b2b7f5415e736516e8cca0a7a967250bbe955893f4413eb7e56a6fe81c9e62b6a3f9008effb71627c12a7bb3c13ba2742d148e7dac98f801d3d366d573ebd167c09c5375aa0fdf03457bcf11f95ee28a7d193634f694cd9227c9fa12e4d88901c5cb451defd969104972de3392302607e66767c55a4eaa1cc4ea7f6fd1217c2744e51fc05bed2faaaa9d4259461983f1385f0d185de62d736d6ebef1c579974e73eebaadc75abb18e1", 0xaa, 0xffffffffffffffcc, 0x0, 0x1, r1}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x2, r1, &(0x7f0000000880)="7f", 0x1, 0x1f, 0x0, 0x1, r1}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x1, 0x7fffffff, r0, &(0x7f0000000900)="bb6417a0111321b27b04b082f5ccb21431cac5a29d44012b5e15a3adc4dc083dc545f3231527a2e5f68bddb21f6624ce1c2243c0bd5bd0151330b52b8c7e1d02dde9e0d2c8ed3e0cd62cb86bb08613b30335544219ce1d9d7c5398c598b542d895487e8a03074816418845299bfe44737714f90291882136358e7afa8f84adb23b5a77bc95eb2c70f59aa214d89a117c016a7c9b25875c7a9722552cebdc910f38153993c22719db1f284a777540b0531803668589e19a8440a370d35fbc79a2da2e55a318c4008994cd67aa", 0xcc, 0xea9, 0x0, 0x0, r1}])
setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x6f, 0x1, 0x6, 0x1ff, 0x3}, 0xc)
r3 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r4 = add_key$user(&(0x7f0000003f40)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r3, r3}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000240)={&(0x7f00000001c0)={'crc32\x00'}})

19:20:33 executing program 3:
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video37\x00', 0x2, 0x0)
ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000040)={0x1, 0x3, @start})
ioctl$VIDIOC_S_PRIORITY(r0, 0x40045644, 0x2)

19:20:33 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x80ffffff, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1065.654228][ T8888] binder_alloc: 8887: binder_alloc_buf size 8791026472627220480 failed, no address space
[ 1065.696148][ T8888] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1065.722305][ T8888] binder: 8887:8888 transaction failed 29201/-28, size 8791026472627208192-12288 line 3147
19:20:33 executing program 3:
socketpair$unix(0x1, 0x1000100000000001, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x8ec3, 0x0)
r3 = dup2(r1, r2)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0)
pipe(&(0x7f0000000000))

[ 1065.747399][ T8903] binder_alloc: binder_alloc_mmap_handler: 8887 20004000-20007000 already mapped failed -16
[ 1065.771020][ T8888] binder: BINDER_SET_CONTEXT_MGR already set
[ 1065.790747][ T8888] binder: 8887:8888 ioctl 40046207 0 returned -16
19:20:33 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x80, 0x0)
io_setup(0x0, &(0x7f0000000180)=<r2=>0x0)
io_submit(r2, 0x6, &(0x7f0000000a40)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x4, r1, &(0x7f0000000280)="f6c773ec5fbd8650c6c7f5191cccee01a88a22e85e635b3c1837bda216e375a4daf866ab67424efbc99aff6e04a0ba82b3b13150bad203c6a8228ebb5a7f824b17ee6ba33b093d169cf8ae2099211261985fc43d6bf3b4c7b69a6adea980c901ad5f95adce372455efa0654b2ed7a418c9bffca39651018ec51afb6d674f2cb0826178e0d4", 0x85, 0x9, 0x0, 0x0, r1}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x80, r0, &(0x7f0000000440)="64fc4a87e7cead69d0f3e8be5dc940662251cef7fbb12563a69a02087cb0fc901455b06d51372ab6293c4dc652d14f1d6c02bb549a4ef3d9a376056678f050ebd8322d8488d15adaf6abb45f179aa38f0dfd35f2771fc48f0e1a5ac4eeb16b3e5aacad49c086741f90d5880b28e59c3d135175cc721626e1e54c5744e74973880bc366735f6c8555eb918a3559a266439bcd4ed06fb902a7558b03a65b73009fd68af64114c406cbd2f20b057442dbb3d23eca9683d7239f4ef2b284dbbb657d819bacfa2f9804268027c75905a6fa87bd3c", 0xd2, 0x5, 0x0, 0x1, r1}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x6, 0xa84f, r0, &(0x7f0000000700)="7955f9186c6df9420b975a36efe6fd4a2ab9dbca4042cc16f7bdea51921bd6dca2301d76e5ca847970e427b05cee185c48eac3d17458bfe501c87d171fa470f9c6cb054a1c3e63e0576879409b5989ee225dbd4b52dadb5fe662e4a2ddf2149b03eb06ecff5e89c82f225d95a86b5f1f225e491cd6ef4f7eea80ef885c8d213cd356efda885ed8421a620c535383272baa5eafa1985d42a219798cf9dd0838c51742dbfa618920f45cb30918d775a285c0da3af46d3ab68843", 0xb9, 0x8001, 0x0, 0x1, 0xffffffffffffff9c}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x9, r1, &(0x7f00000007c0)="99b2b7f5415e736516e8cca0a7a967250bbe955893f4413eb7e56a6fe81c9e62b6a3f9008effb71627c12a7bb3c13ba2742d148e7dac98f801d3d366d573ebd167c09c5375aa0fdf03457bcf11f95ee28a7d193634f694cd9227c9fa12e4d88901c5cb451defd969104972de3392302607e66767c55a4eaa1cc4ea7f6fd1217c2744e51fc05bed2faaaa9d4259461983f1385f0d185de62d736d6ebef1c579974e73eebaadc75abb18e1", 0xaa, 0xffffffffffffffcc, 0x0, 0x1, r1}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x2, r1, &(0x7f0000000880)="7f", 0x1, 0x1f, 0x0, 0x1, r1}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x1, 0x7fffffff, r0, &(0x7f0000000900)="bb6417a0111321b27b04b082f5ccb21431cac5a29d44012b5e15a3adc4dc083dc545f3231527a2e5f68bddb21f6624ce1c2243c0bd5bd0151330b52b8c7e1d02dde9e0d2c8ed3e0cd62cb86bb08613b30335544219ce1d9d7c5398c598b542d895487e8a03074816418845299bfe44737714f90291882136358e7afa8f84adb23b5a77bc95eb2c70f59aa214d89a117c016a7c9b25875c7a9722552cebdc910f38153993c22719db1f284a777540b0531803668589e19a8440a370d35fbc79a2da2e55a318c4008994cd67aa", 0xcc, 0xea9, 0x0, 0x0, r1}])
setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x6f, 0x1, 0x6, 0x1ff, 0x3}, 0xc)
r3 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r4 = add_key$user(&(0x7f0000003f40)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r3, r3}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000240)={&(0x7f00000001c0)={'crc32\x00'}})

19:20:33 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0xffffff7f, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1065.811533][ T8903] binder_alloc: 8887: binder_alloc_buf, no vma
[ 1065.830211][T19041] binder: undelivered TRANSACTION_ERROR: 29201
[ 1065.847477][ T8903] binder: 8887:8903 transaction failed 29189/-3, size 8791026472627208192-12288 line 3147
19:20:33 executing program 2:
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0)
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getdents(r0, &(0x7f00000005c0)=""/4096, 0x1000)
getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4)

[ 1065.880504][T29950] binder: undelivered TRANSACTION_ERROR: 29189
19:20:33 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

[ 1065.930753][ T7831] psmouse serio6: Failed to reset mouse on : -5
[ 1066.044888][ T8926] binder_alloc: 8925: binder_alloc_buf size -9223372036854763520 failed, no address space
[ 1066.057368][ T8926] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1066.071237][ T8926] binder: 8925:8926 transaction failed 29201/-28, size -9223372036854775808-12288 line 3147
[ 1066.084869][ T8930] binder_alloc: binder_alloc_mmap_handler: 8925 20004000-20007000 already mapped failed -16
19:20:34 executing program 4:
setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5)
recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000001780)=""/203, 0xcb}, {&(0x7f0000001880)=""/129, 0x81}], 0x2}}], 0x1, 0x120, 0x0)
io_setup(0x1, &(0x7f0000000080)=<r0=>0x0)
r1 = epoll_create(0x7)
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x3, r1, &(0x7f00000000c0)="d9f117e3be408cb002d29e8a3d52c11a3b660ac7da1c4733d07e4159f6261ea2b60026fe016aa0", 0x27, 0x1, 0x0, 0x2, 0xffffffffffffff9c}, &(0x7f0000000180))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000340)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="e180db4e3b23cdde86a3b7ae4fdb961983a44c4bca5351a6904cf9b053d46ee6", 0x20)
r3 = accept4(r2, 0x0, &(0x7f0000000000), 0x0)
recvmmsg(r3, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400})
gettid()
r4 = dup(0xffffffffffffffff)
read$eventfd(r4, 0x0, 0x223)
getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, &(0x7f0000000040))

19:20:34 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x3, 0x1)
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x800, 0x0)
ioctl$RTC_IRQP_READ(r0, 0x8004700b, &(0x7f0000000140))
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VIDIOC_TRY_FMT(r1, 0xc0cc5640, 0x0)
r2 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl(r2, 0xfff7ffffffffffc8, &(0x7f0000000080))
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101080, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc2c45513, &(0x7f0000000180)={{0x8, 0x4, 0x1260, 0x3, 'syz0\x00', 0x1f}, 0x0, [0x8, 0x9, 0x3, 0x1, 0xb2, 0x5, 0x6, 0x7, 0x3, 0x1f, 0x0, 0xffffffffffffffe1, 0x10000, 0x7e7c, 0x6, 0x8, 0x9, 0x0, 0x800, 0x2, 0x2, 0x4f, 0xcb, 0x5, 0x2, 0x20000, 0x100, 0x6, 0x115bb2dd, 0x6, 0x80000000, 0xbdd, 0x4, 0x2, 0x88, 0x0, 0x0, 0x101, 0x6, 0x10000, 0xf523, 0x0, 0x3, 0x1f, 0x8, 0x3, 0x80000000, 0xfffffffffffffff8, 0x1, 0x0, 0x8, 0xe42a, 0xa965, 0x2, 0x3, 0x800, 0x2, 0x5, 0x831, 0x0, 0x2, 0x3, 0x0, 0x1, 0x3, 0xffffffff, 0x101, 0x401, 0x3, 0x5, 0x50f, 0x988d, 0xfffffffffffffffd, 0x200, 0x0, 0x8000, 0x2, 0x6, 0x200, 0x80, 0x6, 0x2, 0x9a, 0x1b91, 0x2, 0x186f, 0x1, 0x7ff, 0x4, 0x0, 0x4a, 0x9, 0x401, 0x5, 0x5, 0x8, 0x800, 0x1ff, 0x6, 0x2, 0x7, 0x7, 0xff, 0x3ff, 0x61, 0x3, 0x80000001, 0x4dc8, 0x9, 0x8, 0x5, 0x6a, 0x10000, 0x200, 0x100, 0x10001, 0x3f, 0x100000001, 0x100, 0x6, 0x9, 0x3, 0x3, 0x1, 0xffffffff, 0x1, 0x8, 0x4], {0x77359400}})
ioctl$EVIOCGSW(r1, 0x8040451b, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0x80045505, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, @start})

[ 1066.096566][ T8926] binder: BINDER_SET_CONTEXT_MGR already set
[ 1066.103426][ T8926] binder: 8925:8926 ioctl 40046207 0 returned -16
[ 1066.110154][ T8930] binder_alloc: 8925: binder_alloc_buf, no vma
[ 1066.117122][ T8930] binder: 8925:8930 transaction failed 29189/-3, size -9223372036854775808-12288 line 3147
[ 1066.149002][T29950] binder: undelivered TRANSACTION_ERROR: 29189
[ 1066.203766][ T8933] usb usb3: usbfs: interface 0 claimed by hub while 'syz-executor.3' sets config #-1
[ 1066.204018][T29950] binder: undelivered TRANSACTION_ERROR: 29201
[ 1066.226456][ T8938] usb usb3: usbfs: interface 0 claimed by hub while 'syz-executor.3' sets config #-1
[ 1067.170781][    C0] net_ratelimit: 19 callbacks suppressed
[ 1067.176704][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1067.182498][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1067.810755][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1067.816747][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1068.290777][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1068.296873][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1068.300778][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1068.308666][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1068.370802][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1068.376829][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1068.490803][ T7831] misc userio: Buffer overflowed, userio client isn't keeping up
[ 1071.850791][ T7831] misc userio: Buffer overflowed, userio client isn't keeping up
[ 1072.450760][    C1] net_ratelimit: 15 callbacks suppressed
[ 1072.450770][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1072.450802][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1072.456584][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1072.462302][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1072.531304][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1072.537215][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1072.770826][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1073.410832][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1073.416719][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1074.050730][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1075.630797][ T7831] misc userio: Buffer overflowed, userio client isn't keeping up
[ 1077.570771][    C0] net_ratelimit: 17 callbacks suppressed
[ 1077.576513][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1077.582326][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1078.210719][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1078.216619][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1078.690696][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1078.690722][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1078.696607][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1078.702438][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1078.770736][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1078.776601][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1079.210759][ T7831] misc userio: Buffer overflowed, userio client isn't keeping up
[ 1082.850713][    C0] net_ratelimit: 16 callbacks suppressed
[ 1082.850736][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1082.856416][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1082.856470][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1082.862257][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1082.930698][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1082.936590][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1083.170717][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1083.420696][ T7831] misc userio: Buffer overflowed, userio client isn't keeping up
[ 1083.810750][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1083.816688][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1084.450681][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1085.532560][ T7831] input: PS/2 Generic Mouse as /devices/serio6/input/input26
[ 1085.750702][ T7831] psmouse serio6: Failed to enable mouse on 
19:20:54 executing program 5:
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x1, 0x0)
setxattr$security_ima(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0)
r1 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x5, 0x12000)
renameat(r0, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00')
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000180)={<r2=>0x0, 0xd9, "bd9acc36e5d6f45d47ac60d09ee73b5bd41902c14e3518a81ce3b2f59d2f4d23cb174c0600e1b0015660457c4373ed0cd9457aecdbc73f520f7acd72b1d2abf793be83c47a25603db0306843b4321d48bd4226fcf415d08ad80678580d18e7cd65c482499510efc82811de7db612d408109a3a0e61ba97e3e8d8d26aee1afa4df3c2358a7d88635ef3503fe647645beccb27fe959df4d5d00daa7df588390413d69efc996eee2e03ba62c721090abf99c7ec6d4689005e5a97c2b122dd3ecf2c49e6e516e4ad12ad4e6d2a83e8ca65f2e86854e21603c538e1"}, &(0x7f00000002c0)=0xe1)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000300)={r2, 0x800, 0x20}, &(0x7f0000000340)=0xc)

19:20:54 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0xffffff80, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:20:54 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x159, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x31, 0x829, 0x0, 0x0, {0x2803}, [@nested={0x51, 0x0, [@typed={0x14, 0x1, @ipv6=@loopback}]}]}, 0x2c}}, 0x0)
r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x4cd, 0x100)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x3, 0x202, 0x101, 0xfff, <r3=>0x0}, &(0x7f00000000c0)=0x10)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000100)={r3, 0x8, 0x1ff, 0x5, 0x3}, 0x14)

19:20:54 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf82f000000000000, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

19:20:54 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000300)=0x5, 0x4)
shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ffe000/0x2000)=nil)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x100, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000180))
fstat(0xffffffffffffffff, &(0x7f00000001c0))
r1 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xfffffffffffffffc}, 0x8)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x5}, 0x8)
sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
sendmsg(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="e1", 0x1}], 0x1}, 0x8800)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000040), 0x8)
getgid()
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240))
getpid()
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x8991, &(0x7f0000000000)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'})

19:20:54 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10)
bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
r2 = dup2(r0, r0)
write$P9_RWRITE(r2, &(0x7f0000000080)={0xb}, 0xb)
sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3, 0x0, 0x0)
poll(&(0x7f0000000040)=[{r2}], 0x1, 0xe0)
fcntl$setstatus(r1, 0x4, 0x40000)
dup2(r1, r0)

19:20:54 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2, 0x0)
write$apparmor_exec(r2, &(0x7f0000000040)={'exec ', '/dev/kvm\x00'}, 0xe)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000080)=0x4)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20})

[ 1086.441134][ T8950] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[ 1086.446258][ T8951] binder_alloc: 8949: binder_alloc_buf size -563231428398010368 failed, no address space
[ 1086.472387][ T8950] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
19:20:54 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x40030000000000, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:20:54 executing program 5:
r0 = socket$inet6(0xa, 0x4000000000000001, 0x8010000000000084)
listen(r0, 0x5)
sendto$inet(r0, 0x0, 0x0, 0x20044000, 0x0, 0xffffffffffffffdb)

[ 1086.559812][ T8951] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1086.582022][ T8951] binder: 8949:8951 transaction failed 29201/-28, size -563231428398022656-12288 line 3147
19:20:54 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:20:54 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000300)=0x5, 0x4)
shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ffe000/0x2000)=nil)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x100, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000180))
fstat(0xffffffffffffffff, &(0x7f00000001c0))
r1 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xfffffffffffffffc}, 0x8)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x5}, 0x8)
sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
sendmsg(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="e1", 0x1}], 0x1}, 0x8800)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000040), 0x8)
getgid()
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240))
getpid()
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x8991, &(0x7f0000000000)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'})

[ 1086.654268][ T8975] binder_alloc: binder_alloc_mmap_handler: 8949 20004000-20007000 already mapped failed -16
19:20:54 executing program 2:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x100000000014b03e, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
ioctl$KDGKBLED(r2, 0x4b64, &(0x7f00000000c0))
write$cgroup_type(r2, 0x0, 0xfffffffffffffe6d)
ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0)
ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f0000000440))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
poll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x8100}, {}, {r1, 0x8020}, {r2, 0x10}, {r2, 0xc003}, {r1, 0xc010}, {0xffffffffffffffff, 0x1000}, {r1, 0x1000}], 0x8, 0x200)
lsetxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='security.ima\x00', &(0x7f0000000480)=@v2={0x5, 0x3, 0x4, 0x8, 0xe0, "9db485b825dd41a67c992ea1ff5b148c93fd58b8d19a9f7bb880a45d5003103bd2c4c95aff6a0ebbd00d3a67958dee4f0bf9b237129426fd28e36aca04b1ab7d9f86fa5178f2ad996efbe8cbe1bf136e6c57696f800a77a71890488756a6713ba86d21539b288ff7db8b7082808317e1cbcf0b467deea1db62c3151496eb1dffc815b42a4bbf1d82b11990b66c7fafbd7861466fedec738aaf3fac1cb806a55d940b176510df9ff35ac9a1cefd5ffaad832c6cbdddb0187a1888c87e908d1ec6a24f9deeabb08ab9f6d95a9c52a167cc5ed18ebf69529b0b3b7357a7fd9440b8"}, 0xea, 0x1)
prlimit64(0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0xff, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000180))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000240))
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @multicast2}, @in=@remote}}, {{@in=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0xe8)
write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="710000007d010000005100b700030000003003000000020000000000000000000400060000000872697374e363757367725669643a44650100250b006173796d6d657472696300737148d7fb7c2b15606574726963", @ANYRES32, @ANYRES32], 0x5d)
request_key(&(0x7f000000aff5)='asymmetric\x00', 0x0, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0)
ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000100)={0x0, 0x0, 0x69c4})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000080))
write$FUSE_STATFS(r0, 0x0, 0x0)

19:20:54 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:20:54 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008)
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x4001, 0x0)
ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000000100)={0x2})
clone(0x0, &(0x7f0000000240), 0x0, 0x0, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000240)=0x6, 0x4)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000180)={<r2=>0x0, 0x0, 0xfc25})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000001c0)={<r3=>0x0, 0x80000, r0})
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000200)={r2, r3, 0x100000001})
ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000001ac0)={'\x00', {0x2, 0x4e21, @remote}})
ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f00000000c0))
syz_open_dev$usbmon(&(0x7f0000001a80)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0)
preadv(r1, &(0x7f0000000040)=[{&(0x7f0000001b00)=""/4096, 0x1000}], 0x1, 0x0)
userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0)

[ 1086.757074][ T8984] binder: BINDER_SET_CONTEXT_MGR already set
[ 1086.796552][ T8984] binder: 8949:8984 ioctl 40046207 0 returned -16
[ 1086.831002][T19041] binder: undelivered TRANSACTION_ERROR: 29201
[ 1086.838194][ T8975] binder_alloc: 8949: binder_alloc_buf, no vma
[ 1086.876281][ T8975] binder: 8949:8975 transaction failed 29189/-3, size -563231428398022656-12288 line 3147
[ 1086.890212][T29106] binder: undelivered TRANSACTION_ERROR: 29189
19:20:54 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
sendto(r0, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0)
userfaultfd(0x3)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)=<r1=>0x0)
r2 = syz_open_procfs(r1, 0x0)
ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f0000000600))
r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000280), 0x0)
ioctl$TCSETS(r2, 0x40045431, 0x0)
socket$inet6(0xa, 0x1000000000002, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00')
r5 = syz_open_procfs(0x0, &(0x7f0000000380)='projid_map\x00')
sendfile(r5, r4, 0x0, 0x10001)
openat$rfkill(0xffffffffffffff9c, 0x0, 0x400001, 0x0)
ioctl$int_in(r3, 0x5473, &(0x7f0000000000)=0x7ff0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180))
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1008}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x16}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400})

19:20:54 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

19:20:54 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1087.022988][ T9005] binder_alloc: 9004: binder_alloc_buf size -144678142324232192 failed, no address space
[ 1087.060811][ T9005] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1087.111086][ T9005] binder: 9004:9005 transaction failed 29201/-28, size -144678142324244480-12288 line 3147
[ 1087.151631][ T9011] binder_alloc: binder_alloc_mmap_handler: 9004 20004000-20007000 already mapped failed -16
[ 1087.168451][ T9005] binder: BINDER_SET_CONTEXT_MGR already set
[ 1087.201013][ T9005] binder: 9004:9005 ioctl 40046207 0 returned -16
[ 1087.231042][T29106] binder: undelivered TRANSACTION_ERROR: 29201
[ 1087.238020][ T9011] binder_alloc: 9004: binder_alloc_buf, no vma
[ 1087.261022][ T9011] binder: 9004:9011 transaction failed 29189/-3, size -144678142324244480-12288 line 3147
[ 1087.281711][T29106] binder: undelivered TRANSACTION_ERROR: 29189
19:20:55 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x80ffffff00000000, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:20:55 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000300)=0x5, 0x4)
shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ffe000/0x2000)=nil)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x100, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000180))
fstat(0xffffffffffffffff, &(0x7f00000001c0))
r1 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xfffffffffffffffc}, 0x8)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x5}, 0x8)
sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
sendmsg(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="e1", 0x1}], 0x1}, 0x8800)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000040), 0x8)
getgid()
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240))
getpid()
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x8991, &(0x7f0000000000)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'})

19:20:55 executing program 2:
r0 = socket$kcm(0xa, 0x122000000003, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000001480), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@pptp={0x18, 0x2, {0x2, @remote}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)="035db86376862c68fe800000000000004208c349d7c40346d59be1310600d92c2ae7e012e28b857c", 0x28}], 0x1}, 0x0)

19:20:55 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

19:20:55 executing program 4:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0)
openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0)
write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={r0, 0x7ff})
ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x80)
flock(r1, 0x6)
r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000100)={0x80033d, 0x20000000209, 0x0, <r3=>0xffffffffffffffff})
dup2(r2, r3)
open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="d41722649c1fbfdd93330ec902dd8f2be1abf1312f89ba723a21c72003cca60df1fd4b6f5b36611a96233fb5b4fead362985085c2cabe703ab23d4000000000000000000000000000000"], 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040), 0x4)

19:20:55 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0xdfa8c10, 0x2000)
ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000180)=0x3)
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='nfs4\x00', 0x0, &(0x7f0000dedf2f)='v3')
r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x469, 0x8000)
faccessat(r1, &(0x7f0000000040)='./file0\x00', 0x21, 0xe00)
ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000000c0)={'veth0\x00', {0x2, 0x4e22, @multicast2}})

19:20:55 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0xffffff7f00000000, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1087.459688][ T9021] binder_alloc: 9020: binder_alloc_buf size -4294955008 failed, no address space
19:20:55 executing program 5:
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x16\x00\x00\x00\x00\x00\x00')
getdents64(r0, &(0x7f0000000df0)=""/528, 0x7f355eb8)

19:20:55 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
syz_emit_ethernet(0x74, &(0x7f0000000100)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000000)=0x3f, 0x4)

[ 1087.510370][ T9021] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1087.559291][ T9021] binder: 9020:9021 transaction failed 29201/-28, size -4294967296-12288 line 3147
[ 1087.615891][ T9043] binder_alloc: binder_alloc_mmap_handler: 9020 20004000-20007000 already mapped failed -16
19:20:55 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:20:55 executing program 5:
r0 = socket$kcm(0x10, 0x200000000000003, 0x0)
r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x8, 0x4000)
ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f00000001c0)=""/189)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e000000110081aee405d10200000e00fa076b000800000000f3ff500befccd77f00000000081c5eda00b0eba06a", 0xfffffffffffffe53}], 0x1}, 0x50)

[ 1087.661113][ T9021] binder: BINDER_SET_CONTEXT_MGR already set
19:20:55 executing program 2:
r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0xc, 0x0, 0xfffffffffffffffb)
add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r0)
keyctl$unlink(0x9, r0, 0xfffffffffffffffd)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x0, 0x2)
ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f00000001c0)=""/48)
add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r0)

[ 1087.704072][ T9021] binder: 9020:9021 ioctl 40046207 0 returned -16
[ 1087.714400][ T9046] binder_alloc: 9020: binder_alloc_buf, no vma
19:20:55 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000300)=0x5, 0x4)
shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ffe000/0x2000)=nil)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x100, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000180))
fstat(0xffffffffffffffff, &(0x7f00000001c0))
r1 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xfffffffffffffffc}, 0x8)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x5}, 0x8)
sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
sendmsg(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="e1", 0x1}], 0x1}, 0x8800)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000040), 0x8)
getgid()
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240))
getpid()
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x8991, &(0x7f0000000000)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'})

19:20:55 executing program 5:
r0 = socket$kcm(0x10, 0x3, 0x0)
modify_ldt$write2(0x11, &(0x7f0000000100)={0x1, 0xffffffffffffffff, 0x1000, 0x34, 0x1ff, 0x8001, 0x0, 0x7ff, 0x1, 0xa3}, 0x10)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x80000, 0x0)
r2 = fcntl$getown(r0, 0x9)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000280)={{0x6, 0x5, 0x3f, 0x4, 'syz1\x00', 0x3}, 0x6, 0x2, 0x1, r2, 0x3, 0x8, 'syz0\x00', &(0x7f0000000180)=['/dev/dlm-monitor\x00', '/dev/dlm-monitor\x00', '/dev/dlm-monitor\x00'], 0x33, [], [0x6, 0x8, 0x2]})
r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x0, 0x0)
ioctl$KDGKBENT(r3, 0x4b46, &(0x7f00000000c0)={0x7, 0xdb6d, 0x9})
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="2e000000110081aee405d10200000e00fa076b000700000000f3ff500befccd77f00000000081c5eda00b0eba06a", 0x2e}], 0x1}, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f0000000200)=0x8)

[ 1087.785497][ T9046] binder: 9020:9046 transaction failed 29189/-3, size -4294967296-12288 line 3147
[ 1087.812119][T29106] binder: undelivered TRANSACTION_ERROR: 29201
[ 1087.819407][T29106] binder: undelivered TRANSACTION_ERROR: 29189
19:20:55 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1087.832582][ T9059] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1087.881483][ T9059] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.5'.
19:20:55 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

[ 1087.970730][    C0] net_ratelimit: 19 callbacks suppressed
[ 1087.970738][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1087.982876][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1088.057023][ T9071] binder: 9070:9071 got transaction with invalid offset (0, min 0 max 0) or object.
[ 1088.066805][ T9071] binder: 9070:9071 transaction failed 29201/-22, size 0-8 line 3241
[ 1088.093076][ T9072] binder_alloc: binder_alloc_mmap_handler: 9070 20004000-20007000 already mapped failed -16
[ 1088.105429][ T9071] binder: BINDER_SET_CONTEXT_MGR already set
[ 1088.111755][ T9071] binder: 9070:9071 ioctl 40046207 0 returned -16
[ 1088.118401][ T9072] binder_alloc: 9070: binder_alloc_buf, no vma
[ 1088.124811][ T9072] binder: 9070:9072 transaction failed 29189/-3, size 0-8 line 3147
[ 1088.133210][ T7831] binder: undelivered TRANSACTION_ERROR: 29201
[ 1088.140888][ T7831] binder: undelivered TRANSACTION_ERROR: 29189
19:20:56 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x2, 0x0)
ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000140)={0x8, 0x9, 0x7})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
fcntl$setpipe(r0, 0x407, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x2000, 0x0)
poll(&(0x7f0000000080)=[{r4, 0x4002}, {r0, 0x10}, {r4, 0x1200}, {r6, 0x204}, {0xffffffffffffffff, 0x80}, {0xffffffffffffffff, 0x2}, {r5, 0x8}], 0x7, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x2081}, {}, {0xffffffffffffffff, 0x2000}], 0x3, 0x40)
r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000640)={"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"})
ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f0000000040)=0x2)
ioctl$KVM_RUN(r7, 0xae80, 0xfdfdffff00000000)

19:20:56 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="19000000140081ff00002c000500cf182897f09730af000500", 0x19}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000080)=@ethernet={0x6, @remote}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000100)}, {&(0x7f0000000240)="e12abfa5a4891d9c2f2a221299281f2a3b2fd988fe51c25606e5111f6e4546308622aa416760a5a13ef5d964c632142a2885a66ff6238c6d33d21b565884c0680159f8f8fc5d35de8bc8fc7f816f5ec3304a742679fa7a6ccb9c3bcf40c833c81ce69faadb90068be64f605842f406efb01b4f1a1bbf9a72336f36feea417b9b9c8e5d91e7d02c18b21fccb8380965d8c0e4b292efa3529d17a4c3b4825a902fbc4dabdceadd6c8e5de4b2d63b306c9c587d41886f5f747df0c40ee16d9a59f6b2d119360996d0e8bef33df67433ce5c7d1b6b0068cdeba287723d8e5fe3e81ad030fed94445bf112bc1bd6b913ccb", 0xef}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="c8dc3846ba00f15d30e32a65af1fe9e63b16b2eed36a02b29eb543f833497e1c35bd053689fadc38db4fe85af91115a35d72b1a3a4388b9ee0d37b68681d5edbff074c36582a59da09c5a8c45a57ec80a0e414562cab219bd6ba036586c46d4a13c440577e66c73a46d07c9c1b2e43f833d49648124481eb3c7cd15b31db4549446fe15b9257de4e341ae25a9b8081fa4d5d83dab034d5d193787a86b0d3c962e8a48e623d079cf8c7678581222f91e27ba7a178adc5d0412bd3b9f5c51c7457441c5d70b30aa9fa66dcfdbf612923043ef8b3a1275f5e90b0f02e2122863875841e", 0xe2}], 0x4}, 0x40)

19:20:56 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0x100000001}, {0x6}]}, 0x10)
open(&(0x7f0000000280)='./file0\x00', 0x141083, 0x4)
r1 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000480)='syz0\x00', 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x0, 0x0)
creat(&(0x7f0000000240)='./file0\x00', 0x100)
seccomp(0x1, 0x0, &(0x7f0000000180)={0x9, &(0x7f0000000100)=[{0x7, 0x1, 0x9, 0x6}, {0x200, 0x7, 0x8001, 0x1000000000000}, {0x0, 0x7, 0x7f}, {0xfffffffffffffffc, 0x8e9, 0x9}, {0x6, 0x8, 0x3, 0x80}, {0xff, 0x9, 0x4ad92cb7, 0x10000}, {0x1ff, 0x9, 0xffff, 0x5}, {0xffffffffffffffc0, 0x2, 0x100000001, 0x4}, {0x8001, 0xc262, 0x80000000000000, 0x3}]})
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='dctcp-reno\x00', 0xb)
open(&(0x7f0000000200)='./file0\x00', 0x2100, 0x183)
ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0185648, &(0x7f00000000c0)={0xa20000, 0x40, 0x4, [], &(0x7f0000000080)={0x9909d7, 0xfffffffffffffffb, [], @ptr=0x6}})
ioctl$KVM_ASSIGN_DEV_IRQ(r2, 0x4040ae70, &(0x7f00000001c0)={0x2, 0x86e3, 0x7ff, 0x1})

19:20:56 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0)
dup(r0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000040)={0x0, 0x6})

19:20:56 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:20:56 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

19:20:56 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x34000, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1088.246568][ T9087] binder: 9085:9087 got transaction with invalid offsets size, 10
19:20:56 executing program 5:
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0xddf2, 0x1)
ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000100)=[0x10001, 0xffffffffffffff69])
r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, r1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f00000001c0)={0x8, 0x4, 0x5, 0x6e0, '\x00', 0x5})
r3 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x8, 0x200040)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4)
ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x7fff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x1003)

19:20:56 executing program 3:
mount(&(0x7f0000000140)=ANY=[@ANYBLOB="b88fe0bb37000000000000000000b600"], &(0x7f0000000380)='.', &(0x7f0000fdb000)='ubifs\x00', 0x0, 0x0)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f0000000100)=0x3002)
setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x7, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='ubifs\x00', r0}, 0x10)

19:20:56 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='cgroup2\x00', 0x0, 0x0)
mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x0)
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0)
rmdir(0x0)
syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x5, 0x0)
fsetxattr(r0, &(0x7f0000000100)=@known='system.posix_acl_default\x00', &(0x7f00000001c0)='vmnet1\x00', 0x7, 0x1)
mq_unlink(&(0x7f0000fc4ffb)='eth0\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x1cf400, 0x0)
setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000004c0), 0x4)
msgget(0x0, 0x44)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x1, 0x3, 0x3, <r2=>0x0}, &(0x7f0000000040)=0x10)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000000c0)={r2, 0x4}, 0x8)

[ 1088.297370][ T9087] binder: 9085:9087 transaction failed 29201/-22, size 0-10 line 3201
[ 1088.372433][ T9100] UBIFS error (pid: 9100): cannot open "¸�à»7", error -22
[ 1088.374102][ T9101] binder_alloc: binder_alloc_mmap_handler: 9085 20004000-20007000 already mapped failed -16
19:20:56 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x400300, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:20:56 executing program 5:
openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
mknod(&(0x7f0000000480)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00')
preadv(r0, &(0x7f0000000480), 0x1000000000000087, 0x600)
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, 0x0)

[ 1088.410800][ T9100] UBIFS error (pid: 9100): cannot open "¸�à»7", error -22
[ 1088.449629][ T9087] binder: BINDER_SET_CONTEXT_MGR already set
[ 1088.502539][ T9111] binder_alloc: 9085: binder_alloc_buf, no vma
[ 1088.547772][ T9087] binder: 9085:9087 ioctl 40046207 0 returned -16
[ 1088.547998][ T7831] binder: undelivered TRANSACTION_ERROR: 29201
[ 1088.562289][ T9111] binder: 9085:9111 transaction failed 29189/-3, size 0-10 line 3147
[ 1088.584909][ T7831] binder: undelivered TRANSACTION_ERROR: 29189
[ 1088.610715][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1088.616582][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1089.090730][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1089.090736][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1089.090783][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1089.096703][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1089.170765][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1089.176645][    C0] protocol 88fb is buggy, dev hsr_slave_1
19:20:57 executing program 4:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$getown(r1, 0x9)
r2 = timerfd_create(0x0, 0x0)
write$binfmt_misc(r1, &(0x7f00000000c0)={'syz0', "f714baff9f5893241b5ff3a78a04616069735763c25494b6c2d2767c37e799188efd0ca1c2ec90b99d009e48ee9cc350873cc1b60d1a2e7965559059631a21697021dfbd5cc15ed61e5e7b29ce0a0b021970763f8a9e207ef83188b9c95b2b939f1f"}, 0x66)
setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000000)=0x5, 0x4)
timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0)
splice(r2, 0x0, r1, 0x0, 0xffffbfffffffffff, 0x0)
ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040))
arch_prctl$ARCH_SET_GS(0x1001, 0xffff)

19:20:57 executing program 3:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0)
ioctl(r1, 0x40044103, &(0x7f0000000000))
ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000000))

19:20:57 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:20:57 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

19:20:57 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x80000, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000140)={<r2=>0x0, @in6={{0xa, 0x4e23, 0x5, @loopback}}, [0x401, 0x1, 0x80, 0x200, 0x8, 0x5, 0x139cc464, 0x1, 0x2, 0x200, 0x4, 0x8001, 0x3, 0x8, 0x7f]}, &(0x7f0000000240)=0x100)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000002c0)={r2, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @empty}]}, &(0x7f0000000300)=0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000040)={&(0x7f0000de2ff4), 0xc, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="00f9916eb2cba927b3a8d30e05000000d5d20800000000000000f88feccec20e89a65a22cf57eb8a0eed2de03e46000000000000000000000000219747f4329a879acbeb4c2b608b3cbb28dbd2ced26431ceabe36c20c52857c38d5511e62c35a8a3354a20608b735c8b2febbb155795bca6aab61bbd71247c23e30b"], 0x14}}, 0x0)

19:20:57 executing program 5:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x10000, 0x0)
ioctl$VIDIOC_G_STD(0xffffffffffffff9c, 0x80085617, &(0x7f0000000080)=<r1=>0x0)
ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=r1)
r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x20000000000201, 0xa000000100079)
ioctl$VIDIOC_TRY_DECODER_CMD(r2, 0x8108551b, &(0x7f0000000200)={0x0, 0x0, @start})
ioctl$sock_inet_SIOCRTMSG(r2, 0x80045510, &(0x7f00000000c0)={0x0, {0x2, 0x0, @local}, {}, {0x2, 0x0, @multicast1}})
setsockopt$inet_tcp_buf(r0, 0x6, 0x3f, &(0x7f0000000180)="91e7638708da85b153fc3d649c756426911b8e7f2b290690ece23ed8eabfe8d7b1", 0x21)

[ 1089.258847][ T9131] binder: 9126:9131 got transaction with invalid offsets size, 99
[ 1089.287962][ T9138] binder_alloc: binder_alloc_mmap_handler: 9126 20004000-20007000 already mapped failed -16
19:20:57 executing program 2:
r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0)
ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x80000000a, 0x0, 0x2, {0x0, 0x0, 0x9, 0x3}})
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x1, 0x0)
ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f00000000c0))

19:20:57 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1089.322711][ T9131] binder: BINDER_SET_CONTEXT_MGR already set
[ 1089.337087][ T9131] binder: 9126:9131 ioctl 40046207 0 returned -16
[ 1089.352338][ T9138] binder_alloc: 9126: binder_alloc_buf, no vma
19:20:57 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

[ 1089.449166][ T9146] QAT: Invalid ioctl
19:20:57 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1089.490348][ T9150] binder: 9149:9150 got transaction with invalid offset (0, min 0 max 0) or object.
19:20:57 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000a76000/0x4000)=nil, 0x4000, 0x0, 0x2, 0x0)
madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0)
sigaltstack(&(0x7f0000b82000/0x2000)=nil, 0x0)
madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd)

19:20:57 executing program 5:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x6, 0x7, 0x9}, 0x2c)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000100), 0x0}, 0x18)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x20002000, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000180)="0adc1f023c12")
socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x40000080806, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0)
io_setup(0x0, 0x0)
pipe(0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0)
io_getevents(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4004e20, 0x0, @loopback}, 0x1c)
mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0)
listen(r3, 0x20000003)
ioctl$EVIOCSABS3F(r1, 0x401845ff, 0x0)
r4 = socket$inet6(0xa, 0x6, 0x0)
mq_open(0x0, 0x3f, 0x800000, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, 0x0)
ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, 0x0)
connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r5 = accept4(r3, 0x0, 0x0, 0x80800)
r6 = syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
r7 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, 0x1000}, &(0x7f0000000040)=0x10)
io_setup(0x5, &(0x7f0000000080)=<r8=>0x0)
r9 = socket$inet6(0xa, 0x1, 0xfffffffffffffffc)
io_submit(r8, 0x3, &(0x7f00000002c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0x1b3, r9, &(0x7f00000000c0)="198d61267a8e318de4c003c620bd486e316fabcb4711e460cd011a95997bd504f0218131847e3b51dc70568f6f", 0x2d, 0x5, 0x0, 0x2, 0xffffffffffffff9c}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0xffffffffeea1b442, r3, &(0x7f0000000140)="c019", 0x2, 0x7, 0x0, 0x2, r7}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x1, r2, &(0x7f0000000240)="c007fe5f8e5cb8bdf4514426e95c", 0xe, 0x7, 0x0, 0x2, r6}])
sendmmsg(r5, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x2a, {0x700, 0x0, 0xea010000, 0xc, 0x0, 0x27000000}, 0x0, 0xe803000000000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="ec0000001f010000f8ffffffbe99035b2511df64a3a6f90a310e724568d44d62a5155bd95ee120cacf62f608519e747e46acdd93eb874a65c2acaa214259186362b6dae67d555c620fe6661fec2028e0be1bf122babb11fe6ccb30766064f61b669e35616e33cd0d878dd6dcde55a631c0be3d2ffdb03122cd29534275bcc559baf553961db0cd2c0793e6588164d0a643721d2e2e1646461b001ae0dc4201706e5865eb49f94b7fa8cf2d23bf20ba44e6a69ee6ac7ef1324da4caf239bf750c00a0357e1660fa2d8592313cf2a6a88ce5855308f17a3c396ee2c23cb6a1e7ef5d63aa63f9a7cc79dd603c8edc0000000401000004000000f78f07b3193eff964461ed09927f51487e94301ccbe6857e98c4fd563f33be61bd3e86a3ce5b9372d92883874f186f5086e5d1f5f1f749f6cf4f549b8e4995b0c0cd38cfd588d2bd3c93596b7bd2fd200237475103eedeaaedfb948cb85a67b04091f65e3c9a5628e1693c00c196751787f56ccf89d4a6321118dd561deaeae2c35317cdbbac3380ac2f6a4d6edd0cb3e58717db72b5a34e75ff56ecc0a720e7dd8ddef26ea35b018783a09a26dfffed7c0a9567c000e6e28a4b34740001ee31dd6704646e4b50880e498252b832ec638ee5fa7dd31d4440523fc321f7000090000000ff010000b6030000bf1e80da402350124431fda1811710936b0bb2948823d07069da3f908ea63078492cae686b21e351ca7ae78c03977d5005d04efbe11574213d5f25a019abfde3c47732db4b87f0517127fbbca456bb4c93b6fffeebcc9bd617995229d2e60d149e8136b5812cba6014f679ca42d65b285097e90b5f"], 0x258}, 0x2000000}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x2, 0x0)

[ 1089.540371][ T9153] binder_alloc: binder_alloc_mmap_handler: 9149 20004000-20007000 already mapped failed -16
[ 1089.595215][ T9150] binder: BINDER_SET_CONTEXT_MGR already set
[ 1089.621130][ T9150] binder: 9149:9150 ioctl 40046207 0 returned -16
[ 1089.637301][ T9153] binder_alloc: 9149: binder_alloc_buf, no vma
19:20:57 executing program 4:
r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0)
ioctl$SG_GET_NUM_WAITING(r0, 0x3b65, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@empty, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000140)=0xe8)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000240)=0xa70, 0x4)
r2 = getpgrp(0x0)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x8, &(0x7f0000000200)={0x7000000000000})
ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000180)="82fd579f5d1cdf539cd23f24575031330a9b045c4baab2493a2a482e454ce86a52dbc83591d9b6e33504040348a223caec650d648063702a856441528d901fd43424dbca61498ff39e56ee4e54eb896cca7457a27d840d3a241a1c759c")
ioctl$TUNSETOWNER(r0, 0x400454cc, r1)

19:20:58 executing program 3:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = socket(0x1d, 0x0, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000040)={0x9, 0x1000, "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"})
socket$netlink(0x10, 0x3, 0x0)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, 0x0)

19:20:58 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x80ffffff, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:20:58 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

19:20:58 executing program 2:
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r0 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x4eec, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76d8, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000040)=""/253)
clone(0x0, 0x0, 0x0, 0x0, 0x0)

19:20:58 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2002)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7b, 0x600000000000000, [0x40000104], [0xc2]})
r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={<r4=>0x0})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000140)={r4, 0x80000, r1})

19:20:58 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000400))
r2 = dup2(r0, r0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10)
getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000005c0)={'nat\x00'}, &(0x7f00000003c0)=0x54)
sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x105082)
r4 = syz_open_dev$sndpcmp(0x0, 0x0, 0x8040)
ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000300)={0x0, 0x1ff})
add_key(&(0x7f0000000440)='pkcs7_test\x00', &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={<r5=>0x0, 0x7, 0x10}, &(0x7f0000000580)=0xc)
getegid()
getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000100), &(0x7f0000000240)=0x40)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000004c0)=""/170, 0x0)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000680)={r5, 0xc33, 0x6, [0x1ff, 0xfffffffffffffffb, 0x101, 0x8, 0x80000000, 0x7]}, &(0x7f00000006c0)=0x14)
memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x104000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0xe, 0x4, @l2={'eth', 0x3a, 'gretap0\x00'}}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000000)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000180))
ioctl$BLKTRACESTART(r4, 0x1274, 0x0)
sendfile(r1, r3, &(0x7f00000ddff8), 0x102000002)

[ 1090.153446][ T9183] binder: 9182:9183 got transaction with invalid offset (0, min 0 max 0) or object.
19:20:58 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x3, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000180)={0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:20:58 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0xffffff7f, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1090.225460][ T9198] binder_alloc: binder_alloc_mmap_handler: 9182 20004000-20007000 already mapped failed -16
[ 1090.250471][ T9183] binder: BINDER_SET_CONTEXT_MGR already set
[ 1090.274002][ T9183] binder: 9182:9183 ioctl 40046207 0 returned -16
[ 1090.301017][ T9198] binder_alloc: 9182: binder_alloc_buf, no vma
[ 1090.309245][ T9194] can: request_module (can-proto-0) failed.
[ 1090.330163][ T9194] can: request_module (can-proto-0) failed.
19:20:58 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0xffffff80, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:20:58 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="2e0000001d008107e00f80ecdb4cb9d911631912080003003b00000012000100034c000040d819a90600150000f0", 0x2e}], 0x1}, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
read(r1, &(0x7f00000003c0)=""/177, 0xfffffffffffffc2f)

19:20:58 executing program 3:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={<r0=>0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)='(\x00', 0xffffffffffffffff}, 0x30)
ptrace$poke(0x5, r0, &(0x7f0000000080), 0x401)
msync(&(0x7f0000d5c000/0x2000)=nil, 0xfffffffffffffef1, 0x0)

19:20:58 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2300, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

[ 1090.478209][ T9221] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
19:20:58 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="070000080000000001000000000100000100000008000000ffff00000000000001ff0040000000220006000000030000007f0000000000000001000080558ed259f3b40e8e72f80528842879eba6ec479d2825b9300507ac3858c4c24e5f7105e2546831b46d87059a29b1c243592cd9c3620a"])
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_open_dev$usb(0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000000), &(0x7f00000000c0)=0x4)

19:20:58 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x40030000000000, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1090.534160][ T9221] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1090.546737][ T9225] binder: 9224:9225 got transaction with invalid offset (0, min 0 max 0) or object.
19:20:58 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0x80045301, &(0x7f0000000100))
fcntl$getflags(r0, 0xb)
ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a45322, &(0x7f0000000000))

[ 1090.603148][ T9234] binder_alloc: binder_alloc_mmap_handler: 9224 20004000-20007000 already mapped failed -16
19:20:58 executing program 5:
mprotect(&(0x7f0000189000/0x3000)=nil, 0x3000, 0x1000004)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)

[ 1090.671431][ T9225] binder: BINDER_SET_CONTEXT_MGR already set
[ 1090.705699][ T9225] binder: 9224:9225 ioctl 40046207 0 returned -16
[ 1090.727706][ T9243] binder_alloc: 9224: binder_alloc_buf, no vma
19:20:58 executing program 4:
r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x100000000040, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40046607, &(0x7f0000000080)=0x1ff)
ioctl$BLKPG(r0, 0x4004092b, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000040)})
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
accept4$inet6(r1, 0x0, &(0x7f0000000000), 0x80800)

19:20:58 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:20:58 executing program 5:
r0 = syz_open_dev$dspn(&(0x7f0000000200)='/dev/dsp#\x00', 0x1, 0x2000000000001)
ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f0000000080)={0x1aab, 0x2})
ioctl$int_in(r0, 0x800000c0045001, &(0x7f0000000040))
sendto$packet(r0, &(0x7f0000000000)="10ea342c72a9", 0x6, 0x10, 0x0, 0x0)
ioctl$int_in(r0, 0x40800060c0045006, &(0x7f0000000180)=0x5)

19:20:58 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b00, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

19:20:58 executing program 2:
socket$nl_xfrm(0x11, 0x3, 0x6)
syz_emit_ethernet(0xfdef, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaa00aaaaaaaaaabb0600c96dcde72be5caaf2a8018238eb11fb4c484b6806b4e0fd6f1815134416e8098347bc69c72e7bc4d47de6da660c362af8e6a4f0cf73fda85b38e4d4bc3c082813adec6c44c8d465d7ca4464e05269f1e6e87f1cac52c42af3b9a0b3ab7d38d9e54562b582bfe77e1d257ebeb8e630611cc7f479e0a2d2bcee50af615ce3d16c15f570faee365fccc435648351d0413731e0b3815"], 0x0)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x4000, 0x0)
sendmsg$alg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="b567735d56a329dc0d68e2e744e37eae14f26e647b16df317d5c20870f6698a0d3dccc0a8df573c63d24d0c6b228078717cd21367487de5271df", 0x3a}], 0x1, &(0x7f0000000100)=[@iv={0x94, 0x117, 0x2, 0x82, "30364f311503f8acec9b946b0a82a0d5b28355b871af8d381e181e790e344bf775f08409bd254aa32805654fc2d457554b048483241fd615c3e9ac5c88b8588c05d1a3ca55ed927ee9602a7a204514e72d1ae887952ed6ee85c5c2b5368c955841d55d46683fc58e54c8fea77f4f61a4b6a326053449771964e21a4445051f52fab6"}, @iv={0xa0, 0x117, 0x2, 0x8d, "40715ea4018aff44736c47dbb628d0bbdcb3deb115eba16bcf75d0727a8f33e558be988c12ec6bcc9d00c7d5f0f66d75764b04e87a0cfd86891a50fb1f545f47a823691944b16c539a179d9968f65457b73a6b100e9a8ced6a56e6099119b2f0e63f33d701d0b563140dccb3453dc144f46b01e71812e6941dee33e8ea55a9ca2ac1850ddca880048ce94c3cf6"}, @op={0x10, 0x117, 0x3, 0x1}, @assoc={0x10}], 0x154}, 0x4000080)
ioctl$VT_ACTIVATE(r0, 0x5606, 0x7)
ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f0000000000)={0x1, 0x1ff})

19:20:58 executing program 3:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000040))
r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x8, 0x200000)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00')
sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x9c, r2, 0xd20, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3ff}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x14}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2b}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0xc004}, 0x4000000)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0)
fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000140)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x3)
fcntl$setstatus(r4, 0x4, 0x102800)
fcntl$setown(0xffffffffffffffff, 0x8, r0)
ioctl$TCXONC(r4, 0x540a, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0)
ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422)
write(r4, &(0x7f0000000000)="d5", 0x1)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x3)
dup3(r4, r3, 0x0)

19:20:58 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1090.959748][ T9261] binder: 9260:9261 got transaction with invalid offset (0, min 0 max 0) or object.
[ 1090.991894][ T9267] binder_alloc: binder_alloc_mmap_handler: 9260 20004000-20007000 already mapped failed -16
[ 1091.015053][ T9261] binder: BINDER_SET_CONTEXT_MGR already set
[ 1091.032986][ T9267] binder_alloc: 9260: binder_alloc_buf, no vma
19:20:58 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:20:58 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0xb24, 0x400)
ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockname(0xffffffffffffff9c, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x0)
setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f00000000c0)=0x1, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0)
ioprio_set$uid(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'pord0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xf7\xff\xff\x00', 0x3f, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000140)={0x5, 0x1, 'client1\x00', 0xffffffff80000000, "9a9420f271525f35", "a675744b4e6aef240d6f45879c55e4217c66820c4203b58a53b577f5f17555ff", 0x45f, 0x3})
ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read(r2, &(0x7f00000003c0)=""/178, 0xb2)

[ 1091.055886][ T9261] binder: 9260:9261 ioctl 40046207 0 returned -16
19:20:59 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0)
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x1, 0x0)
clock_gettime(0x0, &(0x7f0000000180)={<r2=>0x0, <r3=>0x0})
r4 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x3, 0x20900)
ioctl$VIDIOC_DQBUF(r1, 0xc0445611, &(0x7f0000000240)={0x1, 0xf, 0x4, 0x80000000, {r2, r3/1000+10000}, {0x7, 0xd, 0x7, 0x0, 0x2, 0x1f, "00e77038"}, 0x9, 0x3, @planes=&(0x7f0000000200)={0x81, 0x0, @fd=r4, 0xe7e}, 0x4})
setxattr$trusted_overlay_nlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'U-', 0x100000000000000}, 0x28, 0x2)
socket$bt_hidp(0x1f, 0x3, 0x6)

19:20:59 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d00, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

19:20:59 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x80ffffff00000000, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1091.239013][ T9280] binder: 9278:9280 got transaction with invalid offset (0, min 0 max 0) or object.
19:20:59 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0)
r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x40000)
mknodat(r1, &(0x7f0000000040)='./file0\x00', 0xc100, 0x401)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x1000})

19:20:59 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x0, 0x460000)
syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x9, 0x800)
ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000100)={0x3, 0x3})
bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58)
r2 = accept4$alg(r0, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0), 0x2, &(0x7f0000000600)=""/154, 0x9a}, 0xffff}], 0x620abe127fd460, 0x0, 0x0)

19:20:59 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0xffffff7f00000000, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1091.285006][ T9280] binder: BINDER_SET_CONTEXT_MGR already set
[ 1091.297346][ T9280] binder: 9278:9280 ioctl 40046207 0 returned -16
19:20:59 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

19:20:59 executing program 5:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x4000, 0x0)
getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000040), 0x4)
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x24, 0x0, 0x0)
pause()
ioctl$TUNGETFILTER(r0, 0x800854db, &(0x7f0000000080)=""/197)

19:20:59 executing program 3:
socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000a77ff8)={<r0=>0xffffffffffffffff})
setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x10f, 0x3, 0x1, 0x4)
fstatfs(r0, &(0x7f0000000000)=""/105)

19:20:59 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1091.435490][ T9302] binder: 9300:9302 got transaction with invalid offset (0, min 0 max 0) or object.
19:20:59 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1091.516784][ T9302] binder: BINDER_SET_CONTEXT_MGR already set
[ 1091.535622][ T9302] binder: 9300:9302 ioctl 40046207 0 returned -16
19:20:59 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x83000000003, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x60)
write(r0, &(0x7f0000000340)="220000001e0063bb0101fd03ef6ece0307f3ffff12000000d907000f060007140020", 0x22)

19:20:59 executing program 3:
socket$nl_xfrm(0xa, 0x3, 0x87)
syz_emit_ethernet(0x168, &(0x7f0000000280)={@random="06cacc28f1bb", @remote, [{[], {0x8100, 0x100000000, 0x1, 0x3}}], {@canfd={0xd, {{0x4, 0x4, 0x80000, 0x9}, 0x3a, 0x2, 0x0, 0x0, "9856f8aa320ed342352762882ac3c520d438f9c04750eb60b01cf9a20e945ce0ddf08732559edb9f4b458a7b337c7018c07fbce51cec7ff5383b7fb3dabe1702"}}}}, 0x0)
r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2)
write$FUSE_DIRENTPLUS(r0, &(0x7f00000000c0)={0x10, 0x0, 0x6}, 0x10)

19:20:59 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:20:59 executing program 4:
r0 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
pipe2(&(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80000)
r3 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x2, 0x200000)
r4 = openat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x801, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x0, 0x0)
ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0)
r5 = socket(0x2, 0x100000000002, 0x0)
r6 = dup(r5)
ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000180)=r6)
getsockopt$inet_opts(r6, 0x0, 0x9, 0x0, &(0x7f00000000c0)=0xfffffffffffffff0)
r7 = fcntl$getown(r3, 0x9)
ptrace$cont(0x20, r7, 0x7, 0x1)
fsetxattr$security_selinux(r0, &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:iptables_exec_t:s0\x00', 0x25, 0x3)
setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f00000000c0), 0x4)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000001c0)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000100000000000"], 0x1)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
ioctl$FITRIM(r5, 0xc0185879, &(0x7f0000000140)={0x5, 0x2})
lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000005c0)={0x0, 0x0, <r9=>0x0}, &(0x7f0000000600)=0xc)
fchown(r5, r8, r9)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000280)={0x2, 0x4e23}, 0x10)
fcntl$getown(r0, 0x9)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, 0xfffffffffffffffe)
r10 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00')
sendfile(r0, r10, &(0x7f0000000500), 0x80000003)
ioctl$DRM_IOCTL_AGP_ALLOC(r10, 0xc0106434, &(0x7f0000000200)={0x2, <r11=>0x0, 0x10000, 0x80000000})
ioctl$DRM_IOCTL_AGP_UNBIND(r4, 0x40086437, &(0x7f0000000380)={r11, 0xf93a})

19:20:59 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3002, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

19:21:00 executing program 3:
socketpair(0x5, 0x8000b, 0x7f, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={<r1=>0x0, 0x2}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={r1, 0x1}, 0x8)
socketpair(0x1d, 0x8000e, 0x5, &(0x7f0000000140))
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r2=>0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000200)='/\x00'}, 0x30)
sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x7)
fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket(0x11, 0x802, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'team0\x00\x10\x00h\x00'})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00'})
sendmsg$xdp(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x2c, 0x4, 0x0, 0x2e}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x10)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000240)={'team0\x00\xfd\xff\xff\xff\xc0\x00\x03\x00\x02\xff', 0x4bfd})

19:21:00 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x34000, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1092.129421][ T9329] binder_alloc: 9328: binder_alloc_buf size 12296 failed, no address space
[ 1092.158571][ T9332] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1092.162419][ T9329] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1092.192476][ T9335] device team0 entered promiscuous mode
[ 1092.198625][ T9335] device team_slave_0 entered promiscuous mode
[ 1092.205820][ T9329] binder_transaction: 14 callbacks suppressed
[ 1092.205835][ T9329] binder: 9328:9329 transaction failed 29201/-28, size 0-12290 line 3147
[ 1092.224943][ T9335] device team_slave_1 entered promiscuous mode
[ 1092.253303][ T9339] binder_alloc_mmap_handler: 2 callbacks suppressed
[ 1092.253321][ T9339] binder_alloc: binder_alloc_mmap_handler: 9328 20004000-20007000 already mapped failed -16
[ 1092.266543][ T9335] 8021q: adding VLAN 0 to HW filter on device team0
19:21:00 executing program 2:
r0 = socket(0x2000000000000021, 0x2, 0x2)
shutdown(r0, 0x4)
write$binfmt_script(r0, 0x0, 0x0)

19:21:00 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0)
ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0)
write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000000)={0x7}, 0x7)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdi\x030k\x133\x00')
ptrace$setsig(0x4203, 0x0, 0x0, 0x0)
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0)
ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000000c0)=&(0x7f0000000080))
getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000040)={'mangle\x00'}, &(0x7f0000000140)=0x24)

19:21:00 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x400300, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1092.297952][ T9329] binder: BINDER_SET_CONTEXT_MGR already set
[ 1092.320768][ T9329] binder: 9328:9329 ioctl 40046207 0 returned -16
[ 1092.370891][ T9341] device team0 left promiscuous mode
[ 1092.376265][ T9341] device team_slave_0 left promiscuous mode
[ 1092.409897][ T9341] device team_slave_1 left promiscuous mode
19:21:00 executing program 2:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
r1 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x200, 0x0)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, 0x0, &(0x7f0000000180))
stat(0x0, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xfb)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x1fe, 0x0)
syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000080)=0x4)
sendmsg(r1, &(0x7f0000000540)={&(0x7f00000001c0)=@pptp={0x18, 0x2, {0x1, @loopback}}, 0x80, &(0x7f0000000400)=[{0x0}, {0x0}], 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="6800000000000000090000000d379f559a09f1cec5908c948c9fd9292b4abeb68e0abffaa2d25de8a970d93318abe6e991b3e1d808597c3094a9137be5f3150ea0a81a159505ef36eb026c97b4edec6a421869476997c25313c70cf6fb5dc95460b91aa5b5dc00008800000008010000220d0000a44b3ebfdcb927296e98351e1395fad8567916218f6d6fae088a3a8e46b6670b29b5d138331bf2cd546de04a3221994f15a5ccd8201e9b6c0ae5f50000000000000000682b70257e20707f5897fc45d09152ec93b0e4f9e9b82653bef0add7179aecb5e0187749aeabbc5066fe6f7cb68c401db268e8425a32ce0000"], 0xf0}, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000000)=0x3, 0x2)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000005c0)={'lo\x00', &(0x7f00000000c0)=@ethtool_cmd={0x30, 0x0, 0x0, 0x0, 0x8, 0x7, 0x10000, 0x11ca, 0x10001, 0x0, 0x9293, 0x918, 0x0, 0x0, 0x0, 0x0, [0x0, 0x4]}})
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000600)={'bond0\x00'})
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000580)='htcp\x00', 0x5)

[ 1092.430108][ T7831] binder_release_work: 14 callbacks suppressed
[ 1092.430117][ T7831] binder: undelivered TRANSACTION_ERROR: 29201
19:21:00 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:21:00 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3003, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

19:21:00 executing program 5:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vhost-vsock\x00', 0x2, 0x0)
r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x1000, 0x10000)
ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f0000000080)={0xa88, "5c3d3ef8b2cc490fe8b7aed99dbcaeb9d1763433c32589749dd171bdbd454409", 0x1, 0x1})
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0})

19:21:00 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1092.578941][ T9364] binder_alloc: 9363: binder_alloc_buf size 12296 failed, no address space
[ 1092.592213][ T9364] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1092.603490][ T9364] binder: 9363:9364 transaction failed 29201/-28, size 0-12291 line 3147
[ 1092.619470][ T9367] binder_alloc: binder_alloc_mmap_handler: 9363 20004000-20007000 already mapped failed -16
[ 1092.638253][ T9364] binder: BINDER_SET_CONTEXT_MGR already set
[ 1092.660889][ T9364] binder: 9363:9364 ioctl 40046207 0 returned -16
[ 1092.661306][ T9367] binder_alloc_new_buf_locked: 2 callbacks suppressed
[ 1092.661315][ T9367] binder_alloc: 9363: binder_alloc_buf, no vma
[ 1092.681187][ T9367] binder: 9363:9367 transaction failed 29189/-3, size 0-12291 line 3147
[ 1092.700948][ T7831] binder: undelivered TRANSACTION_ERROR: 29201
[ 1092.709335][ T7831] binder: undelivered TRANSACTION_ERROR: 29189
[ 1092.769869][ T9344] device team0 entered promiscuous mode
[ 1092.803331][ T9344] device team_slave_0 entered promiscuous mode
[ 1092.810092][ T9344] device team_slave_1 entered promiscuous mode
[ 1092.829505][ T9344] 8021q: adding VLAN 0 to HW filter on device team0
19:21:01 executing program 4:
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x4000000002, 0x10)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40246608, &(0x7f0000000040)={0x10001, 0x40, 0x101, 0x2, 0x1, 0x37})
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={0xffffffffffffff9c, 0x10, &(0x7f0000000100)={&(0x7f0000000080)=""/72, 0x48, <r1=>0xffffffffffffffff}}, 0x10)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=r1, 0x4)
r3 = syz_open_dev$usb(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x20, 0x80)
ioctl$VIDIOC_G_INPUT(r3, 0x80045626, &(0x7f0000000340))
r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video2\x00', 0x2, 0x0)
ioctl$VIDIOC_G_OUTPUT(r4, 0x8004562e, &(0x7f0000000300))
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, <r5=>0x0}, &(0x7f00000003c0)=0xc)
fstat(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setregid(r5, r6)
r7 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0xffff, 0x200)
bind$bt_rfcomm(r7, &(0x7f00000002c0)={0x1f, {0x80000001, 0x7fff, 0x7, 0x81, 0x1f, 0x10000}, 0x800}, 0xa)

19:21:01 executing program 5:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$UHID_DESTROY(r1, &(0x7f0000000300), 0x4)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00')
setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f0000000340)=[0x3, 0x1], 0x2)
sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x6c, r2, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x700000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}]}]}, 0x6c}}, 0x81)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000280), 0x8)

19:21:01 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:21:01 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3004, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

19:21:01 executing program 3:
r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc)
r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x807, 0x100)
ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000100))
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000180)="3632b136a6de21901d97e34fec4bea9300f8dc96f52c385575b37f9c4524b8ac2c1beb0a649f1215bb25863d6507d22f170d66783230bd2b5ecd8b64eb866424b5c5f6a13aba56c6d4e873d6d2bb8afa43b55bc7b34c0bf581cbf5760e056ec8af767dc0b2a20e379d40442328e298b7577e3253f70da1fe16556d779f85c879cfbdafdb875d4c64bfdbb26f579ac321becbf3d19b2b2c816e8fd3212096"}, 0x10)
add_key(&(0x7f0000000580)='rxrpc\x00', 0x0, &(0x7f0000000040)="10d79af8b0068bc062e2ba1e620a1c210500000000d4cb982d000000000074df01000000a1521ea84a0000000000000000000000", 0x34, r0)

19:21:01 executing program 2:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
r1 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x200, 0x0)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, 0x0, &(0x7f0000000180))
stat(0x0, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xfb)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x1fe, 0x0)
syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000080)=0x4)
sendmsg(r1, &(0x7f0000000540)={&(0x7f00000001c0)=@pptp={0x18, 0x2, {0x1, @loopback}}, 0x80, &(0x7f0000000400)=[{0x0}, {0x0}], 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="6800000000000000090000000d379f559a09f1cec5908c948c9fd9292b4abeb68e0abffaa2d25de8a970d93318abe6e991b3e1d808597c3094a9137be5f3150ea0a81a159505ef36eb026c97b4edec6a421869476997c25313c70cf6fb5dc95460b91aa5b5dc00008800000008010000220d0000a44b3ebfdcb927296e98351e1395fad8567916218f6d6fae088a3a8e46b6670b29b5d138331bf2cd546de04a3221994f15a5ccd8201e9b6c0ae5f50000000000000000682b70257e20707f5897fc45d09152ec93b0e4f9e9b82653bef0add7179aecb5e0187749aeabbc5066fe6f7cb68c401db268e8425a32ce0000"], 0xf0}, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000000)=0x3, 0x2)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000005c0)={'lo\x00', &(0x7f00000000c0)=@ethtool_cmd={0x30, 0x0, 0x0, 0x0, 0x8, 0x7, 0x10000, 0x11ca, 0x10001, 0x0, 0x9293, 0x918, 0x0, 0x0, 0x0, 0x0, [0x0, 0x4]}})
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000600)={'bond0\x00'})
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000580)='htcp\x00', 0x5)

[ 1093.209837][ T9390] binder_alloc: 9388: binder_alloc_buf size 12296 failed, no address space
[ 1093.227341][ T9390] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1093.250715][    C0] net_ratelimit: 15 callbacks suppressed
19:21:01 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x80ffffff, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:21:01 executing program 2:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
r1 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x200, 0x0)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, 0x0, &(0x7f0000000180))
stat(0x0, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xfb)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x1fe, 0x0)
syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000080)=0x4)
sendmsg(r1, &(0x7f0000000540)={&(0x7f00000001c0)=@pptp={0x18, 0x2, {0x1, @loopback}}, 0x80, &(0x7f0000000400)=[{0x0}, {0x0}], 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="6800000000000000090000000d379f559a09f1cec5908c948c9fd9292b4abeb68e0abffaa2d25de8a970d93318abe6e991b3e1d808597c3094a9137be5f3150ea0a81a159505ef36eb026c97b4edec6a421869476997c25313c70cf6fb5dc95460b91aa5b5dc00008800000008010000220d0000a44b3ebfdcb927296e98351e1395fad8567916218f6d6fae088a3a8e46b6670b29b5d138331bf2cd546de04a3221994f15a5ccd8201e9b6c0ae5f50000000000000000682b70257e20707f5897fc45d09152ec93b0e4f9e9b82653bef0add7179aecb5e0187749aeabbc5066fe6f7cb68c401db268e8425a32ce0000"], 0xf0}, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000000)=0x3, 0x2)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000005c0)={'lo\x00', &(0x7f00000000c0)=@ethtool_cmd={0x30, 0x0, 0x0, 0x0, 0x8, 0x7, 0x10000, 0x11ca, 0x10001, 0x0, 0x9293, 0x918, 0x0, 0x0, 0x0, 0x0, [0x0, 0x4]}})
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000600)={'bond0\x00'})
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000580)='htcp\x00', 0x5)

19:21:01 executing program 3:
r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhci\x00', 0xe00)
r1 = socket$inet(0x2, 0x4, 0x401)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0xf5)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8)
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000100)=ANY=[@ANYBLOB="e00000f9ab1414aa0000000001000000ac1414aa"], 0x14)
setsockopt$inet_mreqn(r1, 0x0, 0x100000000000026, &(0x7f0000000140)={@multicast2, @local}, 0xc)
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x4, 0x1, 0x9, [@empty, @local, @rand_addr=0x5, @loopback, @remote, @remote, @local, @empty, @loopback]}, 0x34)
pread64(r0, &(0x7f00000001c0)=""/167, 0xa7, 0x0)

[ 1093.250724][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1093.250763][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1093.268187][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1093.300953][ T9390] binder: 9388:9390 transaction failed 29201/-28, size 0-12292 line 3147
[ 1093.330729][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1093.336652][    C0] protocol 88fb is buggy, dev hsr_slave_1
19:21:01 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000440)=ANY=[@ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES16=r0, @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYRESDEC=r0, @ANYRES16]], @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16=0x0, @ANYBLOB="9e46d3f17f9720e852049aef8ca48e7d48f6f3d36f1c15eabef3207d451ef851fc1ed3356d417ec58d90e799f4586a063b82e571612b14aee36e00ceee5632f2412fca881a8ff0534360b35d1b197822e3212642004b1e5e0866788ab684f3452a2f62586bd40682566464bb5122b764e65a753e254e22f2f34e668e03fdbefed2c929b26a87f25e156788d873155b8a8ef902f2a9f7b9a25bf159cd6751216264d353f332a6e054a68b9f0e72a9c28605db152b21193f8ec94d22504cc0c6603f4418fc6481a3428c3e73907fcfb5eafc89b199a0f3a699237bf50bfea7036e73c2527fc7", @ANYRESDEC=r0, @ANYPTR], @ANYPTR, @ANYRES64=r0, @ANYBLOB="5774e659293aa68a91f76475981d7a13c96cfc7c692d1a97ebfcd9afbdf83b0a1e73f6dae468fc23f1615fb4af999631dc95ec72134c028bc9965b6b4090c085f06dd2a130a3984800f2b01babdbc0850cdb2bc631945ffd2d2f0f8491f4ede0570a326cb0809eab0fe863880a9bd0ffdfbdfad8307f9aac4edc0e67e2fca02015b118108989fec05026bd7e68dcc07be073d1b23a94f9a5", @ANYRES32=0x0, @ANYRESDEC=r0, @ANYRESDEC=r0], @ANYRESHEX, @ANYRES16=r0, @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES16=r0, @ANYRES64=r0, @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYPTR64, @ANYPTR64, @ANYRESOCT=r0, @ANYBLOB="18e5bd0b525c34271de13dae8189ff9ba993c74769ad5381062357d35a99d0859fbbe85060c78080641d39628cfc8a86204c6cd3b5fbf0304ea65e5cfa8c6ab887ce9971349f90a9b61c5168715513f9b24f16efb94a7364a8fd5bc28a355663bbeaecfe4b969fc71558c35d3bdb8eb99a9f5ed59e2cd2420d34c16a005aabdc3176576233923f4ed9c997e82cec1e9d17109e9692030e4cbeefe5a38e14aeca65e56c7878f284714a702a509e65ab7ffe6e3f1cf5a7b9cb50", @ANYRESOCT=r0], @ANYRES16=r0, @ANYRES32=r0]], 0x53}}, 0x0)

[ 1093.342912][ T9402] binder_alloc: binder_alloc_mmap_handler: 9388 20004000-20007000 already mapped failed -16
[ 1093.369153][ T9402] binder_alloc: 9388: binder_alloc_buf, no vma
19:21:01 executing program 2:
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00')
r2 = socket$l2tp(0x18, 0x1, 0x1)
getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000300)={@mcast2, <r3=>0x0}, &(0x7f0000000100)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', r3})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000000080)={0x200, 0xbe})
r5 = socket(0x5, 0x0, 0x200)
r6 = socket$l2tp(0x18, 0x1, 0x1)
ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000400)=""/50)
connect$l2tp(r6, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
connect$l2tp(r2, &(0x7f0000000440)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x3, 0x1, 0x2, 0x0, {0xa, 0x4e22, 0x7, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x400}}}, 0x1c4)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000000)={<r7=>0x0, 0x9a}, &(0x7f0000000340)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000003c0)={r7, 0x1}, 0x8)
ioctl$FS_IOC_FSSETXATTR(r6, 0x80487436, &(0x7f0000000040)={0x1fffd})
preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f00000001c0))
ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0186415, &(0x7f0000000280)={0x0, 0x8, 0x5, 0x2, &(0x7f0000ffc000/0x3000)=nil, 0x4})
setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0)=0x7, 0x4)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f0000000480)={r7, @in={{0x2, 0x4e20, @rand_addr=0x7}}}, 0x84)

[ 1093.394095][ T9390] binder: BINDER_SET_CONTEXT_MGR already set
[ 1093.400178][ T9390] binder: 9388:9390 ioctl 40046207 0 returned -16
19:21:01 executing program 3:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x100, 0x1)
timerfd_gettime(r0, &(0x7f0000000040))
r1 = socket$kcm(0x29, 0x2000000000000005, 0x0)
flistxattr(r1, &(0x7f0000000180)=""/100, 0x1f2)
recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 1093.493304][ T9402] binder: 9388:9402 transaction failed 29189/-3, size 0-12292 line 3147
[ 1093.512964][ T7831] binder: undelivered TRANSACTION_ERROR: 29201
[ 1093.550947][ T7831] binder: undelivered TRANSACTION_ERROR: 29189
[ 1093.570732][    C0] protocol 88fb is buggy, dev hsr_slave_1
19:21:01 executing program 4:
perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0)
r0 = syz_open_dev$media(0x0, 0x2, 0x0)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x0, 0x28)
write$P9_RSETATTR(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x1b, 0x1}, 0x7)
perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x81, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f00000003c0)='cpuset.memory_spread_page\x00', 0x2, 0x0)
ioctl$VIDIOC_G_AUDOUT(r2, 0x80345631, &(0x7f0000000040))
write$cgroup_int(r4, &(0x7f0000000200)=0x42, 0x12)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000100), 0x2)
keyctl$join(0x1, &(0x7f00000005c0)={'\x00', 0x1})
r5 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x20, 0x880)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x1ff)
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$VIDIOC_DBG_G_CHIP_INFO(r6, 0xc0c85666, &(0x7f0000000c00)={{0x2, @addr=0x8000}, "94a69e7ecb1c57e11a54a25d1d6ca12ea13abc3a4ffcccc5b6ce381ecebbf903", 0x2})
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0)
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47744279}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(r7, 0x1, 0x0, &(0x7f0000000280))
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r5, 0xc0405519, &(0x7f0000000180)={0x6, 0x6, 0x80, 0xfc, '\x00', 0x8})
getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x2, 0x1}, 0xfffffffffffffe29)
ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x0)

19:21:01 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0xffffff7f, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:21:01 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4040ae9e, &(0x7f00000002c0)={0xfffffffffffffffd, 0x600000000000000, [0xffffffffffffffff, 0x100000001, 0x0, 0xfac2], [0xc2]})
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x400, 0x0)

19:21:01 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3005, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

19:21:01 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0xd000, 0x2000, &(0x7f0000ffc000/0x2000)=nil})

[ 1093.705510][ T9431] binder_alloc: 9429: binder_alloc_buf size 12296 failed, no address space
[ 1093.721858][ T9431] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1093.752774][ T9431] binder: 9429:9431 transaction failed 29201/-28, size 0-12293 line 3147
19:21:01 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0xffffff80, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1093.814192][ T9440] binder_alloc: binder_alloc_mmap_handler: 9429 20004000-20007000 already mapped failed -16
19:21:01 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x407f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = accept4(r0, &(0x7f0000000180)=@sco, &(0x7f0000000200)=0x80, 0x80000)
getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000400)={@multicast2, @local}, &(0x7f0000000440)=0xc)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000240)={<r2=>0x0, 0x2}, &(0x7f0000000280)=0x8)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={r2, 0x2, 0x5}, 0xc)
getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/8, &(0x7f0000000840)=0x8)
r3 = socket(0x10, 0x3, 0x2)
getsockopt$inet6_dccp_buf(r3, 0x21, 0x2, &(0x7f0000000040)=""/239, &(0x7f0000000140)=0xef)

19:21:01 executing program 5:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$netlink(0x10, 0x3, 0x4)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4)
write(r1, &(0x7f00000000c0)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)

[ 1093.859546][ T9440] binder: BINDER_SET_CONTEXT_MGR already set
19:21:01 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x4000, 0x0)
ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000000080)=0x1)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'team_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES32=r2], 0x28}}, 0x0)

[ 1093.923384][ T9440] binder: 9429:9440 ioctl 40046207 0 returned -16
[ 1093.923436][ T9441] binder_alloc: 9429: binder_alloc_buf, no vma
[ 1093.929938][ T7831] binder: undelivered TRANSACTION_ERROR: 29201
19:21:01 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x40030000000000, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:21:01 executing program 2:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0xffffff80, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1093.978079][ T9441] binder: 9429:9441 transaction failed 29189/-3, size 0-12293 line 3147
[ 1093.991681][T19041] binder: undelivered TRANSACTION_ERROR: 29189
[ 1094.210770][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1094.216600][    C0] protocol 88fb is buggy, dev hsr_slave_1
19:21:02 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0xfffffffffffffec5)
r1 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000680)={<r2=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000380)={<r3=>0x0}, &(0x7f00000003c0)=0x8)
getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000480)={r3, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, {0x0, @in={{0x2, 0x4e20, @multicast1}}, 0x6, 0x1, 0x6ed2, 0xfffffffffffffffc, 0x4}}, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(&(0x7f00000004c0)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000))
ioctl$TIOCMBIS(r1, 0x5416, &(0x7f00000000c0)=0x6)
sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_GET_FP_MODE(0x2e)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0))
utime(&(0x7f0000000240)='./file0\x00', &(0x7f00000006c0)={0x0, 0x3})
chdir(&(0x7f0000000340)='./file0\x00')
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00')
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff)
getrusage(0x1, 0x0)
umount2(&(0x7f0000001340)='./file0\x00', 0x1)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000f46000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000fe8000000000000000000000000000ff00000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ff0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000be86e1a46ba3b593d0000000000000000000000000000000000000000000000000000000000000000000000000"], 0x1)
readv(r2, &(0x7f0000000040)=[{&(0x7f0000000200)=""/181, 0xb5}], 0x2e)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x100000000000018b, 0x0)
r4 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x4, 0x80)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r4, 0x80dc5521, &(0x7f0000000240)=""/4096)
r5 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000001240)=""/255)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)

19:21:02 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3006, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

19:21:02 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:21:02 executing program 2:
r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10)
connect$netlink(0xffffffffffffffff, &(0x7f0000000440)=@proc={0x10, 0x0, 0x25dfdbfc, 0x42020}, 0xc)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0)
ioctl$FIDEDUPERANGE(r3, 0xc0189436, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f00000000c0), 0xc, 0x0}, 0x20000080)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000180))
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
io_setup(0x101, &(0x7f0000000040)=<r5=>0x0)
r6 = eventfd(0x3)
io_submit(r5, 0x3, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x6, 0x0, r2, &(0x7f0000000500)="15ad9d538094991107993a19320a2770b573ccb55472b614f657ce6fc122310a5eec8e732abbd89776d5fccdca3f53475ed7b80e5e9208c51aec838d70f6db1bb067627c3d45b56013140ecb2039432d8a49734a02dfdec3c8e276e02ce44740791dc93137409ec9d69d6288de76cbf810574c538fdd4c696c3e02c1eca48f24703bf5c31bf4f9d9ece06cf15d9dea61df664225d42e494aca40453309e6054dc95174d407154ef1332aaba6a385077ae74461d88825e92853889c4dfe281dbb59bb20b80a9f1c9e683f8249af974fee94a11998fa45b447d6447bfab4aa9f606fa69eb5b3c224", 0x0, 0xffff, 0x0, 0x2, r6}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x33, r6, &(0x7f0000001580)="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", 0x0, 0x2}])
syz_open_dev$amidi(0x0, 0x0, 0x0)
getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, 0x0, &(0x7f00000002c0)=0xfffffffffffffcd1)
ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, 0x0)
ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, 0x0)

19:21:02 executing program 5:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0xfffffffffffff12f)
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x5)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2000000008}, 0x1c)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e1f, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
sendmmsg(r1, &(0x7f00000002c0), 0x400000000000027, 0x0)

19:21:02 executing program 4:
r0 = socket$pptp(0x18, 0x1, 0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x400200, 0x0)
ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000100))
r2 = socket$pptp(0x18, 0x1, 0x2)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x561280, 0x0)
r4 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00')
r5 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000400)={'syz', 0x2}, &(0x7f0000000440)="4e0fbdf2a362c647dd393248ac6f98ca7ccfd87b226cf19a4ba28582325b83a79e220df2fe9824dea16dff16826919aef5f7747dca4a8708c53588f810128b888360ae73335ba572fb50ef40cefc73b83abfee4e4dfb5d915591d93e215536ba5dc56e9ddeefd1e76c3ced277b73889ed53f4ec835297c5913cf57c25fc29872ce83d1567cafac0f154a65f7764947cb03743721fccef3e363c93961d69b50979bcccceb4b9752565e63ff3ddf45dae8d228c43fc94aa5b34d1494d12ec99bf7ec1c67c21d8ad0b7c265e8ba16cec4e3fe882f044fef24eb6f64b5b8eec7daa7573e518e078850cb9a3a4e2ef964002b4091eb18087abab91efd9e13488d5721a0771c5e06ab595910bc7983f3281ae66ef73b76c6368e857f3ca21558165bcb1159847a87973fd471e1990321551d1ef17adf8dc585fd672f10bf6025cf49520fb3fc5ff9232014a53b2eb00d87bfcb0fa0c785d75fb8c95d07d396fca2cec2f94472e4a8ba6253d264eaa06dca01059b5805d61145d7d1ba79767b506cce45143cbf264303e9e33e5baa0f9bf049657e026599384d2f6df7f033df70da03c28d6cab6d08d122661b8e5d58651f4c2b1783f0e3a8ee5d1f0ef6f7fce025e9220e902befa5246bd62f780569b4968e9ec3d93b98ba7991694d3ec175fb70fe27bad5947875f339fc50a4481368212a387f0cd21131f45fb7e1221868b84628c49f149e11848f30eb05585d57c7b6a1201d5a1a37c9c085e25803eddf559daef698e6e35d6c33023ecba01f7f4810d58eba46862a05c2457dccf50869e8cc6b0030b8c9c1d0aef6605c5d029a042a1e77436eca2e5172ae67fcaa9f2c94e94b0edacc936ae89da695028f508005956d4a92d2c094519955aef657e71dfbf0719f28a94a036e3524793fba90f8e56a1bc43d88b98970ca0caf19c653ba222778cdc62d7698f4dec02bbde63001dce3923d827bbaf969666278f7f5cd7fad9bd9aaf18620cfd27ad5ca5bfc1e727068c3be625c596018217d7fa6873a642c4c095c21952fb8486789a7b4b33538be433c029bf2f7904768d79cc589061eafb8b8c5054cf81da9844abd1be15ff7ad922ffbec6354685b2a437e0099298c2162ae8d3d841c38c19978474740bd04ae1981ad7ec7eb334d901e72a281590d4723b72dcd0cd48eb2558ee0b81a2301cee8f7ac911bd1d13c8b68145efb704a275c4bbfef5fccd1d9aacbbf24762e9254aed0b905164359a1762325d1a5a5a99661617ea4164c482c916dc68f8f5b0872190e631a073610896c9d5489fe1bb6c82fbc2a773ae7b3ad90deb2eb48766141e2f2876d8db24ef8ada71e33907d2da4aaa68c82f46063b4cbb935dce1953a4aaea07502f65c3115aa4c9044d2776edf3faed8fa21829c640205bbda5097d65476b2885f872e680678d48097e793a612c105c96f4760ff6169cff22b23e26b3dfbe4d049f52fa00c06a359b412de401d96b53d8c1752fa8cc70172f60503de22af017266781dd7b15203c68609b5b975ad413c8312406027868c6f16ea94c22e715c37399f1d0583120d7003d083db47f7ac96c1302d55616c776d6cbb523801c87d691a099796915e8d23c21256832f03a469a0e973af8da3b4efc6f125eeb96bf01bc42a41520b720e39bb98f943d4de193f1ce3c807be7fccf9b18c9920e0e6a60099426839255cf8db5c8a740b4b8df0cc5400f89aec9e42aaad831083c211f5385e4389b2fc0979af8cc4ff912bbc4ec81f4cfacb6739238b4bd5ca5dd8fa03ec60b4abf26670b11f812e0abafecc4379b5d5202346c6a49167c7e96f89a4fe88452940c965c4e1c6e7f8a28f0617a6d65669c5021be1d1ff55d2854fa8e0551799e5776b1c0947a7fa3069302b2c0c22079630663e3bf9b779bc4174fcb1afdc2e7aa287c9fe2351f91d09447be737618331bdc68aced0285163c8306e76f298fa15988880a4ea77069647749aaf56baed3641592f09a6d4648016059db0b022318b1dc040ac1656701ffe6c117099be2799b9f3a79953c654df99c82ccc8aab5aedb4059326942af521d7c07d2ca69560661341e4f01b1d528b1cc9b91c47f6e2975a991110c41450532ca6e52390994eab8bb5436acf093fe7cd71aa3a1f69d0565c8337058dad8a668b928c95257b264867588345229c67f88f4c9cf054b106682318d0eee4d722e5f48d193031817da68df4951ef9bea87d33ed3ea78da8cdb29bdaad677216d1cd41648e57b850381c81db6e22c521f79107bda6deb46baa36fe37de12bc909f0c625335027b1f238e7904f098f04e75db8846405fb78057b3d2c9cd2e27843b30a3e5c724b37eb04c1025508117e17d0a746a249b22bc330b0ef3ac33cf2cdd1a398bb2deec333471ec4447cc1b2d4104e22dde6ea8d25d459e3c05b40a5697d7bbe1c0d8624cdb874316710b9300e5485ad889fa95c09ff8fca4a07114dd2fa90e4bcd5d85e7e05647e73dc5ff8a067541e512d63f55c490fd972852a38ba1382ba250c3793c4c995e1b0303ff3f3a24876c793395bebd8e818cb47c207f26dc03dbd98cbda8b2ff030fb71298925b3269b79f0f688fc4065889fe0fcd8682a70e5ea98d6facf4c77d0314d1f3bdeb9c2a1a5f92431904e40ee84b1f414750014c058ae9576940ca5945fe83a42458887cecf8348ac1496358dec9d25fd846176a8e5ee6350dea1cb6eeab9f2d7d57c17f4cc61d3c4d6428b82c2e97281112e63aa09630be295364714d2ea6eb49e81f8f353c62ba1baed7f8b5426a1e144a4a495d1415cf2c041b0c290bd5dc5bba5f082a57b3715d627410c4ba5c829a962dbcf488dfb483f7e0522cae4646795d45aeacfb7d80b673fd178893531c6faa04e15356ab9466ee7d83a4317b19f86b3b01576edb6ed42a019ef141972ef46011e5049820c9f625d1cf657dd099730a42a5bdf72083a0400c98141f7b27e8e588d94eda30a9b73b50bc9bf3ce180c6e5019b899c9f64003514bb508a27e7e24772fb7af840d69616b3c922d6ebca93fe04ee8f6de9a5ed164e32933e35ac6094c16961c2ab60767d658edfcc29007557a05a935eb8e03c085f663551eb5ff4a99250ea47f6d7569e503264ff3b91fa319a4e07e4a9c6860529b5060ea378a564a73c437b781dda927dce94e33b893efd29189bccc9526dfd7e5d957335a188c5d45d04e0b3222a972996145d13effa50b97e190aa9ce78e05d4fe607d72249496d1608ae8b1b5275f425e55ae815d748c32bfc2ff7ef2ac8dba89583bd2b0d0261cc130d1274a5c6d1710fcd598143cbbe96eff2de068ee22766fd791adc91c188e721b7c0863f788f4d5d91e062d5e276eec241a856d4738e8e4ed975aba4599f2697c120543d9616d4eb807e1b9a2abe3a9ea4543cbf7e3f8f10e4eede28543bb2775b4874c5dd4739a3ccc75b6f97203b6a584b97b0ebf5f57fcca4813ae63d9ae36a59883ca3e890b3448dba19c75b385a0e798725978cd4f46903b0921ef1f2ecad5b3dc33b99799d4040e9013d2376cf9c278ca410205a5bbad0bffab5a61ef6ff2d97f4295c5907985b0b2d90caa0bed8b58964a629fc8f96ee350e6dfab2d124ed4f04c005202a54bc75a4323cc0dc245035f8c1f1585c873c3cba8bde946d5912b830db8b6c55f35978c10d8517375a22e89be6c31d26d7f702f41f9af724eb3b0d749404f24b61d0a0b0fcac589f09b337b610e108729f58db0323f7bc598b98073ebcbdd1960078fc5f547f16144eae72f447753afe6e7fb42ca87b07bc9b33c689dc74975c2a8c1f7252b00b348f854c859f6e9931564b55b3ed3c0dee64e3cf4cbca5a532515d6b763c81b72782ce59bd516f391adb3c70018cb2c6209ad51fade960afbbe023a7ae96fd8160d6534854016e2cb7c2ecb18dc2a695396afcae0a09aef02684bb46179b10397dbfef59a0539f91bae2e85fb4bff1a4e8a5a00c17b4e88eebcb28d866a8ac02977aeb73442e751b2edddd61da5b6e703c54423ad87680863b98107b29e3947a6136ab80a5bf2920ef8ba4e23ea55a8a07ea7c4d8fc58ce77a3ab7f153ad8da3f1ceb9b3fdc1d3fafa228419ea2e02a4f72a2505adba46d6536aa53023c64ff3dc417ab2d01a554365432b75fec110921336c34439d5c8750847ffb38fdb4f5afa9a91c2a8b133721067071de10b39e1c30505c4b504dccc2b21b911383adc0e5f86cbc832db3af48eb7fd01c50563198857e6fbefd4264ac988f6d69acfb7417a84c7948ded6881849abe5bfbea5974dca95b1915ab4b01f98f2e5c48ae0e10ed84f2ad89f00f1ecccb05f63c452603a3d7382c0d98e442e648acf2170fe84ba3623cd5939499ece7ff7bcaf768ab88aff2b8aeaedda8125b7fb6de9f0dc22e1c63e0e65af8d0ec411c580b30d0028b798edeafba021830b93a96d272f9560952bd73e0e3a9b20c7e586fb66f5e606ec8ef0dbe83f2f20e5fa6a8384c16eeded957602dd7af12936d9fa76fbbf26abd4cff09ab8e5b86bb46cebbfc8383d857ec361f6f3b0cf2ef4d0f5ae3d31ad2644635a80656bda38ed3e117b80a8d53d8fb863ccbd5a60d5f5b840ccc453fe72589e79e0a74f0acd0f507b44c66341b876826caeb43651f14b9394d137f05c773dcae4b51610284c4ac10ba20aeabf58df461f5d0b874348c6834d4e24984bbec75d1444f6a2fa541602a368c22be0c4d867220f57d6cc20f2e22b8ae8ec9d618d68871dabf044445cd0b972a61f4ea0c6ef33b1cb01d0a5fd5482134a145930b891901eafff9f8f760fc626fa64119703b58e87f035993c323918a4b82649e3ebf02b99ba5dc38adc79730d66f0b5107e9a46251dcf91e20dc2d087283ba972b331b92489468355e3b7e0ac143407ccbe3f88fbf6ab77c6646eba0fa91de1dd0426883af24b7e46d29f500be9150ced4330ff995d83aa8ada1680b01e61d325b03108bea862c7c60ca00c420828533b376f49a6e14da341214207db31d86c63ebe2b7af4b11bda176ca8fcccfece60c21e6e70f402a484953ba32e9b3be89db8830a36bad585406fae21561d1d15831b734199872aa52433f96d2bfb8195d784a57d6e10d9a3b79b8814f9437e361b40adae2d0fc82785d8e07b678304bb69c6b5ba1c50c80b2ef3ef039479e2af5680808bb68bdaff08b5c266e29ea4cc44bd577374e607f7ac8a1bc093a14b7aa04190ebd85d303fb9109d3352283f0a94010aa253012f750b699092fba78055e8b39f2401ed316544766a83894ba155dbe65ab2a839b172e825a0ddce13f3e7e7609dc6497748e6b452b599bb600d01cf87b340ce7d98da39085449904728c4fc1ba2634e639998cfe9f061607012fd4280a270a028c99b958ad0d02cf136e5dea274dd9aa5f1b40b2716b79ccfe7c132a707b674d7a1b6235886535b39288fb1893ecfc61c50e2e49bf3aaed9b5cf44b0cf3114c1e77d776293badb9923fad1d3fbb6058b175e8b860d4d538784935b9e7fef8ff8e024cec21e9aaac063f0a496e38ab8ad4d50c879738c3e5ddfe9e9bdc61c4db20bb804078e008f3155cb119db2f8868f252d9f6caacc47f126b219386ca02c697517485762c346dc42d2906f30435bf132e39d4e0a1c1c79cfd235161cc910ef1d73a6ca572cce32f9cbad6174f3331ab9355460bc72b194088822696735751ef4381948bf9f6601a6b6e09a93c1592ab76a6fb15256ccc2401bff02f2734abe2cbdee6fb580b32b3c08fb9367922300ad03601dc7671dacedf44c6210af87cbf6", 0x1000, 0xfffffffffffffffb)
keyctl$read(0xb, r5, &(0x7f0000001440)=""/86, 0x56)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f0000000280)=0xe8)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x98, r4, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8, 0x1, r6}, {0x7c, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x3ff}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x20044080}, 0x8000)
dup3(r0, r2, 0x0)

19:21:02 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1094.483107][ T9486] binder_alloc: 9484: binder_alloc_buf size 12296 failed, no address space
[ 1094.522461][ T9486] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1094.559506][ T9486] binder: 9484:9486 transaction failed 29201/-28, size 0-12294 line 3147
[ 1094.592916][ T9494] binder_alloc: binder_alloc_mmap_handler: 9484 20004000-20007000 already mapped failed -16
19:21:02 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1094.636370][ T9486] binder: BINDER_SET_CONTEXT_MGR already set
[ 1094.646456][ T9494] binder_alloc: 9484: binder_alloc_buf, no vma
[ 1094.672470][ T9486] binder: 9484:9486 ioctl 40046207 0 returned -16
19:21:02 executing program 2:
openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uhid\x00', 0x0, 0x0)
unshare(0x600)
pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8})
r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x1f, 0x2)
getsockopt(r0, 0x7ff, 0x1ff, &(0x7f00000000c0)=""/193, &(0x7f0000000200)=0xc1)

[ 1094.699251][T19041] binder: undelivered TRANSACTION_ERROR: 29201
[ 1094.707889][ T9494] binder: 9484:9494 transaction failed 29189/-3, size 0-12294 line 3147
19:21:02 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080)=0x800000000000, 0x1)

19:21:02 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x80ffffff00000000, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1094.753446][T19041] binder: undelivered TRANSACTION_ERROR: 29189
19:21:02 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3007, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

[ 1094.850694][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1094.856566][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1094.916388][ T9516] binder_alloc: 9515: binder_alloc_buf size 12296 failed, no address space
19:21:02 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x34, &(0x7f0000000080), 0x4)
readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/10, 0xa)
unlink(&(0x7f0000000180)='./file0\x00')
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x20000, 0x0)
write$FUSE_DIRENT(r1, &(0x7f0000000040)={0x28, 0xfffffffffffffffe, 0x1, [{0x5, 0x1f, 0x0, 0x1}]}, 0x28)

19:21:02 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$KIOCSOUND(r0, 0x4b2f, 0x3)
recvmmsg(0xffffffffffffff9c, &(0x7f0000004440), 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000005c0)='status\x00')
preadv(r1, &(0x7f0000000000), 0x2000000000000243, 0x0)

19:21:02 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1094.998670][ T9516] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1095.077265][ T9516] binder: 9515:9516 transaction failed 29201/-28, size 0-12295 line 3147
19:21:03 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:21:03 executing program 5:
clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = getpid()
rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000000))
ptrace(0x11, r0)
ptrace$pokeuser(0x6, r0, 0x100, 0x0)

[ 1095.153917][ T9528] binder_alloc: binder_alloc_mmap_handler: 9515 20004000-20007000 already mapped failed -16
[ 1095.238427][ T9536] binder_alloc: 9515: binder_alloc_buf, no vma
[ 1095.245239][ T9516] binder: BINDER_SET_CONTEXT_MGR already set
[ 1095.262793][ T9516] binder: 9515:9516 ioctl 40046207 0 returned -16
[ 1095.277134][ T7831] binder: undelivered TRANSACTION_ERROR: 29189
19:21:03 executing program 4:
r0 = gettid()
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffff9c, 0xae41, 0x0)
ioctl$FS_IOC_GETFLAGS(r1, 0x80046601, &(0x7f00000000c0))
r2 = syz_open_procfs(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00')
fchdir(r2)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000140))
exit(0x0)
pivot_root(&(0x7f0000000040)='.', &(0x7f0000000080)='.')

19:21:03 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x1fe)
getsockname$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x1c)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x3, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x200000000000, @mcast1}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x20c)

19:21:03 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0xe)
sendto$inet(r0, 0x0, 0xffffffe3, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
sendto$inet(r0, &(0x7f0000000140)='I', 0x1, 0x204007ffd, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000040)='P', 0x1, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000000180)=""/184, 0xb8}], 0x1}, 0x0)

19:21:03 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:21:03 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300a, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

[ 1095.351604][ T9544] binder_alloc: 9541: binder_alloc_buf size 12304 failed, no address space
[ 1095.385107][ T9544] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
19:21:03 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:21:03 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x1fe)
getsockname$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x1c)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x3, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x200000000000, @mcast1}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x20c)

[ 1095.413111][ T9552] binder_alloc: binder_alloc_mmap_handler: 9541 20004000-20007000 already mapped failed -16
19:21:03 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3012, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

19:21:03 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34000, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1095.468975][ T9544] binder: BINDER_SET_CONTEXT_MGR already set
[ 1095.485752][ T9544] binder: 9541:9544 ioctl 40046207 0 returned -16
[ 1095.492827][ T9552] binder_alloc: 9541: binder_alloc_buf, no vma
19:21:03 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000280)='ip6_vti0\x00 \x00', 0xfd7a)
ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0)
perf_event_open$cgroup(&(0x7f00000000c0)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet(0x2, 0x3, 0x9)
sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x10)
ioctl$VT_RELDISP(r1, 0x5605)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f00000000c0), 0xc, &(0x7f0000002980), 0x0, &(0x7f00000029c0)}, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x806, 0x0, 0x8, 0x4})
mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x3, 0x2)
setsockopt$inet_tcp_int(r2, 0x6, 0x1a, &(0x7f0000000000)=0x4, 0x4)
write$binfmt_misc(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="00010000"], 0x4)
sendto$inet(r0, &(0x7f0000000080), 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffe7)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x440001, 0x0)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0)

[ 1095.584929][ T9566] binder_alloc: 9564: binder_alloc_buf size 12312 failed, no address space
[ 1095.606640][ T9566] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
19:21:03 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400300, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1095.628130][ T9570] binder_alloc: binder_alloc_mmap_handler: 9564 20004000-20007000 already mapped failed -16
[ 1095.640574][ T9566] binder: BINDER_SET_CONTEXT_MGR already set
[ 1095.655139][ T9566] binder: 9564:9566 ioctl 40046207 0 returned -16
[ 1095.668147][ T9570] binder_alloc: 9564: binder_alloc_buf, no vma
19:21:03 executing program 5:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x6000, 0x0)
ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000100)=""/4096)
ioctl$KVM_SET_XCRS(r0, 0x4188aea7, 0x0)
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc008ae09, &(0x7f00000000c0)=ANY=[])
socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x80000000, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x2, 0x0)
r3 = socket$inet6(0xa, 0x40000080806, 0x0)
io_setup(0xffffffffffff0000, 0x0)
io_getevents(0x0, 0x8001, 0x1, &(0x7f0000000240)=[{}], 0x0)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendfile(r0, r2, &(0x7f00000000c0), 0x7)
bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r3, 0x20000000)
r4 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r4, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r5 = accept4(r3, 0x0, &(0x7f0000000000), 0x0)
setsockopt$inet6_int(r5, 0x29, 0xb, &(0x7f0000000040)=0x100000000001f, 0x4)
sendmmsg(r5, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, 0x0, 0x0, &(0x7f0000001d40)}, 0x2000000}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x2, 0x0)

19:21:04 executing program 4:
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x389000, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x4, 0x0, "5f183c7627f86ffbcad2096871e4d3dc3e4464bba4c43b3d1fd732ce9f0eff03f1c656b87fbd1682d8ab42949933fdf51dc5acc64cb38d3c7725bb4821efca221cf5c1eaf24ff7f044b9f26c22072109"}, 0xd8)
bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x0)

19:21:04 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3048, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

19:21:04 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = open(0x0, 0x0, 0x0)
ioctl$sock_FIOGETOWN(r2, 0x8903, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00')
sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000003}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x28, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x800)
ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0)
io_cancel(0x0, 0x0, 0x0)
ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, 0x0)
pivot_root(0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0xae47, 0x0)
pivot_root(&(0x7f0000000600)='./file0/../file0\x00', &(0x7f0000000640)='./file0\x00')

19:21:04 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:21:04 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x101000, 0x0)
ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f00000001c0)=0x8)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000380))
timer_delete(0x0)
r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0xd44, 0x40002)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000000100))
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f00000000c0))
openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x10000, 0x0)

19:21:04 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYBLOB="400000001400090500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="14000600000000ff01000040000000000000000014000200fe8000000000000000000000000000aaf0c9fedac3708a7ad7ba5a25270853dfc2bc9d02088e9b6f5966d6628d2820e4e43e21f9bed71301c755eae15ee8915a12180c417ae4ad7b325925f85ae1853b8250e9af188a1d9c3c330980aefe842e32d2531c3d73e086f88d2641353372c5a5f1699559309fd1c3995fc0adb568e4e2c15b3c426394d28ff03272"], 0x40}}, 0x0)
r3 = syz_open_dev$sndpcmc(&(0x7f00000009c0)='/dev/snd/pcmC#D#c\x00', 0x9, 0x1000000003fff8)
ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000940))
sendmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="4d2546661848aee7ac0f1ffa5c8f7ceaef182c4bc1135139f0d56db038f23b2e006aea2e0d029736a122aed933503d42093bbbd3c3614a9123f8a6781792f25dad2b7c989706d8fdfb584dc4edabc3dcb9689f0dddf17f5acd3a8b51af4f873c5aa8f143743019e39aaa3226181ea67b871ab869a6c0", 0x76}, {&(0x7f00000000c0)="6d5c70f413450774fa45c6b73958dd302c774b305e61dc1ae479ca534f718474888455bb8c5802e1aeee525c50c0ce5b4392420000ab57d89eb1984e347f57092a5967d60b54f17ed4ee0cf44be3dbd4d1f05f5110c4b2c9bc076bdff12f24f3ba63a4cfe80a3b79e8d30a377a9b5f9dfdb8f42e147150b296da75691be640fe", 0x80}, {&(0x7f0000000200)="801b2c92cc2eb491f4069ad8bdcb4279ded864f2854a19d9e13c5970ac04ebdfeaef9b28cea6da4874272225be177b7a75acd865391c3e2f5af9d674cb9621e62c46b510b160a246450b042f8186345096ece4e1c96c09258617046313bc0e6f8b1166aafe740836a72b681c3cba8fc7ba0d7d45b4b7e8deb7487ff2", 0x7c}, {&(0x7f0000000280)="8e65e58eae050f0f8406581bd1fbf5608ff6a65c24ea752f08ca6249facf7e8f7cf3437cd51ac209485e00025cedc9b3fd79dee88257ca8d776edb622d2905911a467b48f8c71b4ff001c2ba58ecff9f5066fd1eaac21d382f5289c473d8f937f45de9f9b49b33c1d423d2551d98bdce6a25a862ffc2c9fe8fcdf452b8f6def89d7e8f9c9da4a22166e84f884c14769375c8996684543e17f97ba4b28ee56ba675f7a89d5530ecdb673aa6aedbd8c484f4d914e728a432f80417fabaeace1bbc7a88f24bfcacbe351f", 0xc9}], 0x4}, 0x9b}, {{&(0x7f00000003c0)=@caif=@rfm={0x25, 0x0, "fe855cb53c647fe362310610d3226e35"}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000440)="6aff08fb55c32abfca49f86559f1a96bc7baf63b7eaf9fe6f6e04f7f21151fdefcdea32898e9c0e2d3e550ea3fc9a16e7822e8040a4f670ec70fa35f44531d437d27b71f353db9d0e63add5bcf96791a634c001b422a490d01a888bffcd85c2ca939edf7d0137f84f6b0c6183bc649709363ac0493a507e3ef69ab66f59f50446753bec5139915fd14249457caa61c1289f77dab44adb11c5ae08dc2aefb8820f99d2ae6753c553a709a67a792776edd6a811d8ae45843", 0xb7}, {&(0x7f0000000500)="5f80865fd6caf886bc5b66113758ba5869cba2953c6953dce4506111783c307fb35958e78710eb8ff942fe9386339e3be5275eb90ee393732b15425e2c91d23558dabc51", 0x44}, {&(0x7f0000000580)="3ce4d6e77b20eab45ec7a5abb65d13a2599a31c9fc9d7334f16c1e", 0x1b}], 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="d0000000dfea1a6c000000004ab836060a4394b3daf98c0627deea806bc6fef1046406c9cd76598d95df13077301618dce8e8d611eaa46f07712a3fa978a2640d570ca46d0fa1327c54a277b3001a2ea928fc89cfcdf23038a4ecc97143027d8663ac0d0ef08d50fae52b2a636732fcc37aacf93e0d5a25e5c1526f144935a1a8b68dfff020e3a288a3643bbecb48da36775e623ad908c463b3355c0939116be4467a0c84c0190739e9509d3587f96cb27e17f70f699d30b7b8dad87636064a78efc3fe4132a10080924d16b4f36e0002800000003010000fdffffffeec3323cd54d84ac2cdab0698175250d76e7e6c027f71426c3d9390048000000050100004600000052edb741c3d6fbf4a28a2eac57ed3f2ee7acd3c08e0832d00ece2750f542b1ca8e058cb9c42adad7bac42add6fdc21026271e8c738d0de497cfb0000f000000007010000ff010000244969103a7077fdec41f5edfaccac010000000000000049904fdf9ec935b76086bdc1f6e9db380c61b59f9ffb4e3eca2056179c1f52b1f7f954b6acf4eeca05d199a589993971f588beaebd678c83222a4c1b3cd012f63f9348e036dd556cb6362d1482f6024b9086dc01a922f06c336d53e580dc49fcff73a9c4fe1ee6a792090c97e83010e4782e8073ee9e0ba78391c4466be997e78067d857d9c2b961a1d43ddb2588839555a9aab2b705c9b6be08accd816a6cf76d4597f2ef9ae21f404b3e2c11df8e26af38bbd98e2fd107a2d54e3825213d88043f74501976a616be218f6600"], 0x230}, 0x9488}], 0x2, 0x4000)

[ 1096.332156][ T9601] binder_alloc: 9600: binder_alloc_buf size 12360 failed, no address space
19:21:04 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:21:04 executing program 5:
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2b, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x1ff)
pkey_alloc(0x0, 0x2)
r1 = gettid()
prlimit64(r1, 0xe, 0x0, 0x0)
r2 = pkey_alloc(0x0, 0x2)
pkey_mprotect(&(0x7f0000014000/0x3000)=nil, 0x3000, 0x0, r2)
r3 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x6a5, 0x100)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4)
getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000100), &(0x7f0000000180)=0x4)
openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$inet_mreqsrc(r0, 0x11a, 0x1, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2=0xe000000a, @loopback}, 0x28)
r4 = dup(r0)
write$P9_RCLUNK(r4, &(0x7f0000000040)={0xfffffffffffffee5}, 0xffffffffffffffc4)

19:21:04 executing program 2:
r0 = socket$packet(0x11, 0x80000000006, 0x300)
setsockopt$packet_int(r0, 0x107, 0x400000000000f, &(0x7f0000000080)=0x80, 0x5ffa)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'lo\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="5e2f1aea0d18"}, 0x14)
write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0f0100006700000000000000000008000000000000dae77636feb63894b249527132c29b9f5f03aa0000020000109aa0"], 0x30)

[ 1096.390303][ T9601] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1096.481723][ T9616] binder_alloc: binder_alloc_mmap_handler: 9600 20004000-20007000 already mapped failed -16
19:21:04 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:21:04 executing program 2:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x5, 0xa0a00)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000080)=0x56, 0x8)
socketpair$unix(0x1, 0x280000000003, 0x0, &(0x7f0000000000)={0x0, <r2=>0x0})
bind$unix(r0, &(0x7f0000003100)=@file={0x1, './file0\x00'}, 0x6e)
sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x44c, 0x0)

19:21:04 executing program 3:
r0 = socket$caif_stream(0x25, 0x1, 0x2)
ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='vlan0\x00')
r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x40, 0x8000)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f0000000080))
ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f00000000c0))
ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000100)={0x4, 0x2, 0x86a, 0xff, '\x00', 0x3919})
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000000140)=""/165)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000200)={0x7d, 0x0, [0x7fff, 0x3, 0xe28b, 0x7ae]})
write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000280)={0x2, 0x2}, 0x2)
ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1)
r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm_plock\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000300)=@assoc_value={<r3=>0x0}, &(0x7f0000000340)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000380)={r3, 0x800}, 0x8)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0)={<r4=>0x0}, &(0x7f0000000400)=0xc)
ptrace$setregs(0xd, r4, 0xa7, &(0x7f0000000440)="9e49503b28fbee650bde9b98a445fa2fd732260bb60f8711b0f110060292a9e66bab0ff682438a491b7432f71d4236a4133a548043983581b598b8d5ccf142a3f470da968fb51c1773dca0de1160ce899fd2d5dfa606bf162017c80e18a24b6750381b87cb16066ea4a55327d133cd63d6fec6a1a67ab5e409b26ba68c6b6412db00117383efb0d201402a6750d67ca8a9a07bf55b82515b266b06e17447db48d09993f4e1e3cddcc5d6a26905894798cfe852695a5d5dd66ecaa7a5368e20722bd4a673bf")
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x80000000)
splice(r1, &(0x7f0000000540), r2, &(0x7f0000000580), 0x7ff, 0x1)
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r1, 0xc0305615, &(0x7f00000005c0)={0x0, {0x6, 0x9}})
fcntl$setown(r1, 0x8, r4)
ioctl$RTC_EPOCH_SET(r1, 0x4004700e, 0xffc0000000000000)
ioctl$TIOCCBRK(r1, 0x5428)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000680)={{0x6, 0x1, 0x7f, 0x6, 'syz0\x00', 0x92}, 0x6, 0x20000000, 0x6, r4, 0x8, 0x0, 'syz0\x00', &(0x7f0000000600)=['\\\x00', 'vboxnet1eth1systemtrustedGPLppp0-md5sum%GPL.\x00', 'nodev\x00', '#security}\x00', '/dev/dlm_plock\x00', '/dev/dlm_plock\x00', '\x00', '%\x00'], 0x61, [], [0x3, 0x800, 0x8, 0xfffffffffffffffd]})
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f00000007c0)={0x3, 'lapb0\x00', 0x3}, 0x18)
ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000840)={0x7, &(0x7f0000000800)=[{0x8, 0x1}, {0xfffffffffffffffe, 0x6}, {0x80, 0x5}, {0x7, 0x9}, {0x9, 0x7fff}, {0xfff, 0xc9}, {0x1, 0x5}]})
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000000880)=""/80)
write$cgroup_int(r2, &(0x7f0000000900)=0x3, 0x12)
timer_create(0x7, &(0x7f0000000940)={0x0, 0x2, 0x0, @tid=r4}, &(0x7f0000000980)=<r5=>0x0)
timer_gettime(r5, &(0x7f00000009c0))
socket$packet(0x11, 0x3, 0x300)
ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000a00)={0x5704, 0x756a, 0x8000, 0x9, 0x9, 0x40})

[ 1096.539882][ T9601] binder: BINDER_SET_CONTEXT_MGR already set
[ 1096.564129][ T9601] binder: 9600:9601 ioctl 40046207 0 returned -16
[ 1096.564406][ T9619] binder_alloc: 9600: binder_alloc_buf, no vma
19:21:04 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x1, 0x0)
ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000300)={0x64, 0x3, 0x0, [{0x72, 0x97c, 0x3, 0x6, 0x4, 0x0, 0x3}, {0x8000, 0xda, 0x1, 0x3, 0x1, 0x3d, 0x2}, {0x4d, 0x9, 0x3, 0xdfbf, 0xfffffffffffffffd, 0x1ff, 0x3}]})
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r2 = inotify_init1(0x0)
lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200))
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000440)={0xffffffffffffffff, 0x3, 0x80000000, 0x2, 0x1000})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000680))
stat(0x0, &(0x7f0000000540))
ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000480))
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, 0x0, &(0x7f00000002c0))
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000015c0)={<r3=>0x0, 0x1000, "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"}, 0x0)
setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f00000005c0)={{}, {0x1, 0x4}, [{0x2, 0x2}], {}, [], {0x10, 0x7}}, 0x2c, 0x3)
r4 = inotify_init()
inotify_add_watch(r4, 0x0, 0x4000000080000005)
inotify_add_watch(r2, &(0x7f0000ac5000)='./file0\x00', 0xa400295c)
getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={<r5=>r3, 0x4ba61cf, 0x6, 0x3fffffff800000}, &(0x7f0000000400)=0x10)
r6 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="eeffffff07802001005b08000000"], 0xe)
ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r2)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
rmdir(&(0x7f0000000040)='./file0\x00')
ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f00000004c0))
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000500)={r5, 0x942}, &(0x7f0000000600)=0x8)
connect$rds(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e22, @multicast2}, 0x10)
dup2(r2, r6)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000002840)={'erspan0\x00'})

19:21:04 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x231, &(0x7f00000000c0)=@framed={{0xffffffb4, 0x0, 0x0, 0x1000000000000, 0x0, 0xffffffbd}, [@ldst={0x2, 0x0, 0x3, 0x1c10a1}]}, 0x0, 0x5, 0xffffffffffffff8c, &(0x7f000000cf3d)=""/195, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xe]}, 0x48)

19:21:04 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:21:04 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x304c, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

19:21:04 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmmsg(r0, &(0x7f00000092c0), 0x80000000000002d, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x7, 0x4)

19:21:04 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000240)='rdma.max\x00', 0x2, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0)
sendfile(r1, r1, 0x0, 0x3)

19:21:04 executing program 3:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000140)=ANY=[@ANYBLOB="c2e38b551b165803cb90c77cd9382e871e22661da8797a9f9ea7ae23bd63949f058bb583ec11aa521550886161ff2b62d5ad2535a0baca23c5397cdcf2d9d7c775073af0dac83f57eba5404b161c42c822ffc46b0dc26baf5d9b44fac67607f39ae387d56bef07683a2c539374e7aeaaaa55046dc2d9d80cd167c080eb4c82ed33130b074f58c6e53939997ec96048db8ad8d0d135e4b8d62ebe52b375da081b3f7eb4edae5b4139d63f99725d418d6f519fd469bd64045e4d9037a80bf3af"], &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0)
mount(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x2, 0x0)
r1 = getpgrp(0xffffffffffffffff)
getresuid(&(0x7f0000000440), &(0x7f0000000480)=<r2=>0x0, &(0x7f00000004c0))
lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=<r4=>0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000600)={0x0, <r5=>0x0}, &(0x7f0000000640)=0xc)
stat(&(0x7f0000000680)='./file0/file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
r7 = gettid()
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000740)={{{@in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={[], [], @empty}}}, &(0x7f0000000840)=0xe8)
getgroups(0x4, &(0x7f0000000880)=[0xffffffffffffffff, 0xee00, 0xffffffffffffffff, <r9=>0x0])
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000900)={<r10=>0x0, r0, 0x0, 0x6, &(0x7f00000008c0)='ramfs\x00'}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000940)={{{@in=@remote, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local}}, &(0x7f0000000a40)=0xe8)
fstat(r0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0})
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000b00)=<r13=>0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000b40)={{{@in6=@initdev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0}}, {{@in=@initdev}, 0x0, @in=@remote}}, &(0x7f0000000c40)=0xe8)
getresgid(&(0x7f0000000c80)=<r15=>0x0, &(0x7f0000000cc0), &(0x7f0000000d00))
sendmsg$unix(r0, &(0x7f0000000e40)={&(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000280)="9a89c68228a0ae75ac3201903ff3c0a611f4f68f3b5cfec9618a43139af5dc20ad83c69d04bc0eda745bf87587", 0x2d}], 0x1, &(0x7f0000000d40)=ANY=[@ANYBLOB="100000000100000001000000", @ANYRES32=r0, @ANYBLOB="18502e000100000002000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="180000000100000002000000", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="180000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="180000000100000002000000", @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="180000000100000002000000", @ANYRES32=r10, @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="240000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="180000000100000002000000", @ANYRES32=r13, @ANYRES32=r14, @ANYRES32=r15], 0xc4, 0x80}, 0x8015)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000300)={{0x5d, 0x8}, {0x9, 0x10001}, 0x4, 0x1, 0x1f})

[ 1096.882597][ T9642] binder_alloc: 9639: binder_alloc_buf size 12368 failed, no address space
[ 1096.903450][ T9642] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1096.916888][ T9647] binder_alloc: binder_alloc_mmap_handler: 9639 20004000-20007000 already mapped failed -16
19:21:04 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1096.959753][ T9642] binder: BINDER_SET_CONTEXT_MGR already set
[ 1096.988521][ T9642] binder: 9639:9642 ioctl 40046207 0 returned -16
19:21:04 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3060, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

19:21:05 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000240)='rdma.max\x00', 0x2, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0)
sendfile(r1, r1, 0x0, 0x3)

19:21:05 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff80, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:21:05 executing program 3:
r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffff9c)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x207)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000600)={'\x00\xacs\x00\x00\x00\x00\x00\xec\x97?\x82\x0f|@\x00', 0xc201})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x1, 0x0)
ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000080))
prctl$PR_SET_FP_MODE(0x2d, 0x1)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x8955, &(0x7f0000000000)=0x2)
dup3(r2, r1, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0)

[ 1097.149620][ T9663] binder_alloc: 9662: binder_alloc_buf size 12384 failed, no address space
[ 1097.220868][ T9663] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1097.220910][ T9663] binder_transaction: 9 callbacks suppressed
[ 1097.220925][ T9663] binder: 9662:9663 transaction failed 29201/-28, size 0-12384 line 3147
[ 1097.266953][ T9668] Unknown ioctl 21521
[ 1097.335833][ T9675] binder_alloc: binder_alloc_mmap_handler: 9662 20004000-20007000 already mapped failed -16
[ 1097.352202][ T9663] binder: BINDER_SET_CONTEXT_MGR already set
[ 1097.358632][ T9663] binder: 9662:9663 ioctl 40046207 0 returned -16
[ 1097.365851][ T9675] binder_alloc: 9662: binder_alloc_buf, no vma
[ 1097.372907][ T9675] binder: 9662:9675 transaction failed 29189/-3, size 0-12384 line 3147
[ 1097.394580][ T9676] Unknown ioctl 21521
19:21:05 executing program 4:
semget$private(0x0, 0x3, 0x200)
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x10000, 0x654142)
ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f0000000080))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0)
openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x80, 0x0)
pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)="f0d933e52e4b2309ddf0800eb2849f92c1a9fe9c06197d94264efcc468ab49486fd4e179c264abeaee0903a9fcb027fa6e642994856b729fda3cf1784bb2c6f1b73951c065f450b3aeac4c11736a7abcdc2ce4f668588c32f955d97ce986f70ffcb9cf568dd07cbf2e73e1102ce79c81e7b4eec3c7435ec8ed505254f264c769918ea122e48c5bdf89ff484ecd791ed442a74622d8f9fc2b7f89fa3d081c0a239b956f8a92a0a4523bd59b34d3c0be907e3b22d89ea0cb4e6fd3e796064603f2615b08d9a3840472494cf846fcb5", 0xce}], 0x1, 0x0)

19:21:05 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x56a6, 0x25, 0x0, <r1=>0xffffffffffffffff})
mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x0, 0x6012, r1, 0x0)
r2 = shmget(0x3, 0x3000, 0x0, &(0x7f0000008000/0x3000)=nil)
r3 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x0, 0x4000)
ioctl$DRM_IOCTL_INFO_BUFS(r3, 0xc0086418, &(0x7f0000000100)={0x5, 0x8, 0x3, 0x1, 0x8, 0x20})
shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000140)=""/41)

19:21:05 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40030000000000, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:21:05 executing program 5:
socketpair$unix(0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000600)="7685427801bf9010063037780953c84a646631712cda943146fb57011593df60d04108570e69d24c1551cefcb5153d20b4e632697c97193502df6deae7b4c921955fb6086244113182b8f313593c4f226eb613cd2f6ca4a388a9782d215e5884f52b2d7774001bd238965172bacf7a82f5b4ed470000e28d20", 0x79, 0xfffffffffffffffd)
r1 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r2, r0}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00\x00\x00 \x00\x00\x00+\x00'}})

19:21:05 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3068, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

19:21:05 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x40000, 0x0)
dup2(r0, r2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))

[ 1097.485923][ T9681] x86/PAT: syz-executor.2:9681 map pfn RAM range req write-combining for [mem 0x9edac000-0x9edacfff], got write-back
[ 1097.488157][ T9683] binder_alloc: 9682: binder_alloc_buf size 12392 failed, no address space
19:21:05 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1097.530994][ T9683] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1097.550417][ T9690] x86/PAT: syz-executor.2:9690 map pfn RAM range req write-combining for [mem 0x9edac000-0x9edacfff], got write-back
[ 1097.570063][ T9683] binder: 9682:9683 transaction failed 29201/-28, size 0-12392 line 3147
19:21:05 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040), 0x10)

[ 1097.617944][ T9695] binder_alloc: binder_alloc_mmap_handler: 9682 20004000-20007000 already mapped failed -16
[ 1097.639613][ T9695] binder: BINDER_SET_CONTEXT_MGR already set
[ 1097.680481][ T9696] binder_alloc: 9682: binder_alloc_buf, no vma
[ 1097.713801][T19041] binder_release_work: 11 callbacks suppressed
[ 1097.713810][T19041] binder: undelivered TRANSACTION_ERROR: 29201
19:21:05 executing program 2:
r0 = dup(0xffffffffffffff9c)
ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000040))
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r2, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, 0x0, 0xb, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x2c0}], 0x3b6, 0x0)
close(r1)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, &(0x7f0000000080)={{0x2, 0x3, 0x2, 0x3, 0x1ff}, 0x10001, 0x10001})
r3 = semget$private(0x0, 0x4, 0x0)
semctl$SETVAL(r3, 0x2, 0x10, &(0x7f0000000000)=0xd7)
r4 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x2, 0x2)
preadv(r4, &(0x7f0000000480), 0x1f5, 0x0)

19:21:05 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1097.729528][ T9695] binder: 9682:9695 ioctl 40046207 0 returned -16
[ 1097.732053][ T9696] binder: 9682:9696 transaction failed 29189/-3, size 0-12392 line 3147
19:21:05 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='tasks\x00', 0x2, 0x0)
socket$alg(0x26, 0x5, 0x0)
sendfile(r1, r1, &(0x7f0000000080)=0x1ffffff, 0x100000010a000202)

[ 1097.834799][ T7831] binder: undelivered TRANSACTION_ERROR: 29189
19:21:05 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x6c}, &(0x7f0000000100)=0x8)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc020000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x15c, r2, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xe4, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x47f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7b5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x30}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x45}, 0x4000)

[ 1097.941941][ T9718] sctp: [Deprecated]: syz-executor.3 (pid 9718) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1097.941941][ T9718] Use struct sctp_sack_info instead
[ 1098.004217][ T9718] sctp: [Deprecated]: syz-executor.3 (pid 9718) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1098.004217][ T9718] Use struct sctp_sack_info instead
19:21:05 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r1 = dup2(r0, r0)
setsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000080)=0x1, 0x4)
r2 = openat$cgroup_int(r0, &(0x7f0000000000)='cgroup.max.depth\x00', 0x2, 0x0)
write$cgroup_int(r2, &(0x7f0000000040), 0x46e)
syncfs(r0)

19:21:05 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:21:05 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @broadcast}}, 0x4, 0x0, 0x6, 0x7}, 0x98)
r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xfffffffffffffffd, 0xa0000)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000380)="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", 0x1000)
r2 = semget(0x0, 0x0, 0x0)
semctl$GETALL(r2, 0x0, 0xd, &(0x7f00000002c0)=""/161)

19:21:05 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$int_out(r0, 0x40000080804520, &(0x7f0000000000))

19:21:05 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x306c, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

19:21:05 executing program 3:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x40000, 0x0)
r1 = socket$inet(0x2, 0x803, 0x0)
getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000040), &(0x7f0000000180)=0x4)
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000080)={r1})
clock_gettime(0x0, &(0x7f0000000100)={<r2=>0x0, <r3=>0x0})
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f00000000c0)={r2, r3/1000+10000}, 0xfffffffffffffe36)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000200)={{{@in=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000300)=0xe8)
stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@rand_addr="ea849be9b9d156b0e1a805dfc8f2cf72", @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4e21, 0x4, 0x4e23, 0x4, 0xa, 0xa0, 0xa0, 0x3a, r5, r6}, {0x34, 0xffffffff, 0x0, 0x7f, 0x8, 0x5, 0x80}, {0x5a, 0x6, 0x401, 0xe1a}, 0x1ff, 0x0, 0x0, 0x1, 0x1, 0x1}, {{@in=@remote, 0x4d4}, 0x2, @in=@loopback, 0x0, 0x7, 0x2, 0x3, 0x0, 0x0, 0x8001}}, 0xe8)

19:21:06 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqsrc(r0, 0x0, 0x2e, &(0x7f000001b000)={@multicast1, @empty, @dev}, 0xc)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/mcfilter\x00')
readv(r1, &(0x7f0000000040)=[{&(0x7f0000000140)=""/124, 0x7c}], 0x1)

19:21:06 executing program 5:
r0 = socket(0x10, 0x80003, 0xc)
ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, 0x0, 0x10200, 0x0)
waitid(0x0, 0x0, 0x0, 0x40000000, 0x0)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
sync_file_range(r1, 0x2, 0x6, 0x2)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = getpid()
sched_setscheduler(r3, 0x5, &(0x7f0000000000))
ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8))
write(r0, &(0x7f00000000c0)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
renameat(r2, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00')
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
write(r0, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f305010008000100020423dcffdf", 0x1e)

[ 1098.109774][ T9735] binder_alloc: 9734: binder_alloc_buf size 12400 failed, no address space
[ 1098.127214][ T9735] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1098.139902][ T9735] binder: 9734:9735 transaction failed 29201/-28, size 0-12396 line 3147
19:21:06 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff00000000, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1098.218913][ T9745] binder_alloc: binder_alloc_mmap_handler: 9734 20004000-20007000 already mapped failed -16
[ 1098.263926][ T9735] binder: BINDER_SET_CONTEXT_MGR already set
[ 1098.293862][ T9744] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1098.296449][ T9735] binder: 9734:9735 ioctl 40046207 0 returned -16
19:21:06 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00004da000), 0x4)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00')
sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x328, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040001)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000118ffc), 0x4)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f000007affc), 0x4)
close(r4)

19:21:06 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x6, 0x0)
ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0x2)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind(0xffffffffffffffff, &(0x7f0000557130)=@generic={0x0, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a53a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151314a8ef1f1622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80)
mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x600000, 0x40000000000003, &(0x7f0000a00000/0x600000)=nil)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)

19:21:06 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1098.362400][ T9759] binder_alloc: 9734: binder_alloc_buf, no vma
[ 1098.370716][    C0] net_ratelimit: 15 callbacks suppressed
[ 1098.370724][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1098.376469][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1098.389682][ T9759] binder: 9734:9759 transaction failed 29189/-3, size 0-12396 line 3147
[ 1098.404961][T19041] binder: undelivered TRANSACTION_ERROR: 29201
[ 1098.415274][T19041] binder: undelivered TRANSACTION_ERROR: 29189
[ 1098.423809][ T9744] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'.
19:21:06 executing program 5:
r0 = socket(0x10, 0x80003, 0xc)
ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, 0x0, 0x10200, 0x0)
waitid(0x0, 0x0, 0x0, 0x40000000, 0x0)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
sync_file_range(r1, 0x2, 0x6, 0x2)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = getpid()
sched_setscheduler(r3, 0x5, &(0x7f0000000000))
ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8))
write(r0, &(0x7f00000000c0)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
renameat(r2, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00')
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
write(r0, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f305010008000100020423dcffdf", 0x1e)

19:21:06 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3074, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

19:21:06 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000002480)=[{&(0x7f00000000c0)='M', 0x1}], 0x1, 0x0)
sendfile64(r0, r0, 0x0, 0x4)
r1 = getpgrp(0xffffffffffffffff)
r2 = getpgid(0x0)
r3 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x200, 0x0)
kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000100)={r3, r0, 0x4})
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udplite6\x00')
preadv(r4, &(0x7f00000017c0), 0x1d0, 0x0)
timerfd_gettime(r4, &(0x7f0000000000))

19:21:06 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x90001, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000080)={<r1=>0x0, 0x9b6dcfb}, &(0x7f00000000c0)=0xc)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000100)={r1, 0xab, "8e2161edd28447bd2f7da9e4eb409879eb3da4a612cdd2ccb9bcd37f79d73dc40d2b5239b2c5685485437e36b7a0d2221ba09d28b6bf6e66828ee68429fcc57e2e243c101e8a5d2224a1b7225e9157eb2cc3f917cab442d228fcdf5a2cd762a18a0e26c962de7efddea75c9a56982804d4448c3b779cbdee7acaa503c8230eec7a269a067ec2463c0bf94dad88fc6513543e50fa8e160f1162ec98d444b2382c1185abded8b7d087788caf"}, &(0x7f00000001c0)=0xb3)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = socket(0x840000000002, 0x3, 0xff)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendmmsg(r2, &(0x7f0000006d00)=[{{0x0, 0xfffffffffffffe64, &(0x7f0000000040), 0x2, 0x0, 0x400000000000000}}], 0xd3, 0x1ffffffe)

19:21:06 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:21:06 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_EDID(r3, 0xc0245629, &(0x7f0000000140)={0x0, 0x7f, 0xfdb6, [], &(0x7f0000000100)=0x3})
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000080)={0x1000000077, 0x0, [0x4b564d04, 0x8000000000000001]})

[ 1098.667556][ T9785] binder_alloc: 9784: binder_alloc_buf size 12408 failed, no address space
[ 1098.680906][ T9785] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1098.690543][ T9785] binder: 9784:9785 transaction failed 29201/-28, size 0-12404 line 3147
19:21:06 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x2, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1098.758152][ T9790] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'.
19:21:06 executing program 2:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2)
ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000040)={0x6, 0x100, 0x7a5d, 0xb336, 0xff, 0x3})
r1 = socket$kcm(0x2, 0x2, 0x73)
syz_open_dev$dspn(&(0x7f0000000380)='/dev/dsp#\x00', 0x800, 0x82)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dlm-control\x00', 0xc0000, 0x0)
ioctl$KVM_PPC_GET_PVINFO(r2, 0x4080aea1, &(0x7f0000000280)=""/201)
connect(r1, &(0x7f0000000100)=@nl=@unspec, 0x80)

[ 1098.839460][ T9785] binder: BINDER_SET_CONTEXT_MGR already set
[ 1098.874759][ T9797] binder_alloc: binder_alloc_mmap_handler: 9784 20004000-20007000 already mapped failed -16
19:21:06 executing program 5:
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x140, 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000040)={<r1=>0x0}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180)={r1, 0x7e}, &(0x7f0000000140)=0x8)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000001c0)={0x16, 0x22, &(0x7f00000000c0)="1c0b91a22002243bdab5924f468bd747e35b7d669cfc392a1560f698998805cf949e"})
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000280)={[0x4, 0x1, 0x6, 0x2, 0x2244, 0x9, 0x80000001, 0x7, 0x10001, 0x2, 0x0, 0x7, 0x4, 0x5, 0x0, 0x6], 0x13002, 0x1})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000340)={0x7, 0x600000000000000, [0xc0010058], [0xc2]})
ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000200))
setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000240)=0x1000, 0x4)

19:21:06 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x4, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:21:06 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x90001, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000080)={<r1=>0x0, 0x9b6dcfb}, &(0x7f00000000c0)=0xc)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000100)={r1, 0xab, "8e2161edd28447bd2f7da9e4eb409879eb3da4a612cdd2ccb9bcd37f79d73dc40d2b5239b2c5685485437e36b7a0d2221ba09d28b6bf6e66828ee68429fcc57e2e243c101e8a5d2224a1b7225e9157eb2cc3f917cab442d228fcdf5a2cd762a18a0e26c962de7efddea75c9a56982804d4448c3b779cbdee7acaa503c8230eec7a269a067ec2463c0bf94dad88fc6513543e50fa8e160f1162ec98d444b2382c1185abded8b7d087788caf"}, &(0x7f00000001c0)=0xb3)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = socket(0x840000000002, 0x3, 0xff)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendmmsg(r2, &(0x7f0000006d00)=[{{0x0, 0xfffffffffffffe64, &(0x7f0000000040), 0x2, 0x0, 0x400000000000000}}], 0xd3, 0x1ffffffe)

[ 1098.948695][   T17] binder: undelivered TRANSACTION_ERROR: 29201
[ 1098.955367][ T9799] binder_alloc: 9784: binder_alloc_buf, no vma
[ 1098.986707][ T9785] binder: 9784:9785 ioctl 40046207 0 returned -16
19:21:06 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x90001, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000080)={<r1=>0x0, 0x9b6dcfb}, &(0x7f00000000c0)=0xc)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000100)={r1, 0xab, "8e2161edd28447bd2f7da9e4eb409879eb3da4a612cdd2ccb9bcd37f79d73dc40d2b5239b2c5685485437e36b7a0d2221ba09d28b6bf6e66828ee68429fcc57e2e243c101e8a5d2224a1b7225e9157eb2cc3f917cab442d228fcdf5a2cd762a18a0e26c962de7efddea75c9a56982804d4448c3b779cbdee7acaa503c8230eec7a269a067ec2463c0bf94dad88fc6513543e50fa8e160f1162ec98d444b2382c1185abded8b7d087788caf"}, &(0x7f00000001c0)=0xb3)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = socket(0x840000000002, 0x3, 0xff)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendmmsg(r2, &(0x7f0000006d00)=[{{0x0, 0xfffffffffffffe64, &(0x7f0000000040), 0x2, 0x0, 0x400000000000000}}], 0xd3, 0x1ffffffe)

[ 1099.010719][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1099.013652][ T9799] binder: 9784:9799 transaction failed 29189/-3, size 0-12404 line 3147
[ 1099.016652][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1099.062349][ T9815] Unknown ioctl -2146417262
[ 1099.074127][ T9810] Unknown ioctl 1083223682
19:21:07 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x307a, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

[ 1099.112078][   T17] binder: undelivered TRANSACTION_ERROR: 29189
[ 1099.125431][ T9815] Unknown ioctl -2147191743
19:21:07 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x34000, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1099.207143][ T9815] Unknown ioctl 1083223682
[ 1099.207149][ T9810] Unknown ioctl -2146417262
[ 1099.207857][ T9820] binder_alloc: 9819: binder_alloc_buf size 12416 failed, no address space
[ 1099.227871][ T9810] Unknown ioctl -2147191743
[ 1099.270909][ T9820] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1099.307210][ T9820] binder: 9819:9820 transaction failed 29201/-28, size 0-12410 line 3147
[ 1099.360275][ T9823] binder_alloc: binder_alloc_mmap_handler: 9819 20004000-20007000 already mapped failed -16
[ 1099.402527][ T9820] binder: BINDER_SET_CONTEXT_MGR already set
[ 1099.441133][ T9820] binder: 9819:9820 ioctl 40046207 0 returned -16
[ 1099.446047][ T9827] binder_alloc: 9819: binder_alloc_buf, no vma
[ 1099.484181][ T9827] binder: 9819:9827 transaction failed 29189/-3, size 0-12410 line 3147
[ 1099.490758][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1099.492842][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1099.498605][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1099.505276][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1099.533551][T29950] binder: undelivered TRANSACTION_ERROR: 29201
[ 1099.540542][T29950] binder: undelivered TRANSACTION_ERROR: 29189
[ 1099.570708][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1099.577395][    C0] protocol 88fb is buggy, dev hsr_slave_1
19:21:07 executing program 4:
r0 = open(&(0x7f0000000180)='./file0\x00', 0x40000, 0x68)
ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00000001c0)={0x88e4, 0xfffffffffffffffd})
syz_emit_ethernet(0x1, &(0x7f00000000c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="5dbbe225f9c431f96c4366aa017982ac69bb5c10e52de8a60a60e407ff4a6745e419af1e37d12207f7bd82c59ca2909f1a33cf67b4b21fc1", @ANYRESDEC, @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRESHEX=0x0, @ANYRES16, @ANYRESOCT, @ANYRESDEC, @ANYRESHEX, @ANYRES16, @ANYBLOB="312617e93222fdc87fa39a23c0bfad1ceaf06c26f086775c1f732b7c28aaf279642d", @ANYRESDEC]]], 0x0)

19:21:07 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x400300, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:21:07 executing program 5:
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$vivid(&(0x7f0000000200)='/dev/video#\x00', 0x1, 0x2)
ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000300)={0x8001, 0x0, [], {0x0, @bt={0x3, 0xc00, 0x1, 0x2, 0x3, 0x3, 0x7, 0x7, 0x0, 0x8001, 0xfffffffffffffff9, 0xfffffffffffff000, 0x2, 0x8, 0x12, 0x1}}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f00000002c0)={@empty, 0x1f})
sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x6c00000000000000, 0x1400f30b}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14d6a1f8799ca38a97521a2dedb0cee6f342a194b03f4013843188b314"], 0x1}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f00000014c0)=r3)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/l2cap\x00')
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000001780)=ANY=[@ANYBLOB="ddffdf00421f0ec759a98d9b5fb157c64e5b5c0b740fd74101b949f8f6086b868400e64d1458d9ca2d583f998cc5cc7be4eb7fd206856f9b103f990513f5bb04e0b509edf3e715e4f3dc3a6896c45860ed57a9d585a813a96837e19c2078362e4d5d9a2390a8c4b698b51c79f87642b328b90fbfbcb8d4d9114c158301000000a00546c0e0630ab7876e32c754028a4f3353c00e121fcd8b4654aa953ff28df78ef02caa7a9a893f395c0d48849dd3201432f9bbbd8ba3b62e42882d9b4c63ff6bd000674a807e28e8c4d1b74e73ca7fc6079f00000000000000000000000000000000"], 0x1)
ioctl$UI_BEGIN_FF_ERASE(r4, 0xc00c55ca, &(0x7f00000000c0)={0x0, 0x4, 0x1000000005})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x02', 0x1ff)
clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
exit(0xffff)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4)
setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c)
ioctl$PPPIOCSCOMPRESS(r4, 0x400c744d)

19:21:07 executing program 3:
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f00000015c0)=ANY=[@ANYPTR64=&(0x7f0000000300)=ANY=[@ANYRESDEC=r0, @ANYRES16=r0, @ANYRES16=r0, @ANYRESOCT=r0, @ANYRES16=r0, @ANYBLOB="c3b34d14c7ae1ff4ef440b03c19a7fb4fbd0237b0aa85e582bd3126b21e4d38a689d305932164f161cdd9b9256f500e4a574020151607db9f0973499875c2ed0805ec1d29b977aae5aede2c98623c89eaa66fc3c7ff26fa7009b6624683e729192376e971f23245d7a8d120dc42a2c1c4301697f42de218890ec75f332b8365118e080f7ad6795ea0e86e6d46ff6642de63cc0e1b9e254e5235f0fa88e4672b4ac2090f342873e4b750bda01578f53f660a79f973cab2ee42d62ff079c539548944094bc472bcb445f4b35f060210035b244ab58242fc8944b7b608085d89556fc01b7d2d62eaf5f57c4d1cbbbb4165f58b8c442fb56aaf5eac03cc1751808ed6346e5592708e10517c05dff1cbc7b2eb91be432575059ad155131de870957af31a4b50fbba3224996cf7a2538f4b08c473c1ca93070db5d416e164e57be49862823aab9a22483995a8dc0eb59f5c3b15e67e3ebcf6015a9d296fd0153e446ed4061885acdd7de9b6af9b231d8aa109a8e71929a6f81c5af6ca05774eb42270bc3a09bbf176ae3f5cc1d27ec90efa7b01bbde3481abc541011a98c6496b532702634ea48dd1ff6a824745a9dbf9d57d4a145f5d4a67bb350d120e9b3b82717cc820fafbabec552d33edb5dc594e275154f5ddfcb864e84470b7e9de78326a6a390541716b3b4e2b4b6b4bea7ce90048942302e51494a4d7d26e76421faa2856820f806381fe25d0f713d81f1c03b7f940427dd698a4e4eba5167296caee42490c8d56ddb7debf68490508d7cfd8dcb1a1f7e37fdc65a5e5bb64c47fc24cd2dc4154d560445637f54f35baea2e0e0a60f14fd2d78bdcaba48c37bfbac0387118765ac7caa99ef5505edde99be9cd29842be63dc92032c300a6e7d64d415ab357838bfcac5b1bf98e18c0832ad69ec26cc7fc5a1ed209524d38d01b6af49bfbf270fdd907fe0956aaefef47212885e53ddd723706a3b4cc7f6438a99c2db312fe90c10dd14f8cad92edde32eaedde5435acdeb8ef199df4ee3bfb3ce907dca338df6cf548c321c3992cdf1520cdee8548cdf5035d0f907990613c55c4cee4045b0a9d22471d88796c38900e8bbb14d98e60fc08f43e44dc68b7270451d44558413d598e324945692ad0587588a8eaf1ad6d4742e920a467f4200f0d1125493e4c81cd6510e2c75b9b520881802b13b2c867cd98f515aef5969152f1c23bae9ce0a56fa5755809ed0d108217a17687eb6cba34aded3faf39d6b561fbd21c8f381cae7737398362675c6dae8a29dc8c5377cb55469fb368c1cd950a2568a6cb2734ff02a7f4312a42f7f614dec10a50d711d8ff2c85fdff53e3d45fbf5c5f6cf4b933e5f7e3e411ae831f0f6bc716cecccbd5b9fab4c96be7a45ce34581af004f007fb69aba65c7cd41b01e7a05f7f257b4f4bda186f48872d4a3c5956e8c110597bc0ca9913f0efb0bd7b6d621bea4615e6f69ea7caec8cd768e473b3a1e2c81a1bf5bf7a4d0937210566d035d9ffba6ad370b5636a73189d9e2ca26fdcb13452aa2beb8ae146edfa35f6be98a0a3581c27f84b279a587af3e09c84aa13a436a34d7e8312af34b8ffcaa69621dc5f397ed2313463e1a3cf582239328e29fc8d0f7ea010255cbff1772dbce39bbbaf930ea0481e7139f294812c1321e5c66bf6894cc90b58ae5fb5e10f34ff45376b13c2874c1ea23c0eccecf2fa5cf9ef97b794d7c90b9d624e35fb2c1cdfba91988e120af71bf2826a712456af54cad11da264047d26645c0b2ea0064d01e2c10716d170cd9d56cb3b8150611cb797ea1e3f4d8b2ddc59f904b2352b3eae6cdf4715ed309f3134d460b7e6f44814303e4d193021f7d3b39f95c5bab54b122190862623e70684b1142c571be1b83560b3a4334761a3c5419687acab6b8f7eae4dc405c132fb61bc83e9e0f40efa530b87e0e809c5f91dbc0022ee3d7de0843f5b613d1cb30d0dc6f6fdfb43713aebb46632e34d546a1559f838367c5ea992bc1cd81763e4f2cea330a23f34771d8df6ef4e935c2b77992c9eafac49a1b52c249601987d0626595db39eb81ff63f5123ff20391d1982a47323dbdf9ef5147574626e4e823721a8df9855eba0524bd90182851958f97d6ab328a8e038fe3f52f29396551e1959e6229be82707f0a9a48b4f747a66c19a4de1696f6a00b1af08c83cf78f5cdc7df63c38ef42f07b27347463af93a92c8f1d6f75ee48e9d6ea05869c2a1ad78cc0a220495e0f0b89eaa42d1195772d1e50b22a0e9001721cc95994dfd81f83933bbc348a1db4f7e8c5e667705e1d8182fc9474ac73999e6f7c5d6ff5cef6ce0064a1e8a98dfa5621f1942622237b581273885bcf2e1e00aa4270c4b4209cb7be09cd7fcc11d6d4a900196e6d512bc18fd07db0e91e9c752b36b62e99486aba55769f338518a28ce6265f40c9cda5e5fb8a3808916b9d82c58d602e82399f0b4f4de58517f23401d727a29e71ef7dcd234847049e89cd195c35e794b01694baa118efa4a6bc2a0d4c1f24185d8a20a2e825b1948151c9373cf0eedcf7623602b3df3c8aef355b5dfb0ea9f85ff38c6626e71b588b6dea6f0c5ae2c60cf2c19da04882a0dae7129f982bb5d6a33f8f1f54b325fe2b77fe16598acc65342866e7fabba77d668fe1638fd46043b31f25aab07094b5393d53e0359732c5ae854b4e20b33068d5635a8ee784ac9bbd0ffe17c6d317417d6f47afa2341325ac4846635f97249c882749ffb9e0a22369e868fe5b834a640678bd416427af663373125dbcf08c0099ca13ab707f413d0e815230b472329f567456206d6b65bba106ea59f209512e058daf0fbcb141c6606686f37664a6debe4d6f92ab6ae4bf77885362c0f2eb78a6debe4437ea2cd7e24472bf313b458e535306ccc37944bb1af50727c8428265323970c0768e13eefc3080508457536065cfd3507170830b67ae76c388cec6b3ae770e3cbae55c644b254bba1b0bfbaa49bb2011dfea1d496df85da9783ad5c0e6537fefc0fe161bd9af8f2881479c10edd1909212989c9c3b437b0228a6accda47c2dce086a0b9574422e78dd3e23a6571e4d3079ec0a49c5d7e68bd868f3619f8d7bd199476225ba247565b411c1322d899a65c9137482fc886bfb3917b8d481bb6fa5074a8f1fc451f5945a5065397433688327cdee370b04505295565adc2d50cb7711019188de1c5efccc7b65215c248d5a512d76f6e7fd1d44fc44e472ef94221892c4d85210a24ae2323da2d5964353e97bed18c61f4dffc735d16fcaa6f6dfecf222b90d88c0db03b1004a13d1d0bb364dd7bc96289c3ccf9d6add6b529ad1ab78140ff4fbe47b9a0ccfd3653d7b906a72a17a0c7bdfe0ecd30bb0a26773c86d3104037bd48e9a46ce2acf5612b08bbcdfaeda0d7e10b14208bed28c46492f8ba0bb90fb90c7aaa2e944ff373b8feb3929ea30178735dfcfc060defe8e6abde55c2fc2ad8854f73a3efe661fd89da4d45c66ac974e210b70205c8f28c20eec2939295728a122331c6ccdcdf112d49ca53c39103ea4109f15488ab93a9dcec14f07d368ab460a1c1726ac97d84b75ff6eac25263dd02580be93f017ed48a524473af450dfde4ffb78c847a8ebebacd58740412b0bc6230007d2be3e3b9faaefc368bd2b2748727db4396871c53ffc164d5858de5a137319cd0c032f50a080e078e88f9e1cfcae8fb23344489bb9c12c7c155dd3867d4e463b8cf7477a43fbc0c7549f785d51ed9e1227189903f56e408be675bf1e71dcb56388509001908271014af39dd73efe6035995c1e375c1a9aa0fc24c7f7aa078b3271b0f8aeae49cba61f854f7b3dd3f0fbdabc0b27b9af7b9dd07a792fa6e6fd707514bf4d73588c64d372828646dd4a8db8bd6c7dfa53a0ffc1d5c6926b1d245cc3189b726e3fa3a40f48ce8480d2887d536c311158eaff3a3b111d2e832d95f57f1a0e3666c74699b50e4ae161468a34cf55234577e20bed5aaf764d68494b3490801b29a65b52dcd1cf61ef5cbbb85a5838f8b26f072d169157f4362c99c5120a94449e150a74284ee9e0bc777270e54872248c752eda32a55e85851a1af38bf717b7372fdbd9bf41eeb0e329c83178792ecddebd96e53bb46c6598aa51b4d4e396e33ffad55b32ae9f8248de4cdf6763d36461d24bb9bed90789c5737acdfe9f77c771d12dc513b50b18c2dc25a197024415352a3fb33e479a92ca5b1ebfc4068b5f729b811caca1d4f54dbd412ccb9b446ad1fefe146c13ad800196f71f524b8a4ab3c629de41bb52d1575a15bf0ea1c34fd6015978cd8e3f5f56ba60a149dd326ac07b16d05b6afdbfa5827b67d4f4e639e6d30a9ba20062a698026db6ab905f7ee653640b4416b1d717709c66b7025e722dfe43018f15e10d0500fcd101e511729581315735eaf9033b4149b0ebbfa16c90131579214e7527b0e1f73003d6605f6c3299761526f63e63d41593bcd29f03a3e404631a016cfa760729cf0437b76a6d88ac5a4ef8df93ae0b2805ee3c545c223c1023b38b8cfa95bbf71aec6a922405e1b2c4a14e77248674032d0142e8128032feaadb708892961023612d8f49bf5931ea0608dec0f7e3b7fa30e7dc9f8e54e1db0d032160f2672973a4b41c2b46fb546f005f5fb085bffff72cb9af6ac2a7cd60cadb6582497b5ee64731be9971fe20cdff9852debb9d2aab5b7c05e859236ff7b3a0d6e32d668b80ebdce8b333ac3e606f6e1583e8ec764dfa6f68fddc7839f463cd19dd44423594f829cf9dd0e16da2e710d7e4668ed78879246d1623cb80806c924707288768d63e2f05cdd8d2575aae2e30985689f76c2c0059f9a5d64e3d86d0c49c43a6ad204a243deec9aafe36e134e9625b5732bf83273c306ad974b6c3eba5ed16c047d03a108281f3712db139719c6c4972082bdd635e8e1f9933bce46900d3fd3ea0688e2419f91f415c0cbeebc9216cbb5e429cda5b5d287df01726bb744459a1356cce137ebfdf882a3d0ebba3a4a8d0b308da0788808c18460d2ed966e976f939cdf5cc3076db94d493747fe77e4426a1ff7d4a76d4cf9b3dd30c4732e4a816bbea6f6207645bf4a48ca35574cc30eba7b84c8621538532ab53cc831c96847fe395a046fab3b0a3a117361e1feb349f58f5a299ed1f74d13ae66f7650363b20ee78d25657d7d79ee150dcd69006adaa02d0aa33153fb4acddf3fcaf90d63159f6ad17bd5fd8dff83a5a829d829bb4b34213d74c82af1cc8edffc5f716f7675c5303c06839aec5ec0accebade5a9295709f7bbfab2ef120686a6d387e7c41d2b6a382fb3c3bdfb5132a9d10a5f3e37d154332461c41c9c0446bf26bf58c39773e42d46d492c6cab12a4a661f9b08f264ca3b5b0b68dae21c994df099489e3a64c7cef5459aac856ecb0baf7c508b6feafc67ce38b442f70e927f6ee40779155549022d0d93352d018644dcea0829c86010ebd14b0296b93cd0b190c5b567335a5e4c6d68b1674ed9a2abb22b34a1558376104f4fb0bc5a7e046cf39ca168669285a02660335e1e949f3a7ec1540bd465cc4af5d83fb1fa479695f1b2b9bd6d392beead93e649ecf30c4d62123279c2a7a6f11d80ba3c5019ed9e279b7ac6deea483b3da7ea5291896bd4109ddb7c863fe5cc282d7f5c79466c765e32b50d30922e4727c1c88ac26a6034d503203d4d1497963989ad6994498fb97a96a7a3e4e4f29e57614f8ec69b3b27f41022b41bc93368558204fca03f68ed360c0cb2c83934044bdd8d5b4c10cdd3bf8d059110428fa53153d3", @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYBLOB="528a8ce832d484541a516a3805733573"], @ANYBLOB="896abcb21d18acff502e61cbfdccdfff500be11fe479de6d336a5e37e7623854f5e93e8094e7d0841814aa9a8f506cdc7fc68c512f1178ebda1ae58e089202ea9c3502f95b68ab82b1a6fc228f4f3badfc3c9aa59ed33aea667eeaa815f17874cee66c7c9746d8d07ea9b6f8a63d463717336bdff23123bd4687af6537dfead52ac75e24cb70da4b60d4179d75b8b7237f0556fb5b96494def3963b83263d97a3d007c369f5e5de466da529643c2ae5399618d62cfa41157fd315c5727f8c9ebda116c56b39b011f0a088a106ecdf4d08e31cae8ab0b539b1bb5360ad1", @ANYPTR=&(0x7f0000001580)=ANY=[@ANYRES64=r0, @ANYRES16=r0, @ANYRESOCT=0x0, @ANYRES32=0x0, @ANYPTR=&(0x7f0000001380)=ANY=[@ANYRES16=r0, @ANYRES64=0x0, @ANYRESDEC=0x0, @ANYRES64=r0, @ANYPTR, @ANYPTR, @ANYRESHEX], @ANYPTR=&(0x7f00000013c0)=ANY=[@ANYBLOB="ba6f4f356edc677ecb9b5920c5953827ea682beefeb8326a77b5d1a4c3ffb5577eefa16fac4c9f964dd5a3849496f61fa491c2bd9ae3ae805cf354303ad80ac0107ed2620380a044958adb6f5d337b2187af92f6d776506300a0cdb24407615ee0263634461e42f8040420fe396eb68c96e7d48eeae35e24bf5eafee42ebd7054b0889e5f3c306ef9c9f6ca87d69c0ad8f6230ff9d92f188fb06ada69ce420106c6187ed7042edc07016df9cf93d34df2e0ed5b2a64f6dcbadd1c41046a0623571d52da2f6c288ab9efb878ecaf53bf5224febab1055216a865128e5c8", @ANYRES16=r0, @ANYBLOB="0ac3078ca47be49e375410b348065ea5189b32de926378d26b12bc9bd73bdecb6a13f20851337617671a82f760be6cef74d6ca9d8ad84d225af99a840577c377fecb8cf1f77d47e1e653a4e6ab51a9e729d6fc14469d236d94e7218207d6654712b43419b862668aa4d2bee7497b3a847f1b2ca095c3eba66c29127a729391b1da5154bd976aff0599a73fb554ca64", @ANYPTR64, @ANYRES64=r0, @ANYRES16=r0, @ANYPTR, @ANYRES16=r0], @ANYRES32=r0], @ANYRES32=r0, @ANYRESHEX], &(0x7f00000002c0)='./file0\x00', &(0x7f00000016c0)='befs\x00', 0x1108002, 0x0)

19:21:07 executing program 2:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0)
ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000040)={0x4, 0x0, [{0x8000001d, 0x81, 0x0, 0xff, 0x8, 0xac15, 0x400}, {0xd, 0x1, 0x2, 0x7, 0x100, 0x7f, 0x59a7}, {0x4, 0x6, 0x4, 0x6, 0x3, 0xfffffffffffffffc, 0x7}, {0x7, 0x3, 0x4, 0x2, 0x5, 0x0, 0xffffffff}]})
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000100)=0xc2, 0x4)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000140)={'bond0\x00', @dev={[], 0x10}})
ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000180)={0x3, 0x9})
signalfd4(r0, &(0x7f00000001c0)={0x7}, 0x8, 0x800)
ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead)
ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000200)=<r1=>0x0)
write$P9_RGETLOCK(r0, &(0x7f0000000240)={0x2e, 0x37, 0x1, {0x2, 0x1, 0x3, r1, 0x10, 'eth1\xa6bdevvmnet0^'}}, 0x2e)
prctl$PR_GET_SECUREBITS(0x1b)
r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cuse\x00', 0x2, 0x0)
connect$l2tp(r0, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x0, 0x1, 0x2, 0x2}}, 0x26)
r3 = syz_open_dev$radio(&(0x7f0000000300)='/dev/radio#\x00', 0x0, 0x2)
ioctl$PPPOEIOCDFWD(r3, 0xb101, 0x0)
fsetxattr$security_smack_entry(r2, &(0x7f0000000340)='security.SMACK64MMAP\x00', &(0x7f0000000380)='+\x00', 0x2, 0x1)
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000900)={0x9, 0x0, [{0x100002, 0x4d, &(0x7f00000003c0)=""/77}, {0x3000, 0x84, &(0x7f0000000440)=""/132}, {0x2000, 0x99, &(0x7f0000000500)=""/153}, {0x5000, 0x0, &(0x7f00000005c0)}, {0x7000, 0x57, &(0x7f0000000600)=""/87}, {0x1000, 0xcf, &(0x7f0000000680)=""/207}, {0x0, 0x6, &(0x7f0000000780)=""/6}, {0x1000, 0x0, &(0x7f00000007c0)}, {0xf000, 0xd8, &(0x7f0000000800)=""/216}]})
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000d00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000ac0)={0x1d4, r4, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffffd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xbd46}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000001}]}, @TIPC_NLA_MEDIA={0x14, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x124, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xfffffffffffffff7, @mcast1, 0x200}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @mcast1, 0x6}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x29df}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'irlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xca6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffffffffff00}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x14, 0x2, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0x9b}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x9, @mcast1, 0x7}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xff}]}, @TIPC_NLA_NET={0x28, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3d99}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3e}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x800}, 0x8880)
getresuid(&(0x7f0000000d40), &(0x7f0000000d80)=<r5=>0x0, &(0x7f0000000dc0))
lstat(&(0x7f0000000e00)='./file0\x00', &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
fchown(r2, r5, r6)
fallocate(r3, 0x4, 0xffffffff7fffffff, 0x80000001)
ioctl$TUNSETLINK(r3, 0x400454cd, 0x339)
ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000ec0)={0x5, 0x8000, 0x4, 0x80000001, 0x5, 0x8})
ioctl$VIDIOC_S_PRIORITY(r3, 0x40045644, 0x2)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000f00)={0x4, [0x0, 0x0, 0x0, <r7=>0x0]}, &(0x7f0000000f40)=0x14)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000f80)=@assoc_id=r7, 0x4)
sendto$inet6(r0, &(0x7f0000000fc0)="5b3908d67bcfa815161553007fad7c1392e8fa6f642c7a7c2cb10a5d478ee0c7668a9434d4ab02a085da6697e385e372bae779f0c0ad4337d85d982f122de2ce8b45499f1597d7bcd8004873730c5131", 0x50, 0x20004014, &(0x7f0000001040)={0xa, 0x4e22, 0x7, @remote, 0x3}, 0x1c)
ptrace$getregset(0x4204, r1, 0x3, &(0x7f0000002080)={&(0x7f0000001080)=""/4096, 0x1000})
sysfs$2(0x2, 0x2, &(0x7f00000020c0)=""/145)

19:21:07 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

19:21:07 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x10000, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000200)={0x2, 0x0, [{0x10000, 0xbb, &(0x7f0000000040)=""/187}, {0x3004, 0x85, &(0x7f0000000100)=""/133}]})
ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001)
getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x13, 0x0, &(0x7f00000001c0))

19:21:07 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x1000000, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1099.722989][ T9839] binder_alloc: 9835: binder_alloc_buf size 24576 failed, no address space
19:21:07 executing program 2:
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x18f040, 0x32)
ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000200)=0x7)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rmdir(&(0x7f0000000040)='./bus\x00')
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa8000000000000008000f0fffeffe809000000fff5dd000000100001000a0a0a00410400000000fcff", 0x58}], 0x1)
r2 = socket$inet6(0xa, 0xffffffffffffffff, 0x1)
setsockopt$inet6_tcp_buf(r2, 0x6, 0x2b, &(0x7f00000008c0)="d0c46cce5ab87081ef18a38fb6fe79dcbf9ee605982e671751464b41e040f38eed71b347f34aa0cb136c486c6119feb3c96f23bd02a202433c3a162b6441b24f6625db32104b62d57c3fe51f87a28eab31c0c34b545dd873185f38cd66644bd12eb78d35e8b8e1b5b80308120d7b93ae760d90afc8e8e1758705f60c19ce4999ab1cf3dfbb891336ffa7f9530604536326be9673c9c4939d5c733ec52495106ae7a3b2fe779ce984e1e797b8eddcfea05a1d7a9f3d3b6451", 0xb8)
ptrace$pokeuser(0x6, 0x0, 0x7fe, 0x2)
ioctl(r2, 0x8912, &(0x7f00000005c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00')
r3 = socket$inet6(0xa, 0x3, 0x6)
r4 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
setsockopt$CAIFSO_REQ_PARAM(r4, 0x116, 0x80, &(0x7f0000000240)="e0e6b259d7e4c3f32e8441a441bcd09b13de7f85eea0f228115463bfba49afd8a670619b73e5467421437e7afe8b6393a038557995b44d3dd5955e64c15128e69226db76918b5dfacf39df64727602075077594df12c2d54923950a2cbce28ef2d5339b2db328122e26e1f5075f1ed72b68c512673a6b99d1197ea7a7982f2e4634780eaa1d0a77cf182077252526810da39c1e1e29a0fdedc272711ea224188215793ecc9db49d047c2cc0514", 0xad)
sendfile(r3, r4, &(0x7f00000000c0)=0x202, 0x8)

[ 1099.780821][ T9839] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
19:21:07 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1000, 0x1)
ioctl$VIDIOC_G_AUDOUT(r0, 0x80345631, &(0x7f00000000c0))
r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x2c2, 0x400000801)
ioctl$VIDIOC_S_CROP(r1, 0xc0285629, &(0x7f0000000080)={0xf})

[ 1099.842247][ T9853] binder_alloc: binder_alloc_mmap_handler: 9835 20004000-20007000 already mapped failed -16
[ 1099.878026][ T9839] binder: BINDER_SET_CONTEXT_MGR already set
19:21:07 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x2000000, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1099.940986][ T9839] binder: 9835:9839 ioctl 40046207 0 returned -16
[ 1099.941014][ T9862] binder_alloc: 9835: binder_alloc_buf, no vma
19:21:07 executing program 3:
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
read$alg(r0, &(0x7f0000000180)=""/92, 0xfe81)
ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000000))

[ 1100.029234][T29950] binder: undelivered TRANSACTION_ERROR: 29201
[ 1100.045400][T29950] binder: undelivered TRANSACTION_ERROR: 29189
19:21:08 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu\x00', 0x200002, 0x0)
openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0)
socket$inet_sctp(0x2, 0x0, 0x84)
syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x40200)
flock(r0, 0x5)
ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x401c7012, 0x0)
pipe(&(0x7f0000000980)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00')
sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x18074009}, 0x71, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="0fef3fb3c42717fea85d0bb425ed", @ANYRES16=r3, @ANYBLOB="200029bd7000fedbdf25040000000800020000000000080005000300000008000300060000000000020006000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4048805}, 0x20008000)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r4, 0x10, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x44)
clock_gettime(0x0, &(0x7f0000000340)={0x0, <r5=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x0, 0x9000000}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0)
vmsplice(r1, &(0x7f0000000000), 0x0, 0x0)

19:21:08 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b00, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

19:21:08 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x4000000, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:21:08 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./control\x00', 0x0)
mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x10, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480))
unshare(0x60000)
statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0))
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x5}, &(0x7f00000002c0)=0x18)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0)
mount(&(0x7f0000000080)=ANY=[@ANYBLOB="b262d089005d3f0199aa740a0cc6dcc945d851d4fda7b12204f99e634f4c2268c92bae0b3d71f5905d7eb1d3688d970e6813d90b0a478f596a4614d2431ea658deeaa8ae50e972c8f37a364426fb7294389a7220848839212255ca690cc31916fb794c0da240282e625a362e9a193734d11a33ddc2b8f569df4c839f75d50199b759e827e68212684f322ba1ac538e7a8eb1f537d2e5de7f878aad47dee92bc3d023e7e601cd0e90a1dd"], &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f0000000240))
write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000240)={0x0, @multicast2, @empty}, &(0x7f0000000300)=0xc)
ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000040)=0x6)
unlink(&(0x7f0000000200)='./control/file0\x00')
close(r0)

19:21:08 executing program 5:
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$vivid(&(0x7f0000000200)='/dev/video#\x00', 0x1, 0x2)
ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000300)={0x8001, 0x0, [], {0x0, @bt={0x3, 0xc00, 0x1, 0x2, 0x3, 0x3, 0x7, 0x7, 0x0, 0x8001, 0xfffffffffffffff9, 0xfffffffffffff000, 0x2, 0x8, 0x12, 0x1}}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f00000002c0)={@empty, 0x1f})
sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x6c00000000000000, 0x1400f30b}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14d6a1f8799ca38a97521a2dedb0cee6f342a194b03f4013843188b314"], 0x1}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f00000014c0)=r3)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/l2cap\x00')
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000001780)=ANY=[@ANYBLOB="ddffdf00421f0ec759a98d9b5fb157c64e5b5c0b740fd74101b949f8f6086b868400e64d1458d9ca2d583f998cc5cc7be4eb7fd206856f9b103f990513f5bb04e0b509edf3e715e4f3dc3a6896c45860ed57a9d585a813a96837e19c2078362e4d5d9a2390a8c4b698b51c79f87642b328b90fbfbcb8d4d9114c158301000000a00546c0e0630ab7876e32c754028a4f3353c00e121fcd8b4654aa953ff28df78ef02caa7a9a893f395c0d48849dd3201432f9bbbd8ba3b62e42882d9b4c63ff6bd000674a807e28e8c4d1b74e73ca7fc6079f00000000000000000000000000000000"], 0x1)
ioctl$UI_BEGIN_FF_ERASE(r4, 0xc00c55ca, &(0x7f00000000c0)={0x0, 0x4, 0x1000000005})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x02', 0x1ff)
clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
exit(0xffff)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4)
setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c)
ioctl$PPPIOCSCOMPRESS(r4, 0x400c744d)

19:21:08 executing program 3:
r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41)
ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)=0xfffffffffffff801)
write$binfmt_misc(r0, &(0x7f0000002480)=ANY=[@ANYBLOB="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"], 0x1000)
ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)=0x2)

[ 1100.310554][ T9895] binder_alloc: 9889: binder_alloc_buf size 27392 failed, no address space
19:21:08 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x80ffffff, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1100.363849][ T9895] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1100.388239][ T9903] binder_alloc: binder_alloc_mmap_handler: 9889 20004000-20007000 already mapped failed -16
19:21:08 executing program 2:
r0 = socket$packet(0x11, 0x40800000000003, 0x300)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth0\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x10)
setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000280)={@hci={0x1f, r2, 0x3}, {&(0x7f0000000080)=""/116, 0x74}, &(0x7f0000000100), 0x24}, 0x9c)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000340)={<r4=>0x0, @in={{0x2, 0x4e24, @local}}, 0xcb9, 0xfffffffffffffffc, 0x1f, 0x3, 0xffffffffffffff38}, &(0x7f0000000140)=0x98)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000180)={r4, 0x4, 0x6}, &(0x7f0000000400)=0x8)
sendto$inet6(r0, &(0x7f0000000200)="030400000300400000000000ff000006a9f400793075000415672da7222a11b73ba86db1b9f113ae00ef000000c399b22032363df8861ba438835e0b20a323fc3885ef268d39e4b5d94661c5", 0x4c, 0x0, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000800)={&(0x7f0000000440), 0xc, &(0x7f00000007c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="f4bb0380", @ANYRES16=r5, @ANYBLOB="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"], 0x2f4}, 0x1, 0x0, 0x0, 0x85}, 0x800)

[ 1100.413995][ T9895] binder: BINDER_SET_CONTEXT_MGR already set
[ 1100.426478][ T9895] binder: 9889:9895 ioctl 40046207 0 returned -16
[ 1100.454448][ T9903] binder_alloc: 9889: binder_alloc_buf, no vma
19:21:08 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f5e0ff, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)})

19:21:08 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0xffffff7f, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:21:08 executing program 5:
socketpair(0x0, 0x5, 0x3, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x2, @multicast1}}, 0x1e)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x9}, 0xffffffffffffff1c)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2000000002}, 0x1c)
sendmmsg(r2, &(0x7f0000000240), 0x1e, 0x0)

19:21:08 executing program 2:
mkdir(&(0x7f0000004080)='./file0\x00', 0xa0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)='\x00')

[ 1100.575611][ T9911] binder_alloc: 9910: binder_alloc_buf size 100000000 failed, no address space
[ 1100.609926][ T9911] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1100.663551][ T9921] binder_alloc: binder_alloc_mmap_handler: 9910 20004000-20007000 already mapped failed -16
[ 1100.704218][ T9911] binder: BINDER_SET_CONTEXT_MGR already set
[ 1100.718103][ T9911] binder: 9910:9911 ioctl 40046207 0 returned -16
[ 1100.725478][ T9921] binder_alloc: 9910: binder_alloc_buf, no vma
19:21:08 executing program 4:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x101006, 0x0)
r1 = memfd_create(&(0x7f0000000180)='\xe2\xadG\xf3\xa8Y\tY\xdb\xcfj\x1ab\xaf\xadv\xcc\xb5c\x00\x00\x00u)\xe9\x0f\x14\xdar\xa7B\xd1Y\x82\x9a', 0x0)
r2 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2)
write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="040000000102"], 0x6)
write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb}, 0xb)
sendfile(r0, r1, &(0x7f0000000040)=0x3, 0xff)
ioctl$PPPIOCGDEBUG(r2, 0x80047441, &(0x7f0000000000))

19:21:08 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0xffffff80, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:21:08 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x2]}}], 0x0, 0x0, &(0x7f0000000300)})

19:21:08 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20)
r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2)
r3 = memfd_create(&(0x7f0000000000)='/dev/vbi#\x00', 0x4)
ftruncate(r3, 0x1000000)
setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, &(0x7f0000000180)=[0x3, 0x4], 0x2)
setsockopt$inet_dccp_int(r2, 0x21, 0x13, &(0x7f0000000100)=0x800, 0x4)
write$P9_RWRITE(r0, &(0x7f0000000080)={0xb, 0x77, 0x1, 0x1}, 0xb)
sendfile(r2, r3, &(0x7f00000000c0)=0xf10002, 0xeffffdef)
close(r2)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
setsockopt$inet6_opts(r2, 0x29, 0x3f, &(0x7f0000000340)=@routing={0x62, 0x12, 0x3, 0x4, 0x0, [@loopback, @remote, @loopback, @remote, @empty, @mcast2, @mcast2, @mcast1, @remote]}, 0x98)
ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, 0x0)
setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000040)=0x7, 0x2)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @multicast1}}, 0x7ff, 0x7ff}, 0x0)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080))
socketpair(0x10, 0x0, 0x7, &(0x7f0000000140))

19:21:08 executing program 3:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x203, 0x2)
ioctl$FS_IOC_FSGETXATTR(r0, 0x8108551b, &(0x7f0000000100))
getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000), 0x10)

[ 1101.038521][ T9954] binder: 9952:9954 got transaction with invalid offset (2, min 0 max 0) or object.
19:21:09 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x40030000000000, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1101.100867][ T9959] binder_alloc: binder_alloc_mmap_handler: 9952 20004000-20007000 already mapped failed -16
[ 1101.145095][ T9954] binder: BINDER_SET_CONTEXT_MGR already set
[ 1101.167936][ T9954] binder: 9952:9954 ioctl 40046207 0 returned -16
19:21:09 executing program 3:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x203, 0x2)
ioctl$FS_IOC_FSGETXATTR(r0, 0x8108551b, &(0x7f0000000100))
getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000), 0x10)

19:21:09 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x100000000000000, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1101.204459][ T9961] binder_alloc: 9952: binder_alloc_buf, no vma
19:21:09 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x3]}}], 0x0, 0x0, &(0x7f0000000300)})

19:21:09 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x2]}}], 0x0, 0x0, &(0x7f0000000300)})

[ 1101.386231][ T9972] binder: 9971:9972 got transaction with invalid offset (3, min 0 max 0) or object.
[ 1101.398896][ T9974] binder_alloc: binder_alloc_mmap_handler: 9971 20004000-20007000 already mapped failed -16
[ 1101.415474][ T9975] binder: BINDER_SET_CONTEXT_MGR already set
[ 1101.422139][ T9972] binder: BINDER_SET_CONTEXT_MGR already set
[ 1101.428262][ T9975] binder: 9973:9975 ioctl 40046207 0 returned -16
[ 1101.435438][ T9972] binder: 9971:9972 ioctl 40046207 0 returned -16
[ 1101.444327][ T9974] binder_alloc: 9971: binder_alloc_buf, no vma
[ 1101.455164][ T9975] binder_alloc: 9971: binder_alloc_buf, no vma
19:21:09 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0xe2e, 0x2b7)
ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=<r1=>0x0)
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x3, 0x1, 0x401, 0x3d97019f, 0x7, 0x1, 0x37ddd78c}, 0x0)
r2 = syz_open_dev$vbi(&(0x7f00000003c0)='/dev/vbi#\x00', 0x3, 0x2)
bind$vsock_stream(r2, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10)
r3 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x4000, 0x0)
write$P9_RRENAME(r3, &(0x7f0000000300)={0x7, 0x15, 0x1}, 0x7)
shutdown(r0, 0x0)
r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x2, 0x0)
getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000340)=0x112, &(0x7f0000000380)=0x2)
ioctl$VIDIOC_G_FMT(r4, 0xc0cc5604, &(0x7f0000000180)={0xc, @win={{0xff, 0x6, 0x9}, 0x3, 0x4, &(0x7f00000000c0)={{0x4, 0x100, 0x7, 0x21e}}, 0x3f, &(0x7f0000000100)="a45dd789dffcf4840071798910314f944a0c16b569310cbe2e9ecf46d7710585511ebf554710aaf7785a808f42c4375510d00b029d284cfc5f5501e81fe2720fd9e278a8bf574b8d77eff548382e9ad3ec27bf3169f61aba82e12247041f3eb950507ddda9a4f0c20282", 0x100}})
recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

19:21:09 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x200000000000000, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:21:09 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x4]}}], 0x0, 0x0, &(0x7f0000000300)})

19:21:09 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0)
fstat(r0, &(0x7f0000000040))

19:21:09 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000001af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1})

[ 1101.609930][ T9989] binder: 9988:9989 got transaction with invalid offset (4, min 0 max 0) or object.
[ 1101.678249][ T9989] binder: BINDER_SET_CONTEXT_MGR already set
[ 1101.705939][ T9989] binder: 9988:9989 ioctl 40046207 0 returned -16
19:21:09 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20)
r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2)
r3 = memfd_create(&(0x7f0000000000)='/dev/vbi#\x00', 0x4)
ftruncate(r3, 0x1000000)
setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, &(0x7f0000000180)=[0x3, 0x4], 0x2)
setsockopt$inet_dccp_int(r2, 0x21, 0x13, &(0x7f0000000100)=0x800, 0x4)
write$P9_RWRITE(r0, &(0x7f0000000080)={0xb, 0x77, 0x1, 0x1}, 0xb)
sendfile(r2, r3, &(0x7f00000000c0)=0xf10002, 0xeffffdef)
close(r2)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
setsockopt$inet6_opts(r2, 0x29, 0x3f, &(0x7f0000000340)=@routing={0x62, 0x12, 0x3, 0x4, 0x0, [@loopback, @remote, @loopback, @remote, @empty, @mcast2, @mcast2, @mcast1, @remote]}, 0x98)
ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, 0x0)
setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000040)=0x7, 0x2)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @multicast1}}, 0x7ff, 0x7ff}, 0x0)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080))
socketpair(0x10, 0x0, 0x7, &(0x7f0000000140))

19:21:09 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x400000000000000, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:21:09 executing program 5:
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0)
dup(r0)
setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6)
r1 = socket(0x11, 0x80002, 0x0)
getsockopt$sock_int(r1, 0x1, 0x2b, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
setsockopt(r1, 0x107, 0xd, &(0x7f0000001000), 0xc5)
setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), 0x4)
pwrite64(r0, &(0x7f0000000200)="a2596a012447af1d02dd0db50bed77b3059fb906b3ef564467539565afebb23f1cead6222a51b9a99421329f7f950743dc1cb9235f1d3cac0f2340b8f00707c11f580ea37a3892bb4ac8a2940054b1717f0a594968f5d0c2967d8dff6d32c7fcfb1fcd336e688da2ad86bc4151c6e473d87e3a81fd2e13ff54bec16454b68e81b3d32428c3fc7fd5b68896d17fc206d3da908d506dd790fc7a035394db4a4df8e36c3a4b07cb4f8592199b85b705f1313e06a358004156", 0xb7, 0x0)
setsockopt$sock_int(r1, 0x1, 0x1f, &(0x7f0000000040)=0x100, 0x4)

19:21:09 executing program 3:
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000080)={0x9, [0x8, 0x1, 0x1, 0x7, 0xff, 0x0, 0xfffffffffffff00c, 0x57a, 0x1f8000000]}, 0x16)
getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000140)=""/136, &(0x7f00000000c0)=0x88)
r1 = socket$inet6(0xa, 0x1100000000003, 0x4)
ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000040)={'bridge0\x00\x00\x00\x00\x80\x00', &(0x7f0000000100)=@ethtool_cmd={0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfdfdffff}})

19:21:09 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x5]}}], 0x0, 0x0, &(0x7f0000000300)})

19:21:09 executing program 4:
r0 = socket(0x10, 0x2, 0x0)
sendto(r0, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0))
r1 = syz_open_dev$admmidi(&(0x7f0000000300)='/dev/admmidi#\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socket$inet6(0xa, 0x1000000000002, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5473, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1008}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x16}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400})
ioctl$TIOCSPGRP(r1, 0x5410, 0x0)

19:21:09 executing program 3:
openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/autofs\x00', 0x0, 0x0)
ioctl(r0, 0x800000000000937e, &(0x7f0000000200)="9a000000002000023f4b")
lsetxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x3)

[ 1101.907518][T10016] binder: 10012:10016 got transaction with invalid offset (5, min 0 max 0) or object.
19:21:09 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x80ffffff00000000, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:21:09 executing program 5:
syz_emit_ethernet(0x7a, &(0x7f00000006c0)=ANY=[@ANYBLOB="e480c2000000a121107cf0c686dd60a1bba900010000fe8000000000000000000000000000aafe8000000000000000000000000000aa0620880b0000000000000800000086dd080088be00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0)
getpid()
prctl$PR_SET_PDEATHSIG(0x1, 0x33)

[ 1101.976308][T10016] binder: BINDER_SET_CONTEXT_MGR already set
[ 1102.011514][T10016] binder: 10012:10016 ioctl 40046207 0 returned -16
19:21:09 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0xffffff7f00000000, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:21:09 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCGETA(r0, 0x5433, 0x0)

19:21:10 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x40000080806, 0x2)
pipe(0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080), 0x0)
syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x8, 0x20000)
listen(r0, 0x20000000)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = dup(r1)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000000)={0x10000, 0x0, 0x200f, 0x8, 0x0, 0x40, 0x80, 0xf15cd4cc2f897e96})
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:21:10 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20)
r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2)
r3 = memfd_create(&(0x7f0000000000)='/dev/vbi#\x00', 0x4)
ftruncate(r3, 0x1000000)
setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, &(0x7f0000000180)=[0x3, 0x4], 0x2)
setsockopt$inet_dccp_int(r2, 0x21, 0x13, &(0x7f0000000100)=0x800, 0x4)
write$P9_RWRITE(r0, &(0x7f0000000080)={0xb, 0x77, 0x1, 0x1}, 0xb)
sendfile(r2, r3, &(0x7f00000000c0)=0xf10002, 0xeffffdef)
close(r2)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
setsockopt$inet6_opts(r2, 0x29, 0x3f, &(0x7f0000000340)=@routing={0x62, 0x12, 0x3, 0x4, 0x0, [@loopback, @remote, @loopback, @remote, @empty, @mcast2, @mcast2, @mcast1, @remote]}, 0x98)
ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, 0x0)
setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000040)=0x7, 0x2)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @multicast1}}, 0x7ff, 0x7ff}, 0x0)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080))
socketpair(0x10, 0x0, 0x7, &(0x7f0000000140))

19:21:10 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x6]}}], 0x0, 0x0, &(0x7f0000000300)})

19:21:10 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0xffffffff00000000, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:21:10 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
getsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f00000001c0), &(0x7f0000000400)=0x4)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x800000000001f000})
fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, <r4=>0x0})
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f00000002c0)={{0x3, 0x3, 0xfffffffffffffff9, 0x100000001, 'syz0\x00', 0x4}, 0x0, 0x30000600, 0xd7, r4, 0x8, 0x401, 'syz0\x00', &(0x7f0000000140)=['md5sumem1\x00', '\x00', '-selinux\x00', '$:proc)\x14nodeveth0!\x00', '\\\x00', 'vmnet1W\'}em1/!ppp1,-ppp1:\x00', 'trusted}+\x00', '/dev/kvm\x00'], 0x56, [], [0x7f, 0x6, 0x100000000, 0xfffffffffffffffc]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

19:21:10 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000580)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/zero\x00', 0x0, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f00000004c0)=0xffff, 0x6d)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000005c0)={{{@in6=@mcast2, @in=@dev}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f00000002c0)=0xe8)
sendmsg$nl_netfilter(r2, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x40)
mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0xfffffffffffffffc)
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0xffffffffffffffff)
r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000700)={{{@in=@remote, @in=@multicast1}}, {{@in=@local}, 0x0, @in6}}, &(0x7f0000000800)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000009c0)={{{@in=@multicast2, @in6=@ipv4={[], [], @broadcast}}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000001200)=0xe8)
sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)}], 0x1, 0x0, 0x0, 0x14}, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EVIOCSFF(r2, 0x402c4580, &(0x7f0000000f40)={0x55, 0x0, 0x4, {0x8436, 0x5}, {0x8000, 0x5}, @const={0xffffffffffffff81, {0xfffffffffffffffc, 0x53, 0x0, 0x39a5fe91}}})
sendmsg$kcm(r2, &(0x7f0000000980)={&(0x7f0000000840)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0x894}}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000c00)="30b7f85be5734b5d920354c1bb49800a32cbdaf1367b8e317036271ed383cd1121b8433074da3ee917fafec8f639ff09d0ae43386acd2d57fc8b83d9376f42edd187d598d026846c6dd5dae88ab01ace158153651e473e5f19b1e0b6d0d663f27af46efe72477ce2ec3f07824770e96fd7e239d3bfc320e9fcc1a32a73e260695dea61d36c24aea0722439fda163d40b997f32a287a16d0719901d3ff3c14ccf93ae8593435e29c22fb7d3dd52a61f77b88ec6f91e4965b9aa10f6f789cba03862f62f7baed7af6f3a95f19c37e209bd5aeeb62fffbe002fb83866938761a54005e3d834c957", 0xe6}], 0x1}, 0x80)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[]}}, 0x24000800)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000500)={0x84, @rand_addr, 0x0, 0x0, 'mh\x00\x00\x00\x00\x00\x00\x00\x8f\x00\x00\x00\x00\x00 '}, 0x2c)
poll(&(0x7f0000000440)=[{r6}, {}, {}], 0x3, 0x3ff)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080), 0x1, 0x0, &(0x7f0000000140)="14"})
socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r4, &(0x7f0000000f00)={0x80000000})
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$FS_IOC_ENABLE_VERITY(r1, 0x6685)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000180))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x401, 0x8853ebd796b63f81)
syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x82f, 0x0, @dev, @remote}, @icmp=@timestamp_reply}}}}, 0x0)

19:21:10 executing program 4:
r0 = socket$inet6(0xa, 0x803, 0x6)
getsockopt(r0, 0x80800000000000ff, 0xffffffff, 0x0, &(0x7f0000000080)=0x125)
r1 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x20000002aee, 0x200)
ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000))
setsockopt$inet_dccp_int(r1, 0x21, 0xa, &(0x7f0000000040)=0x1000, 0x4)
ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x23)
ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f00000000c0)={r0})

[ 1102.715967][T10065] binder: 10059:10065 got transaction with invalid offset (6, min 0 max 0) or object.
19:21:10 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2={0xff, 0x4}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1102.761975][T10064] *** Guest State ***
[ 1102.766126][T10064] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7
[ 1102.781538][T10065] binder_transaction: 15 callbacks suppressed
[ 1102.781558][T10065] binder: 10059:10065 transaction failed 29201/-22, size 0-12288 line 3241
[ 1102.800972][T10066] binder: 10063:10066 ioctl 6685 0 returned -22
[ 1102.820544][T10064] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871
[ 1102.830816][T10072] binder_alloc_mmap_handler: 2 callbacks suppressed
[ 1102.830834][T10072] binder_alloc: binder_alloc_mmap_handler: 10059 20004000-20007000 already mapped failed -16
19:21:10 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2={0xff, 0xe}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1102.865809][T10066] binder: 10063:10066 ioctl 6685 0 returned -22
[ 1102.868107][T10064] CR3 = 0x0000000000000000
[ 1102.872741][T10065] binder: BINDER_SET_CONTEXT_MGR already set
[ 1102.878796][T10064] RSP = 0x00000000000004cb  RIP = 0x800000000001f000
[ 1102.890294][T10064] RFLAGS=0x00000002         DR7 = 0x0000000000000400
[ 1102.908224][T10064] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000
19:21:10 executing program 3:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x1, 0x20000)
accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14, 0x800)
setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000100)={@rand_addr="11820d9b8edcc91c2bfb93fa85b1f4fa", r2}, 0x14)
socketpair$unix(0x1, 0x280000000003, 0x0, &(0x7f0000000000)={0x0, <r3=>0x0})
bind$unix(r0, &(0x7f0000003100)=@file={0x1, './file0\x00'}, 0x6e)
sendmmsg(r3, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x44c, 0x0)

[ 1102.915064][T10065] binder: 10059:10065 ioctl 40046207 0 returned -16
[ 1102.920205][T10064] CS:   sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000
[ 1102.932282][T10083] binder_alloc_new_buf_locked: 2 callbacks suppressed
[ 1102.932291][T10083] binder_alloc: 10059: binder_alloc_buf, no vma
[ 1102.950872][T10064] DS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[ 1102.962225][T10064] SS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
19:21:10 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x20000000021)
setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6)
r1 = socket(0x11, 0x80002, 0x0)
setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000000)=0x1e8b, 0x4)
bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14)
setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c)
sendto$inet6(r0, &(0x7f0000000000), 0xff19, 0x0, 0x0, 0x101aa)
mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8)

[ 1102.979525][T29950] binder_release_work: 13 callbacks suppressed
[ 1102.979533][T29950] binder: undelivered TRANSACTION_ERROR: 29201
[ 1102.995421][T10083] binder: 10059:10083 transaction failed 29189/-3, size 0-12288 line 3147
[ 1103.004315][T10064] ES:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
19:21:10 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2={0xff, 0x2, [0x2]}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:21:10 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x7]}}], 0x0, 0x0, &(0x7f0000000300)})

[ 1103.034855][   T17] binder: undelivered TRANSACTION_ERROR: 29189
[ 1103.043715][T10064] FS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[ 1103.061136][T10064] GS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[ 1103.113297][T10064] GDTR:                           limit=0x0000ffff, base=0x0000000000000000
[ 1103.147160][T10064] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000
[ 1103.172952][T10064] IDTR:                           limit=0x0000ffff, base=0x0000000000000000
[ 1103.193279][T10064] TR:   sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000
[ 1103.202420][T10098] binder: 10097:10098 got transaction with invalid offset (7, min 0 max 0) or object.
[ 1103.228335][T10064] EFER =     0x0000000000000000  PAT = 0x0007040600070406
[ 1103.238749][T10064] DebugCtl = 0x0000000000000000  DebugExceptions = 0x0000000000000000
[ 1103.254613][T10098] binder: 10097:10098 transaction failed 29201/-22, size 0-12288 line 3241
[ 1103.270432][T10064] Interruptibility = 00000000  ActivityState = 00000000
[ 1103.286232][T10064] *** Host State ***
[ 1103.290479][T10064] RIP = 0xffffffff811b40b0  RSP = 0xffff88805a4e79a0
[ 1103.310308][T10064] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040
[ 1103.319493][T10100] binder_alloc: binder_alloc_mmap_handler: 10097 20004000-20007000 already mapped failed -16
[ 1103.331302][T10064] FSBase=0000000000000000 GSBase=ffff8880ae800000 TRBase=fffffe0000033000
[ 1103.337923][T10098] binder: BINDER_SET_CONTEXT_MGR already set
[ 1103.341931][T10064] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000
[ 1103.354612][T10064] CR0=0000000080050033 CR3=000000009958d000 CR4=00000000001426f0
[ 1103.362817][T10064] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360
[ 1103.366449][T10098] binder: 10097:10098 ioctl 40046207 0 returned -16
[ 1103.372240][T10064] EFER = 0x0000000000000d01  PAT = 0x0407050600070106
[ 1103.384145][T10064] *** Control State ***
[ 1103.388694][T10064] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2
[ 1103.396837][T10064] EntryControls=0000d1ff ExitControls=002fefff
[ 1103.403477][T10100] binder_alloc: 10097: binder_alloc_buf, no vma
[ 1103.407815][T29950] binder: undelivered TRANSACTION_ERROR: 29201
[ 1103.409959][T10064] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000
[ 1103.425528][T10100] binder: 10097:10100 transaction failed 29189/-3, size 0-12288 line 3147
[ 1103.436124][   T17] binder: undelivered TRANSACTION_ERROR: 29189
[ 1103.475427][T10064] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000
[ 1103.508150][T10064] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003
[ 1103.527822][T10064]         reason=80000021 qualification=0000000000000000
[ 1103.536388][T10064] IDTVectoring: info=00000000 errcode=00000000
[ 1103.543552][T10064] TSC Offset = 0xfffffdaf258cc9f6
[ 1103.549127][T10064] EPT pointer = 0x000000008e5ba01e
[ 1103.556493][T10106] *** Guest State ***
[ 1103.561429][T10106] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7
19:21:11 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20)
r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2)
r3 = memfd_create(&(0x7f0000000000)='/dev/vbi#\x00', 0x4)
ftruncate(r3, 0x1000000)
setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, &(0x7f0000000180)=[0x3, 0x4], 0x2)
setsockopt$inet_dccp_int(r2, 0x21, 0x13, &(0x7f0000000100)=0x800, 0x4)
write$P9_RWRITE(r0, &(0x7f0000000080)={0xb, 0x77, 0x1, 0x1}, 0xb)
sendfile(r2, r3, &(0x7f00000000c0)=0xf10002, 0xeffffdef)
close(r2)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
setsockopt$inet6_opts(r2, 0x29, 0x3f, &(0x7f0000000340)=@routing={0x62, 0x12, 0x3, 0x4, 0x0, [@loopback, @remote, @loopback, @remote, @empty, @mcast2, @mcast2, @mcast1, @remote]}, 0x98)
ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, 0x0)
setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000040)=0x7, 0x2)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @multicast1}}, 0x7ff, 0x7ff}, 0x0)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080))
socketpair(0x10, 0x0, 0x7, &(0x7f0000000140))

19:21:11 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2={0xff, 0x2, [0x4]}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:21:11 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x20000000021)
setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6)
r1 = socket(0x11, 0x80002, 0x0)
setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000000)=0x1e8b, 0x4)
bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14)
setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c)
sendto$inet6(r0, &(0x7f0000000000), 0xff19, 0x0, 0x0, 0x101aa)
mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8)

[ 1103.572729][T10106] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871
[ 1103.584221][T10106] CR3 = 0x0000000000000000
[ 1103.589687][T10106] RSP = 0x00000000000004cb  RIP = 0x800000000001f000
[ 1103.597249][T10106] RFLAGS=0x00000002         DR7 = 0x0000000000000400
[ 1103.635860][T10106] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000
[ 1103.650682][    C0] net_ratelimit: 16 callbacks suppressed
[ 1103.650691][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1103.651166][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1103.656565][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1103.662818][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1103.675240][T10106] CS:   sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000
[ 1103.730688][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1103.736598][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1103.786144][T10106] DS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[ 1103.800528][T10106] SS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[ 1103.821048][T10106] ES:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[ 1103.840198][T10106] FS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[ 1103.850198][T10106] GS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[ 1103.868775][T10106] GDTR:                           limit=0x0000ffff, base=0x0000000000000000
[ 1103.879410][T10106] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000
[ 1103.896020][T10106] IDTR:                           limit=0x0000ffff, base=0x0000000000000000
[ 1103.907119][T10106] TR:   sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000
[ 1103.924783][T10106] EFER =     0x0000000000000000  PAT = 0x0007040600070406
[ 1103.932212][T10106] DebugCtl = 0x0000000000000000  DebugExceptions = 0x0000000000000000
[ 1103.940398][T10106] Interruptibility = 00000000  ActivityState = 00000000
[ 1103.948369][T10106] *** Host State ***
[ 1103.953380][T10106] RIP = 0xffffffff811b40b0  RSP = 0xffff88808c8279a0
[ 1103.960178][T10106] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040
[ 1103.968913][T10106] FSBase=0000000000000000 GSBase=ffff8880ae800000 TRBase=fffffe0000033000
[ 1103.970782][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1103.990150][T10106] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000
[ 1103.996917][T10106] CR0=0000000080050033 CR3=000000009958d000 CR4=00000000001426f0
[ 1104.004832][T10106] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360
[ 1104.012363][T10106] EFER = 0x0000000000000d01  PAT = 0x0407050600070106
[ 1104.019891][T10106] *** Control State ***
[ 1104.024238][T10106] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2
[ 1104.031787][T10106] EntryControls=0000d1ff ExitControls=002fefff
[ 1104.037960][T10106] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000
[ 1104.045714][T10106] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000
[ 1104.055827][T10106] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003
[ 1104.063245][T10106]         reason=80000021 qualification=0000000000000000
[ 1104.070353][T10106] IDTVectoring: info=00000000 errcode=00000000
[ 1104.076654][T10106] TSC Offset = 0xfffffdaf258cc9f6
[ 1104.082834][T10106] EPT pointer = 0x000000008e5ba01e
19:21:12 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000180)={0x1, 0xffff})
r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000005c0)="9c35", 0x2, 0xfffffffffffffffe)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x400, 0x0)
ioctl$TCSBRKP(r1, 0x5425, 0xbd)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r2, r0}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'sha224-avx2\x00'}})

19:21:12 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0xa]}}], 0x0, 0x0, &(0x7f0000000300)})

19:21:12 executing program 4:
syz_emit_ethernet(0x16, &(0x7f0000000080)={@local, @local, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @broadcast, @empty, @dev, @local}}}}, 0x0)
syz_emit_ethernet(0x24c, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)={0x1, 0x1, [0x4da, 0xa62, 0xf74, 0x73b]})

19:21:12 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2={0xff, 0x2, [0x34000]}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:21:12 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x20000000021)
setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6)
r1 = socket(0x11, 0x80002, 0x0)
setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000000)=0x1e8b, 0x4)
bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14)
setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c)
sendto$inet6(r0, &(0x7f0000000000), 0xff19, 0x0, 0x0, 0x101aa)
mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8)

[ 1104.165773][T10127] binder: 10126:10127 got transaction with invalid offset (10, min 0 max 0) or object.
[ 1104.190797][T10127] binder: 10126:10127 transaction failed 29201/-22, size 0-12288 line 3241
19:21:12 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2={0xff, 0x2, [0x400300]}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1104.257418][T10131] binder_alloc: binder_alloc_mmap_handler: 10126 20004000-20007000 already mapped failed -16
[ 1104.288158][T10127] binder: BINDER_SET_CONTEXT_MGR already set
[ 1104.319928][T10127] binder: 10126:10127 ioctl 40046207 0 returned -16
[ 1104.358716][   T17] binder: undelivered TRANSACTION_ERROR: 29201
[ 1104.365948][T10131] binder_alloc: 10126: binder_alloc_buf, no vma
19:21:12 executing program 5:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x200081, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/151, 0x97, 0x2040, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x28000}, 0x10)
socketpair(0x1d, 0x2, 0x2, &(0x7f0000000040))
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180)={<r1=>0x0, 0x80000, r0})
semget(0x3, 0x4, 0x1f)
prctl$PR_CAPBSET_READ(0x17, 0x6)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000001c0)={r1, 0x80000, r0})

19:21:12 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2={0xff, 0x2, [0x1000000]}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:21:12 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x12]}}], 0x0, 0x0, &(0x7f0000000300)})

[ 1104.397014][T10131] binder: 10126:10131 transaction failed 29189/-3, size 0-12288 line 3147
[ 1104.435371][T29950] binder: undelivered TRANSACTION_ERROR: 29189
[ 1104.487872][T10140] binder: 10139:10140 got transaction with invalid offset (18, min 0 max 0) or object.
[ 1104.525651][T10140] binder: 10139:10140 transaction failed 29201/-22, size 0-12288 line 3241
[ 1104.548819][T10146] binder_alloc: binder_alloc_mmap_handler: 10139 20004000-20007000 already mapped failed -16
19:21:12 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20)
r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2)
r3 = memfd_create(&(0x7f0000000000)='/dev/vbi#\x00', 0x4)
ftruncate(r3, 0x1000000)
setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, &(0x7f0000000180)=[0x3, 0x4], 0x2)
setsockopt$inet_dccp_int(r2, 0x21, 0x13, &(0x7f0000000100)=0x800, 0x4)
write$P9_RWRITE(r0, &(0x7f0000000080)={0xb, 0x77, 0x1, 0x1}, 0xb)
sendfile(r2, r3, &(0x7f00000000c0)=0xf10002, 0xeffffdef)
close(r2)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
setsockopt$inet6_opts(r2, 0x29, 0x3f, &(0x7f0000000340)=@routing={0x62, 0x12, 0x3, 0x4, 0x0, [@loopback, @remote, @loopback, @remote, @empty, @mcast2, @mcast2, @mcast1, @remote]}, 0x98)
ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, 0x0)
setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000040)=0x7, 0x2)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @multicast1}}, 0x7ff, 0x7ff}, 0x0)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080))

19:21:12 executing program 3:
r0 = socket$kcm(0xa, 0x9, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10d, 0x2, &(0x7f0000000000), 0x36)

19:21:12 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2={0xff, 0x2, [0x2000000]}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:21:12 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000001280)={0x2, 0x8000004e23, @multicast2}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffff96, 0x200007f9, &(0x7f0000000000)={0x2, 0x200000004e27, @loopback}, 0xffffffffffffff80)
sendto(r0, &(0x7f0000001300)="86", 0x1, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x400100)
r1 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1000000000016)
getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000003940)={@rand_addr, @dev, <r2=>0x0}, &(0x7f0000003980)=0xc)
sendmmsg(r0, &(0x7f0000007300)=[{{&(0x7f0000000040)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)="43da4e5696485e453b3f75cd4f91cf8192b986351f79204563f026943f5f7f753afbbc3ba944b327aa4fa139196d3d3bcbf880b4746d693ff4bba44d08e68c632452285c25ae8aa1f587597f977e28263989b38d0dfc8b3d3e7446a1e1203eb7cc9849b3b6e63ec10e667429ea15c9f2b9f8bb5ccddf7c1c69220ece", 0x7c}], 0x1, &(0x7f0000000280)=[{0x1c, 0x114, 0x7b, "c6748b72a2054881bba05215561e34"}, {0xcc, 0x0, 0x1f, "789319603979cbfecccb8cd1d2db5d4bbd27bb0c4b94d36ecf6f64e36202ae6f82e63a710000d1c64da42b831c1e82c16f8ad7b87e0c55f0991d28f91be3cb247cdb0a2556595c4af1f99fcf8a335487d05d17dab75322cc139d5919983f26975faedf916ffffbf707736ba02504b43034f7a7d74edfa73926d5d0baca7a59f129163271f3aeaf274677c38780ec8c6ee049254fa43b11f744ea0a29337d5998b4482a813304654c7624c7286145a00072a847b58f03cb0ac6204890921099"}, {0x100, 0x0, 0x8, "364d86b6766f91247f65a08613ef9e9bbf9682f6c01c841eed35ae633bb760ce68a07a0e85790bde73e0d47f7f5a3ab7e154fa5d1e3f5c4d5187a7895cbb9374645cd27c7e5f14ff2966caa1f734ad455e889f86290c7335dcb7616c8eeda790af21e4bcc9df895f66449059c805f0d1ae8eb593125ff19467030a36b9a1dfc3bcc4341a10f1302e891fabddc66342e3d8e59737e920428e893c74d23deb9c6c5da49c6f9bc80455e3b9b092bc4d4ce7b0e3a516d53a1b21b3346882411e988c187adc1d4e2b29a88ad67b3f9f5a8454d5315ffa188412d5e16c80cbe0193ab55e8efd4c39e03eb4dc79ffe539c1db70ae29"}, {0xe8, 0x19f, 0xb4, "4a1845b880348dd1168ad80352b5c3c0b132ab3a68338c4bd5b528b708fdd24eee41d0f88b5775a21ee00569b4f5049e61aed5318dfe82c907d8dad2360a7a34e6d1cd6a4addc5e5fea35c7495a3139f15c713cbe56827d8076c5d975b287a597fe569401458d4ca8e9dbb4de586b698918bafd930e8f953688e7a7b445194fd15cdff43aabd213e1de082f9a3f63eabd232b1a9c1a380e55692620faf64b76a13466b00b64448c06611596cdbc187ff714a37863b1e2ab1928e14998bdb67c13558fc8bac8bede68f970e31aa4074f8001950a68395fbd199fca5"}, {0x54, 0x0, 0xb73, "371f02e54e52b7a7968b5f779d62bb0a6ee534b9e3e319c9c70eb7e0d02ef0a73d629d3ef6f06c506d55a30a6ecfb2a6817fc6b11f7b153d43ac3ea18c848d823186e7ac6da212"}, {0x9c, 0x119, 0x86, "7c1d66e401ae48d9d4b311cdd2e2a1f37f9b0d447fd8e1b2b703292ac29693c21b598a0ea6ec923085ee3bc8a5071d2edd1e3b7504035676c2bb0f81ef6b24ee5f943b129d6a22ba046878aea3465ccf3eafb23d721b51cb51477ef9b055e7557573bc0be731da0f8b44781a04d7c0974febe076867b47b717b1d7ad0ea2098dc07e51dffaaa9ecbcb77f3b683"}, {0x9c, 0x114, 0x10000, "b6c2a7876e5acbf6df5b85e93148d9c62f72c135dce07d5ce5ace90a70fb941fa7cb8423bc6f42f2ef27435e90b55b56134dc7bc311b6ac688309e012ad994059772e95bfb295671cd899e987e4c95444af145dc041a8751db1055c7bf1482f80559624ac19c0bfc9f5f60e50afcb5fe409b126a82f4dba52f8620168039f719c757a8169ded7f37965ae5258938"}, {0x94, 0x111, 0xfff, "db0bbcbae154c6bcd0c4f0f15d0f1a002b0c7c46fc8faeec65daf087592019f3fef6eae8cef7213cce705088767c664a7295840adc662e903746225625ea8a681488841eb2164237644be5789c32e812a86ac6dfc790a08be14075695c878f43580fdd8ed4da86c41fe08231fea415bd3e8547216a9721b0f5df880a67fdc1358b2eb79adb"}, {0x20, 0x118, 0x80000001, "4fc0307671b1d9686732967c284a047aee998d"}], 0x510}, 0x5}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000007c0)="a7462d4965f6feb6851ff37d01816a2dd397e6c58ab8e825d02a401c8b42827b68fc51c53dc1d3a1477b403d7965300feec2a436ebc05ca85f7108af81472465d7f46ff695d8f75167e8c004ba455494ddeb8703af8930f8070bbbc208e1662241fe86c888495e4665e249ee57ab9d5e00224106f75456cb3d4587950c5e1d04e69c365ae3f79930a7cbd44e9b42332969fb0257b7155deb8f1e32ba6108b9e9e705e4f2232e70b1e29b31722df1ec95ca10074d1e6ec9363e535b9b632fe18d4be7247f6aac47b18fdeef", 0xcb}, {&(0x7f0000001340)="c88dcee3c46f7bf7637235e8692fee90ddf2bc7334f29615e975ea95c1bf2fcd2b5883decdf4c546acbe28c88a4014413885b60b82ccce943734e3bdf0757c63b594f4e8b6a66b8be362453ce19b0570db3524b3f26baebc00c2ebff9c02516722ffd74da93bd0aebd68c0ee47c56035d47302ddeae7947b75b7ff72bed06bb2638e2c5f250df7c0b28b57fe5baa60b56fab05aa75259b2ed5c53d52fd019e0dfcee731c0fdb90475de13f6b3cac381847a85aa081a2ec02500cc97ee19a008f52f8a915235771633091496f237d64392fb260ff56e87d404eb601cfa74d6f64cfa2326de1efafdd10c5779f6cf5621e4ffcb0cb3b13c9646b58e42bb9368beb8801a73fe61a69527a3fd2cbad5f8d55fa45f419555af486d3c9a1c61faf5145b5c87d2587bc76b5c7ffb721fa0da4a7695d40958738baa50e3c5eb4aacab57e9dc015fa6392a95c6812bba7dcd0f7ad625aa9b1273bee8cf67a84f631c12310d8d9f6593e20224997093f31146556e953b1e2eb9d696b461f6e412955795bdd5d1f777ccc84752a93663081379f263c7d0ad559a98a04f67637aa4a7c5c2bcae34343eb6fffde8353a5ef7d6e8944208864ebc5e24d9d63e8a45d7fa8b5116928366bffd66c6248aaaf7dd22d62e124f529ed180cb82f68b598790a74ddc3b9cd0d9ee8030571ad3956c2bd91af2ed68710a1b83669390e2476a7c08dc3a0ff7d4f1ef2d133681f30a99e6cc0c594a9ef6f9edd99c9120383220ba71a48a2c17f6441f6700c70517262e7d38181b80b2e9dcd6117aaebe766aa9be99427ff903c346d48e3a6a684db4d90b9500dfa970be9a73979ce3ef10df7f0aae4a954c03b303d6d21a23251ff2b63ed2520510102944c2a4bd4360cbe829f00f043328141d790afe062b018054837cc696abb9363142afa489a18ad5e772321f6b302dbd072f38b001416e858bc748ce682cd07ff07f635561ebcde463ea58b7fbff0662060b29400b2fb5acba992a44408eae6dc2a1455e66ae8d800aa223ca2991444b3218912260479e1f30c97d4b4d4933265d2b8130d9e33477276a8bfbf30bd2ac4fa2db094c6b097ef63e1e36cc6dce8a8d8efa094bd35b92bf9277f06c154e7a19885c1340a2d4294cc912e257e81d274df6397deed4dbe0873328e20f0e587ad610aaf51c788fcacde4a08def6464e8dedffa95bad0b12ddc07849efdcf88398b2288d54e321b930dfc39e0a72fe4f052f4992c71529061aa0f2839d776507c97fbad4e7c289fe0b76a4990e94ea9bdf826d18e79a08bf5563fde1971ee85954780e8e8cf1f781bf191efff2ee6164357a231ac7eea00c63ddb2a54d0a93a5e0f6613556796753e8856fb9f1d6a84418034b4ffe6cf91ac90dd2e81e9fe5480554a6e1d95c957c3f312b5adbc8d6924f897b329c2bfaef199e571431e09f7776a8be2812eb2287ed61f416480351458fafc010fd312a993c4ce289997e2f041f13d7c50cf706e069a9cc55e2e8e54a118eb1917a6472e3db0dd7060ce8384fe012c7679d509b8614ca31c43e4fc66c984f1a41188bd5ac72539fd7cb7ff6c39eacdfd1ddc4cd3bbb7b2c390f8485e7f23790c25766e6a4db3b87dee7ad337db34726ba9f38679b6802737304558294a597e1d27ed3a9f0a8a75f38c10d2527cf4dca50bf8e1fe30ce51d4def92b5f442fbb2875ccae20479b0c403a947ae9c9573e745bdf9409f37c6cad7c69f0b953a2d21ad098c8526d5878660fc2357ea1ba9b22cb2ae85fe6300da3c52d933485c304eee7cf209f4f36253220edea4a60442157c47b21353ac8d2a3d96fee79e7e6cdd1446ceca69c592ed73d6396a72a64144c1c3f88cf642cff0269283640c2e3369be30f5cf078b8be56feff72c996b9aa1d895f34566ef72e28cda9f1b9d219825d506d0980dfdbd8af1f5fb798b67c6ffae08c822c40f54370c9ea7679f9b8d4c738f137ef835e3fb33fa646b268078f9c5cd84a97b716d6aac5c697fa75d17de05a8edf66f0f9b909464eadd30f6b046329907cf55cff2b03d2f075bb314cff726fdcba0fca4852f0d29e8154ea76b89066b7e8313e43d4ecf75a796b3ccdf05af5ae6ff5a402a4a684e2ca7d515f4010870938a919c7a2194f5e7bf376c89c29ac6ba6eda6260e2715b3a3287c06bbedae07373c80e126245106f43da20285cdc6ae8bf76305e33784729a4c895e0a1348eae22b2ee354bdf4a7f7e8275f291422dbc13550415b70ec677cc6a61d414421ac6710e39b6e6c138c5897b23e6cd3d0390e35e044786136c79179145dfc038c12858856ff1d3d3f54641083a27d6fde032625e11f1ddd08aceac86b27253596a96f4e7a20239dd1be0ae7cb5320a732a3f6784894973769495b860b9257e7b5643740b39405fcee32b57768010f15ebd6eb342a96eca7bbc25cbfa5ff4a1d4eaca075c78d1be3e91aed00886372ee16c52225f4e6b1b357da9254afaf299a5e7c181685cb39d4ebed1c04c6cf6c680dc19843339fbb2e3a11a0e8f8537d98128e69e7abf7fadd203102e748373f21ba5c378ec79d3150b8cbe0bd84d086d1ad5ab88f73dfb35f91753bfdef5b68eabc014d4f83a74964803a1699a2c281e43f1b2bb7656de5209e7f9c0299aafc3913423ba64718cd9f49fdc6c8ebd386214f017e38fec2e851d12541896fe23f407078b911d175d65a90c5fb9e74a7ee899f66c29a42d01187054efdbdaba1b31844f3a9d7f73877128d548791917560b9f676fa657f76bd54e16b032d9f8defb844cee5172c9c43154ca5db6be3c80bff927e033c396e07a692324c56787ac6830e868c33d407404b8a2fdd551807ffdfb6516cd94ccb818779efc508361d9f84293de319003ed4801399b02b6fcb2295f87ab6f5326e938e1ebfdcd235f7c5dd74cc9e24300ee8dd6ba195fd5e00d795e9928d65d29c7a28bb32272d8b853b8c800d505c82187638425be28d4d3f7bffe3f4ba670725c098b2fc2d9d623eec2e5fe5f8c1dd73950ad431a8181945889a404a8ecc977d4d1e963e2b78db71a14cdfcb08e14ed1fa6cd47b71dad76a05783b5293e8053633caf298be22fd9dbc116560ac22ebae410dee720593cafcf5e4b4bc048d7365948a9ee5fc39d00e4940f304aceaa9f7e7f42c82d4278b9b917bcada573c1639c97269b0b66f0e6137da02c893e44b574b10537cfab77dadb06d2c7dc50653f7a512098517a8a838bf3283bcd9a57dd402fac0d565d0aa9e0554e8608ea6bd162bb2c2c901182c7ee11e7ce3bee19c2f165f507b6f72d17005148a253265b14be2d1e858a21e50d0eeee6b0bc8825c844fd2034d96c6ccb51f9a08a823e627cbfd62256e60a94ca9a789b17c37edf6b243faba63e525e0dfc70ebcb9dda4c9c840b53bd718e05f487742f677c94669c8cdf5da86fbb04952535ea7884a7cb102318be2006951363044c18978a2279f5e9ac3f5192250e57f81fb3c91181180c0cedf8d8a849f3eb7360936f0625ba630f4de7865aed81d563f8852614dabad9249b9296e1c3419caec01e483fc28b1ec946a48655f3b06fcfac740d562e6c46cde405f412aa65920b60550d655bc3edb0a32668126a91e18f2a5a98e12592c2b28f455d3f3055e9a465a23dd77ab32f03b78689e34f4e0287e739c701fe84fa3d5a891acc1e7fd9803139b1669067cf1976d01c5adba2650b0954fc7e5055dee0bc9b1d855dce46c3948c7ebb134150c4c00fbd589d0747f4faff478717a4c9a4052aa87462b1da6bd4bcb5aee0da3b295bc66d1d476f136de50d583ddabd2e3f1893801a4773584ded36bf7e4cc85374a83e7d49da690a22028c643dfa94d5fe74db022b6848fd1add1e12562e58515cba31125a29de4c7517643b5ccf9c8e35f9b1ca3de7a59cea31f535b428c8da80f2e249b48f3ae1f432764887bf15ef5b786f2f6884cc8c31e5037ecf84e95156accc254e4e5a34f156ac16563c921c365a91852caf6b76769e5ba5668bc51042f458739fb8ea0f00611347b098dd50c7295291f0d435617f2714c30646b4f9ab429259c543f85be053f81501ccd0e221390f2196e55f2d5833452297d52d960d8dc9f27a8f06af9c121a946926e5a40cf1ed9fcfda64f559dbc83b35a0d9952e9a0de1a0a179b22bb37710dc09f4996848e1518e03547d015496c9e063a2022b5f4c6ced8713c551ed77b9fde1c9872996fe2487dea50382be1a4fe21d66b915aa1b1a558976456d06a8bbeda2cbdd5db078a3a1601d65c1a47ee1cfc26c296e92a22185427ccad1d4a979dd8039ecf23e13e9dfc7f33e2e0cc9006a00b5ff9b9bca025477dcc4ace4ae14ffe791f63f4f85746f423acd9484c6b23b109fa2691ee0eb73ad85cf6efcc56f7f2164e9abd58b3936e05498cf1eaa520a3cb7a6976bb0a784a143040ef3346bf2728c81ddb037a4032bd603bc35605d71c4b9818548a1218c28c7ee58b2cb26482998e02553eb0923cf78ab143e4ff10e1c56e85b927bd0ee1ddcecdd93a2ca3aba9b16f0b7b4d9ff207bfae36565dda144d90d0f38653c2d316860875650151a354183bec77cd2c9bbced659de6c33cc3f318d48385457c18f269afd8205a26787e60bbf3f538f7c0764e11a2abc569cc8def538231e95ea10738b4bcefcbcbb8df0ab410113bc68f89acab8079328c6a6d3ad9430bb5cc449d21641ba7007fbfed5b474779df56b9d74f7a2caf705435739eeb07061df9d4d8fafe4f9bf2281d89fd59c1be81ed219496f006432799848fbe5dc8e1e3fc871c248ca46663112202b131f079b182c512d75ea117203efdcc4e32eaad685f35d60c75a684bb69904e1efdb16cdcdd1f79e3e8db35832b20d39dbd57dc68ac10dde780c2786008aec6d1d12ae236ba4247f5c13f157a810eeb3465982117a1cf87b5b4ddc7a66a97126fa471e59fc228c5ec193cc78e7eb48cb4e1187b9f661d06b6ae87373d559b2e43e7e36d8233126848075c6be3a42411d15a6cc21f331f6b99095913b99609061473e1a74ad993f8d74e0e198dc1f5e8f1c0b8e6e00447bbdebb82fc0910a8f2efd439355433a694c55d45c0a532561b8ea5e8f92f27ee1e2e2fd4a85e4a80f35969f28130240bbb2505463db8fe5ee020d683e3c6e604fe41b43aade0ffad134ee23ef77fe07bcb0f1559447d031c71fc7aee909f0900816da59992571eb80d20332b31e45c72e2bf54c201a87c739a64b0ebc02417b56c60d3b5222d75317f7e5b061b7fd6b15a6ae97b67a903c42930489c256a80ce8298d50485c491b9d7091f7902714a6f3fb3891ad39ec2b63f3ab42e940e524ea7bb7735ff2c0118428f1a1fc90dcc6da7b7fa9386582f2b09b40d0fa07c7410e1262131791f8f4de580dcd5aa52113adf09df5fa6edddd399e717fa356a1de019f15cb30f7b21261e24de3886038bc125216ca25628dd13c1d773697ea16d260034ad7d9fe72db0c6d772ab11e0ef9e3c3fc0dbaa122ad86056db9bdbefd13b347fe1f5020971dd59a440e7bfba566fa1a9c23d7d3a5b6ce7ec91fde4b3b47d9d2f1abc69c42cf067c933f4cdf748d05ffb8a4509e69c9246f83739493bc9356dd0fee0c429c5f660e4266f6dad55bc5c6c7716dcbbb204ffcd374cfa1806e2e5d71f5fee78cb16855b20b25db82fa3a5d139ec24c4c25df809e3bce161a7206bb55a0dd63d3f00c53cec210b711ddc328086acb91a4ce4a5ffe6f678751eaa55387a72f38ef6e5fceadeef465acebc16b25536bc0a2e7a825b18fded5c2198f09", 0x1000}, {&(0x7f00000008c0)="61184f0333e690d9a0782e3dc232e14318e2fadeaff4d59d7ec208287d3b8a3dfbbc40b57a9cae0ebb1c3c57e07911951441b3f82213434ca55005b373588d485301b30ecd43872e6a573ca12827e0b72d3ff5acf2a5d27d7c3f2124e6d3cce469dd34e4cbc25c742286a5942ea64db6", 0x70}, {&(0x7f0000000940)="87f1da23d13e5d5570e7fd032a354678febb0eac8697d37846a63273ca9b288a62737781a2643a243fe10971507dc68c543e1fc2eccda83c1e1fb2063cce1854d130049c14156c8a1014b7acc43437cdf8e2b2525914dd489dfb0776bb642b0d9758618ac4523268a4d0635a8da3e5bcc5300f5f2764f3679054ea3e21c0743201635770449c7295154ebb6eb0b5db3f57391c42b7f37bb615c79aeab25c8c7b42af76cf", 0xa4}, {&(0x7f0000000a00)="62aaf43692d404296623cf51f1667a459d83a72673efbfed6ddbf54b96b5d6fd2b4eb9f490a28e081f0b06ef6ee96db9fdf5506852fc25313a51804de7ded04959dcb6f358d76a40a1d8fad52d33b53952733bb0f82f723a19525b0159478bf4e7a9de06804c28f4ce11ff1b8c42e03841186df4b8a44ce2cc7d6c75cc6a84aa87bf44c6829361b9fe25a682f27c48cb353fdb04e144f533940b1d5dfe0d2814810f10cb79a27e9e1fd0646f507b89a3718ac9b9084a2dfd5c3c7c5647e616a73426adea", 0xc4}], 0x5}}, {{&(0x7f0000000b00)=@vsock={0x28, 0x0, 0x0, @my=0x1}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000b80)="35b898a5df00a7d322c40149e826ae71dd87b46e7c4cc796adf328ec7ebafddabbbff674ea58d16681716a68774e864d99ce10728686e29d878bb35f022379d274c6213eb979b864eaf00b4f55acdf2e4c3b88e33ffc62c2be96740d5f514475b044bd96ce44ab87480632c9d9b41474356e3810278756ff861c0f973770ba651e50ccd072acf6bd61cfafc5eef3ecb2ef94ef09101464c74cc823f09c948ddbedf02542673192e5ecb471fb3d0ba6fff19ac1f4a336c2c14bafe7247db0d35765f0ca79", 0xc4}], 0x1, &(0x7f0000000cc0)=[{0x38, 0x88, 0x2, "1760cd7ad22194cda8b0b55e819265232610ab88418fd9de145988cce33d91a5fc184b28dcdeba8eee"}, {0xcc, 0x107, 0x0, "ecd938dc924eedd51873d85a91aca9e4f142770885b73f03420d8c518392b851a7c2aad5b1b2f2cad39d7248cefe361a037d78e123db7993e4f2309b36d8b94a4158ee0deda6083597a4d581651d6c1ff53fdb4a701521112fb093f928db6ff8d70c52e2be142c84ccea60ff4dc1bf619c10a01d7c354190b6e4e407e1e74cb9a97b52a16b3b992089eea1bd36ecf2934109f523b5ade1598de4df86bfe6118f1605bcb3932a9cace7f3e0932bd5ea8fda3c1dc4f7623de15172e7a8d274"}, {0xb8, 0x117, 0x80, "b5a80edd2bcd0ad75a853b7c736226c25d157b7787b635aaaa873335252c37ca21c81af7814e40712f205d23688d17926188414e32a1dbb41568df08cc8786d7a988d6fec8dd1920878181e036d1d668b9c12af3020ef0aa04565ed3a77ddccd0c362adc707bb320deb04e074ff3b92fe4a66a41b1678c9a7ba00bafbeb08801d085b178ac9bbf34366a3eed2f49b5810df18fe4f788c4701e87fe99e41f1045ef721ceb00f9d19cbbefe743"}, {0x9c, 0x11f, 0xf5, "c384d3445cdb55c4e40e0de6aa2c5a36ef51dd844d584bcf94db2d9516c81e8222a8cf268b131c04d8a04df0a489aed7d75c33950d06f6780cd7724f89820f3029730637ac99dab0b64d0fc5fb3138a5a37209de8cf1bbfec30d75cf6c7d723b262562439a7852c9378574245a6794685c06b4cf697d8c4c172f12f8e45d314e5422d4f135571f8c886dcecfd245"}, {0xa8, 0x11f, 0xffffffff, "e2aeb1a4f8fc876adba9608f830f287c6f7f2fbe6ba6eb4a84643d5ef0b184ac675377d098e97394469ad21b3b7b5ec70f43191245a18f728bb0892d0e210c83b2c68adb612af2e3d15cff0e7caf22c90b2536a2a2fe4119de96d5aa848e86c385b60b2d4a8d392bbe4be89df4e59667cd8f638d43480ec52c336ac8fccd1aa5b2bc2c9278a30e461c5f97c860f0a60bde280ff1faf11a80dc"}, {0x60, 0x0, 0x0, "a3d6709739f844362b822cb99c8e56349164f67ce31c818a4e051549d7d7fd66b967249736b412d4afa769df1d9a5aaff23c594db63c68ff4e0b7d66e36d6804ee936a53ece1f0ec2d75ee89f88084e08d"}, {0x60, 0x105, 0x6, "077dfd9c2f94cbf23c9da2efa4c01b4821ea7e2e0d44d473020e77fff291de0a390b435da19cb6fadf33c1e3cbd2a4ae8e110ea715f46a0a32212ac1c7e7768731a45a679397c9f0bccd778d3b68caaab590a3ed"}, {0xe0, 0x117, 0x98b, "0ef571890103afd8281d8a5949f58834dd8e13796f3a12f0f77bdd25d7821994f046267e17645ec9fa8672c7f29eff660c08d5fc71ada06a32f33da52407e7e8ef3ff0fd3855e06d0e0580d54a0b8d21199f30969dfaf598d90c00bd4e9785af94fb56ad9f20277a5027785cdf13ea2357bd822ac1f0577575bb016a1f7f3b450db2b122ce755e021ddcc77b1c53e31db3d411f1b3c66bc68682eff6e2a581c6fb470a07efbd5918d4a76d706e250a558cc29860cc7095afa7807c967c190c2e5f4e9a8ab710992770ba996ae4a841bf8068"}], 0x4a0}, 0x2a0}, {{&(0x7f0000001180)=@x25={0x9, @null='               \x00'}, 0x80, &(0x7f00000012c0)=[{&(0x7f0000002340)="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", 0x1000}, {&(0x7f0000003340)="8b962c4b1193940546e2b37a8bc95343782fd22698968188c7cafec50ce8624d57fbff3e58691baa664851dde7add8d592ed0c02cd77bdfebabb838a921a7f9cd50b19b6e3c6c0e838a9c37656e4d6b4ee73ac7d5983d1b148b48ec03b55547258855a9a77d0b79b5cc6d41aa36b78c67f788d8ed7085bbd2c383a3f46fc3c8a97f2fc8497eb19511d06785ee634c3b513d4e80af2eacd8349afface0c3884979e4a9ca49d44f8", 0xa7}, {&(0x7f0000003400)="5b1f2b1aeea5cb9e5f3be27f39ed34296bdb9a6e85ce377404da3a0f071ff6f47cd6f1a82b453533e9426eeabc6a8fbec17afde6f77c0b847f72b56c5c3d693d4d1d4599d575292980bd8a724c7e31d25702d7c0c9dc8dfff903fca06763a4191bbf67af98a9818f2f32487b923df4f4c775d49a1a4482b739d34e75e1cc3a433db1e14c176524eadcfdec9138743944f4", 0x91}, {&(0x7f0000001200)="8d009fc0c382d45328f66dba4a90644dfb5e9b789f00b51e", 0x18}, {&(0x7f0000001240)="9dd34b3ab196fba3670c62ceac5839071c980678ece39f85d8e0bf98", 0x1c}, {&(0x7f00000034c0)="d1dcb45d58f841a23b7c25c02c5f86a2e9ed7ec9912c7efc6a03deee5a87444024a151301439f8b4b2eb6976f40a67703fc8799aa3d07a0957870027174c9b4574907fd3b8023ac44c167e3d447f8b487a843ae357901774a46fe5d0842edd2920f0632432d267262772cd447882ce9a303530bc00582116df77192723996ed732c16b1e9d5384db58d61d3b8b7088e1c308db9c2d043e58379cd5e25f605adddb9177d48fcd0b7e66f125438f1fb772fe02ce12dd8bf4", 0xb7}], 0x6, &(0x7f0000003580)=[{0xc0, 0x11b, 0x6, "dc13af633dee80422292c0b3a4d5168bccacb782295fb8d28816038fd6db2e40cbf487f5c8c3b0934924b55acf175e158df40f2a758ea5f94f34200405e1a5eeda393b9b85173828b4cbe20022ba9c0b31ced490487ef338ea5d405d6c7711e310c8540884b9c2b41a6f7ceae817a814eaeee6285e68c3fac5bbb024cd89b4eff743d38eb22178f8cfe8f80b49ab233f31c8ba3ddaa55646a03db881b4c381e0931bae66a0f37cbb9d7ffb2f994f4959f5877bfb"}, {0x38, 0x10b, 0x8, "033df585efbf617c1cb76c1b634b698ee196398cf85079b812ffbac55dbc0a2ee3760bb3d276cc3c7610"}, {0x40, 0x11b, 0x4, "932d4b894630bf7dccf8d50800d8400b3bb39d541e938a62298a8a513cd8e4fa78f28ea1c3920aa6acd754a939b77c2c5b5839"}, {0x108, 0x184, 0x20, "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"}, {0xd4, 0x113, 0x20, "4b947f2510e857db663c68892be399851b78332378ed8393104dab8af3cf3159b348326b9f05b6a49b14f8c5265c21dca9fb0bf86d6150b496f40c9cdb5c6370a1d6d63da85366642c905918b805d8ec5b311c49df4eba1007dcdaba86a47304c8ae63c2dcda0f314ec3a89a6e645687db8f5cb235ea55644cb556d3bd130da0921d11606476b3990a6c084368737dc98cb429dd4d7138d299cf2880378546db136977b49e50421ef968d99c02ecff6c20870ca1ca612e8d1f0d4e3bf7bcfe8e8b04c7f2ce21"}, {0x8c, 0x10a, 0xb0, "d590c25edd4a2f3fc4f21b1430e3809e700314d94d6493a9d449386ede14c095e28c755fde6125f6da4b46387a93b0e5b387838c791d4b9d50f33b03e81eb3fdfce12229082c9ad096d5b42aca4598442cf880ed5bd31b885e2747edc5e41672bcf5f0418f88968deb54c720b4e750a7e34c169a0730c35064d6c71781"}], 0x3a0}, 0x2}, {{&(0x7f00000039c0)=@can={0x1d, r2}, 0x80, &(0x7f0000003a80)=[{&(0x7f0000003a40)="d8467f7155c91c3836a9d1c772fb976a7d7c48", 0x13}, {&(0x7f0000004ac0)="6657eab816089c339dde09498ff97140d3da80418edbe967faff9787c0068388330386075a0698d436481399e76b18873419ee8d6b22721089a5d42dc78b28229e6564f0badf04083ae2a3", 0x4b}, {&(0x7f0000004b40)="75505fa784d4a62632c97762684102f400273afcc543d1a1095aa961f5f3a827abe0925b20af08c7addcaa0f4ac8765a2e56dcbbc6d6577d7521591d79c0a5ebecd6affa712a2a45dc2084db451c9a4e38e0c35ddc87c145", 0x58}], 0x3, &(0x7f0000004bc0)=[{0x5c, 0x117, 0x0, "3b4a5d819ccecdc48d16efcb5a9a5585a81c7667c42cec238f2458faf9f770958f4f0c17ed8e63159b5d299d6df930baf2b0c769d8c539fa41c39502fd45d6ce1fdaadc4c5fbc72078ea115a7f"}, {0x4c, 0x119, 0x2468, "9d729c1aeedfc4b3e3f9970e7fdf20cca2c4a63807109ba794ee3fe65bc8a309e6d242440a63e1148c3d473b10c2fcaa47f3976667b1350591d767118164897a"}, {0xa8, 0x1, 0x2, "1716db75c1a06abdeb04f8b2f1dce98fa64740ee1d6be041725f0d95946b52d88fa184745f6b5cc5fc23b0558989a5ca9adb1730d1d418258f846adbd42493753120e8a97d8797b90ea83d114a58f4de9aeb4415d59a70defb3fa1a80cc7853802a7eb5126c9321a7d1e31cdf8f7109495ef7be38d5a70a3652a39fc7b7b8368bd9f3ebf9c0942acdc867214bb32df42481bd5ac1613973e4cc67525"}, {0xc8, 0x113, 0xffffffff7fffffff, "16f05919f2567e01f5b28ae0dd9334e0029c0e496ad88debb5efd25b64206c8db30da44bb130298aaa11182ab6f9d4e2bf8e24c12ead21e6d40bc1f4fce6b9839999c3b85a1cd7a92f5020818f345173642ccd103978a7012841e48dc9949bc5276a63bcc822e3c13af51f2404ba11aa91c6843a41ccc5518aa6dec7ae24ef697575e514ef9a04260ed7b51e5bca84e4fa16113dc0acfbb6533fb044f85cfd3bc4f5e95a95b3289baf13c376b3d6fde818b62d11b8718bbd55fd5386"}], 0x218}, 0xffffffffffffffff}, {{&(0x7f0000004e00)=@nfc={0x27, 0x0, 0x0, 0x7}, 0x80, &(0x7f0000004e80), 0x0, &(0x7f0000004ec0)=[{0x60, 0x105, 0x200, "f8f0a4c2db18ff6487f5185bd7f89d3f010f00c72461f147654c7802a9a3fde710701b41e93acecbe9a8b3a07f56a6543db4ff9ec37f4f6df482003a9cf193f2864ff4afe2dcf5eb88796686ab7d39da003d41"}, {0x5c, 0x107, 0x9, "b9bfdfb4de758abe9945bc36bf7cbb81de6f91d734ca9c6e2b1740f97945acf3240018b2d066761e9d555d1509310e62425942807c05dd584975ff44d15dd651c9cd95d5e861b3907101a76bb80ac1"}, {0x28, 0x11b, 0xe1, "0612777b617ec373c53dd31e64c015ce731d10b3c7a703a12350"}, {0x20, 0x115, 0x3, "681eeea200310596eb71f2f90b0df7268d"}, {0x6c, 0x114, 0xb2ea, "2ec8697c893ec855d60b17720e194beafbc534e66d22c5aa849687fb4103c198e843f633dfaaeb0c39378cb84347b7a351b0c56d4872c32d3a6198fd0325d2d24d4e9d64d149ef19a60da9dd97e72b73996c0f76ef0c94eea178fe2d34"}], 0x170}, 0x3}, {{&(0x7f0000005040)=@isdn={0x22, 0x8, 0x80000000, 0x9, 0xffffffffffffffe1}, 0x80, &(0x7f0000007240)=[{&(0x7f00000050c0)="acdaf762e85635bf4ef90bf5d42e5a4748016e6af140bc1c66f1f9b97e8196e51b068d0b73aa06b0ee70732cf819b41c65768bfb42f6ce35bf5266fd8d243ca45a6f72da65cead56918ecb77ac6c7a76a44871b73c1ac7661503f28aa96939447b1783702585e58b36d2af8e3f29c825ae714ba9ebb3f38bd7e35d9a95e1628183dd3b7d3354f29438378433c7ce390d8847", 0x92}, {&(0x7f0000005180)="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", 0x1000}, {&(0x7f0000006180)="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", 0x1000}, {&(0x7f0000007180)="2a12585ea13469bef41077d4d8e68d39b7ad12ea25bb79a7f847ab0e25fbcb0ee6d178b42ca08ce46289baad93a25710e0677bd4e38f9dffd242855e8444ea7cde819ce52626623a98b5216a4d64740a44c63d71c4ba72e871c7e2837091eb46a73c52450001737102076d72c994614171ac9b696bf3bf8bf2e75735946da952e2b1fafb00bab05d52b7868779", 0x8d}], 0x4, &(0x7f0000007280)=[{0x70, 0x116, 0x100, "847288fd3d6ff291f05739b22768c70f232da71f0baaf3024885f07bf532195008c2cc2633ce0c6e3246f796062430775fb89a7e7cde1b7ceec7727b38044152e5750ffc6473b4fd11eef5f0f5698774819dd676fe13c46bd5947319e9393c8d6c349e"}], 0x70}, 0x5}], 0x7, 0x40090)

[ 1104.589964][T10140] binder: BINDER_SET_CONTEXT_MGR already set
[ 1104.610703][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1104.616549][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1104.667796][T10140] binder: 10139:10140 ioctl 40046207 0 returned -16
19:21:12 executing program 5:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00')
sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0x10c, r1, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x70, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER={0x20, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffffffffe0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x37}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}]}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xbe}]}, @TIPC_NLA_BEARER={0x48, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e23, @rand_addr=0x7}}}}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x804}, 0x20000000)
r2 = socket$inet6_sctp(0xa, 0x800000007, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @rand_addr="06eb6db447e2d0ebb2756c197cc5ee6a"}], 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000300)={0x1, [<r3=>0x0]}, &(0x7f00000002c0)=0x24f)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x10, &(0x7f0000000200)={r3}, 0x8)

[ 1104.713174][T10157] binder_alloc: 10139: binder_alloc_buf, no vma
[ 1104.719750][T10157] binder: 10139:10157 transaction failed 29189/-3, size 0-12288 line 3147
[ 1104.725354][   T17] binder: undelivered TRANSACTION_ERROR: 29201
[ 1104.748763][   T17] binder: undelivered TRANSACTION_ERROR: 29189
19:21:12 executing program 4:
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00')
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000001c0)=0x400000000ff, 0x4)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x684901, 0x0)
pipe2(&(0x7f0000000100)={<r2=>0xffffffffffffffff}, 0x800)
prctl$PR_GET_SECCOMP(0x15)
syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0xfffffffffffffffa, 0x801)
renameat(r1, &(0x7f00000000c0)='./file0\x00', r2, &(0x7f0000000140)='./file0/file0\x00')

19:21:12 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x30]}}], 0x0, 0x0, &(0x7f0000000300)})

19:21:12 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2={0xff, 0x2, [0x4000000]}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:21:12 executing program 3:
r0 = socket$kcm(0x10, 0x800000000002, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)}, 0x0)

19:21:12 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000400)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='veth1\x00', 0x10)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=<r1=>0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={<r2=>0x0}, &(0x7f0000000080)=0xc)
r3 = dup(r0)
kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000100)={r3, r0, 0x4})
setsockopt$inet_tcp_int(r0, 0x6, 0x24000000000013, &(0x7f0000000180), 0x4)
sendmmsg(r0, &(0x7f00000019c0)=[{{&(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, 0x0}}, {{0x0, 0x33f, &(0x7f0000001980), 0x6e}}], 0x2, 0x0)

19:21:12 executing program 3:
perf_event_open(&(0x7f000001d000)={0x100000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
r0 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c}, 0x24)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
listen(0xffffffffffffffff, 0x9)
close(r0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x41, 0x0)
getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

[ 1104.992372][T10183] binder: 10182:10183 got transaction with invalid offset (48, min 0 max 0) or object.
[ 1105.024962][T10183] binder: 10182:10183 transaction failed 29201/-22, size 0-12288 line 3241
19:21:12 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2={0xff, 0x2, [0x80ffffff]}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1105.064281][T10194] binder_alloc: binder_alloc_mmap_handler: 10182 20004000-20007000 already mapped failed -16
[ 1105.085087][T10183] binder: BINDER_SET_CONTEXT_MGR already set
[ 1105.096613][T10183] binder: 10182:10183 ioctl 40046207 0 returned -16
[ 1105.108383][T10194] binder_alloc: 10182: binder_alloc_buf, no vma
[ 1105.125258][T10194] binder: 10182:10194 transaction failed 29189/-3, size 0-12288 line 3147
[ 1105.154208][   T17] binder: undelivered TRANSACTION_ERROR: 29201
[ 1105.169341][   T17] binder: undelivered TRANSACTION_ERROR: 29189
[ 1105.250717][    C1] protocol 88fb is buggy, dev hsr_slave_0
19:21:13 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20)
r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2)
r3 = memfd_create(&(0x7f0000000000)='/dev/vbi#\x00', 0x4)
ftruncate(r3, 0x1000000)
setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, &(0x7f0000000180)=[0x3, 0x4], 0x2)
setsockopt$inet_dccp_int(r2, 0x21, 0x13, &(0x7f0000000100)=0x800, 0x4)
write$P9_RWRITE(r0, &(0x7f0000000080)={0xb, 0x77, 0x1, 0x1}, 0xb)
sendfile(r2, r3, &(0x7f00000000c0)=0xf10002, 0xeffffdef)
close(r2)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
setsockopt$inet6_opts(r2, 0x29, 0x3f, &(0x7f0000000340)=@routing={0x62, 0x12, 0x3, 0x4, 0x0, [@loopback, @remote, @loopback, @remote, @empty, @mcast2, @mcast2, @mcast1, @remote]}, 0x98)
ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, 0x0)
setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000040)=0x7, 0x2)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @multicast1}}, 0x7ff, 0x7ff}, 0x0)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080))

19:21:13 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000400)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='veth1\x00', 0x10)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=<r1=>0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={<r2=>0x0}, &(0x7f0000000080)=0xc)
r3 = dup(r0)
kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000100)={r3, r0, 0x4})
setsockopt$inet_tcp_int(r0, 0x6, 0x24000000000013, &(0x7f0000000180), 0x4)
sendmmsg(r0, &(0x7f00000019c0)=[{{&(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, 0x0}}, {{0x0, 0x33f, &(0x7f0000001980), 0x6e}}], 0x2, 0x0)

19:21:13 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2={0xff, 0x2, [0xffffff7f]}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:21:13 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x48]}}], 0x0, 0x0, &(0x7f0000000300)})

19:21:13 executing program 3:
perf_event_open(&(0x7f000001d000)={0x100000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
r0 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c}, 0x24)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
listen(0xffffffffffffffff, 0x9)
close(r0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x41, 0x0)
getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

19:21:13 executing program 4:
perf_event_open(&(0x7f000001d000)={0x100000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
r0 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c}, 0x24)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
listen(0xffffffffffffffff, 0x9)
close(r0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x41, 0x0)
getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

[ 1105.412806][T10210] binder: 10209:10210 got transaction with invalid offset (72, min 0 max 0) or object.
19:21:13 executing program 5:
munmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000)
remap_file_pages(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0)

19:21:13 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2={0xff, 0x2, [0xffffff80]}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:21:13 executing program 3:
r0 = syz_open_dev$usbmon(&(0x7f00000005c0)='/dev/usbmon#\x00', 0xcd, 0x2000)
ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000600)=0x80000001)
r1 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000100)={'ipvs\x00'}, 0x0)
r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
r4 = dup(r3)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r3)
setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f00000003c0)=0x7f, 0x4)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1)
r5 = dup(0xffffffffffffffff)
pread64(r2, &(0x7f0000000300)=""/14, 0xe, 0x0)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r5)
fsetxattr$trusted_overlay_redirect(r5, &(0x7f0000000340)='trusted.overlay.redirect\x00', &(0x7f0000000480)='./bus\x00', 0x6, 0x3)
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r4)
rename(&(0x7f0000000000)='./bus\x00', &(0x7f0000000140)='./bus\x00')
ioctl$VT_ACTIVATE(r4, 0x5606, 0x8)
getsockopt$inet_tcp_buf(r4, 0x6, 0xb, &(0x7f00000001c0)=""/141, &(0x7f0000000280)=0x8d)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x21020000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x28, r6, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}}, 0x80)
r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0)
fcntl$setlease(r7, 0x400, 0x0)
ftruncate(r7, 0x2007fff)
sendfile(r4, r7, 0x0, 0x8000fffffffe)
write$eventfd(r2, &(0x7f0000000080), 0xfffffe5e)
ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f0000000580)=&(0x7f0000000540))

[ 1105.481448][T10217] binder_alloc: binder_alloc_mmap_handler: 10209 20004000-20007000 already mapped failed -16
[ 1105.558111][T10217] binder_alloc: 10209: binder_alloc_buf, no vma
[ 1105.591280][T10228] binder: BINDER_SET_CONTEXT_MGR already set
19:21:13 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2={0xff, 0x2, [0x40030000000000]}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:21:13 executing program 5:
r0 = socket$kcm(0xa, 0x2, 0x73)
sendmmsg(r0, &(0x7f0000003ec0)=[{{&(0x7f0000000440)=@ethernet={0x306, @random="d2294ab84906"}, 0x80, 0x0}}], 0x1, 0x8000)

[ 1105.637171][T10228] binder: 10209:10228 ioctl 40046207 0 returned -16
19:21:13 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x4c]}}], 0x0, 0x0, &(0x7f0000000300)})

[ 1105.824007][T10242] binder_alloc: binder_alloc_mmap_handler: 10240 20004000-20007000 already mapped failed -16
[ 1105.845525][T10241] binder: BINDER_SET_CONTEXT_MGR already set
[ 1105.859099][T10242] binder_alloc: 10240: binder_alloc_buf, no vma
[ 1105.866226][T10241] binder: 10240:10241 ioctl 40046207 0 returned -16
19:21:14 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20)
r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2)
r3 = memfd_create(&(0x7f0000000000)='/dev/vbi#\x00', 0x4)
ftruncate(r3, 0x1000000)
setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, &(0x7f0000000180)=[0x3, 0x4], 0x2)
setsockopt$inet_dccp_int(r2, 0x21, 0x13, &(0x7f0000000100)=0x800, 0x4)
write$P9_RWRITE(r0, &(0x7f0000000080)={0xb, 0x77, 0x1, 0x1}, 0xb)
sendfile(r2, r3, &(0x7f00000000c0)=0xf10002, 0xeffffdef)
close(r2)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
setsockopt$inet6_opts(r2, 0x29, 0x3f, &(0x7f0000000340)=@routing={0x62, 0x12, 0x3, 0x4, 0x0, [@loopback, @remote, @loopback, @remote, @empty, @mcast2, @mcast2, @mcast1, @remote]}, 0x98)
ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, 0x0)
setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000040)=0x7, 0x2)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @multicast1}}, 0x7ff, 0x7ff}, 0x0)

19:21:14 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x40, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff}, 0x3a1)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00')
ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x8)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000340)='fou\x00')
sendmsg$FOU_CMD_GET(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r2, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x2c}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e21}, @FOU_ATTR_AF={0x8, 0x2, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40004)
ioctl$KVM_S390_UCAS_UNMAP(r1, 0x4018ae51, &(0x7f0000000080)={0x9d, 0x2, 0xfd22})
ioctl$KVM_DIRTY_TLB(r1, 0x400caeaa, &(0x7f00000002c0))
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_getrule={0x20, 0x12, 0x201, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x20}}, 0x0)
ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000300)=r1)

19:21:14 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x60]}}], 0x0, 0x0, &(0x7f0000000300)})

19:21:14 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2={0xff, 0x2, [0x100000000000000]}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:21:14 executing program 4:
syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0)
r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000005600)=[{{&(0x7f00000005c0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}, 0xed6e}, {{&(0x7f0000000d00)=@nfc, 0x80, &(0x7f0000000e80)=[{0x0}, {&(0x7f0000000dc0)=""/180, 0xb4}, {&(0x7f0000004f40)=""/123, 0x7b}], 0x3}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x7}], 0x3, 0x40000000, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0)
lsetxattr$security_smack_transmute(0x0, &(0x7f00000003c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0xfffffffffffffff2)
setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/autofs\x00', 0x0, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
unshare(0x0)
times(&(0x7f00000000c0))
socketpair$unix(0x1, 0x0, 0x0, 0x0)
unlink(&(0x7f0000000080)='./file0\x00')
r1 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc0605345, &(0x7f0000000000))

19:21:14 executing program 3:
r0 = syz_open_dev$usbmon(&(0x7f00000005c0)='/dev/usbmon#\x00', 0xcd, 0x2000)
ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000600)=0x80000001)
r1 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000100)={'ipvs\x00'}, 0x0)
r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
r4 = dup(r3)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r3)
setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f00000003c0)=0x7f, 0x4)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1)
r5 = dup(0xffffffffffffffff)
pread64(r2, &(0x7f0000000300)=""/14, 0xe, 0x0)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r5)
fsetxattr$trusted_overlay_redirect(r5, &(0x7f0000000340)='trusted.overlay.redirect\x00', &(0x7f0000000480)='./bus\x00', 0x6, 0x3)
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r4)
rename(&(0x7f0000000000)='./bus\x00', &(0x7f0000000140)='./bus\x00')
ioctl$VT_ACTIVATE(r4, 0x5606, 0x8)
getsockopt$inet_tcp_buf(r4, 0x6, 0xb, &(0x7f00000001c0)=""/141, &(0x7f0000000280)=0x8d)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x21020000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x28, r6, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}}, 0x80)
r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0)
fcntl$setlease(r7, 0x400, 0x0)
ftruncate(r7, 0x2007fff)
sendfile(r4, r7, 0x0, 0x8000fffffffe)
write$eventfd(r2, &(0x7f0000000080), 0xfffffe5e)
ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f0000000580)=&(0x7f0000000540))

[ 1106.275303][T10254] binder_transaction: 1 callbacks suppressed
[ 1106.275318][T10254] binder: 10248:10254 got transaction with invalid offset (96, min 0 max 0) or object.
19:21:14 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2={0xff, 0x2, [0x200000000000000]}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1106.319904][T10261] binder_alloc: binder_alloc_mmap_handler: 10248 20004000-20007000 already mapped failed -16
[ 1106.348697][T10254] binder: BINDER_SET_CONTEXT_MGR already set
19:21:14 executing program 5:
r0 = syz_open_dev$usbmon(&(0x7f00000005c0)='/dev/usbmon#\x00', 0xcd, 0x2000)
ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000600)=0x80000001)
r1 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000100)={'ipvs\x00'}, 0x0)
r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
r4 = dup(r3)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r3)
setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f00000003c0)=0x7f, 0x4)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1)
r5 = dup(0xffffffffffffffff)
pread64(r2, &(0x7f0000000300)=""/14, 0xe, 0x0)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r5)
fsetxattr$trusted_overlay_redirect(r5, &(0x7f0000000340)='trusted.overlay.redirect\x00', &(0x7f0000000480)='./bus\x00', 0x6, 0x3)
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r4)
rename(&(0x7f0000000000)='./bus\x00', &(0x7f0000000140)='./bus\x00')
ioctl$VT_ACTIVATE(r4, 0x5606, 0x8)
getsockopt$inet_tcp_buf(r4, 0x6, 0xb, &(0x7f00000001c0)=""/141, &(0x7f0000000280)=0x8d)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x21020000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x28, r6, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}}, 0x80)
r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0)
fcntl$setlease(r7, 0x400, 0x0)
ftruncate(r7, 0x2007fff)
sendfile(r4, r7, 0x0, 0x8000fffffffe)
write$eventfd(r2, &(0x7f0000000080), 0xfffffe5e)
ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f0000000580)=&(0x7f0000000540))

[ 1106.367216][T10254] binder: 10248:10254 ioctl 40046207 0 returned -16
[ 1106.382707][T10261] binder_alloc: 10248: binder_alloc_buf, no vma
19:21:14 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2={0xff, 0x2, [0x400000000000000]}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:21:14 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x68]}}], 0x0, 0x0, &(0x7f0000000300)})

19:21:14 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2={0xff, 0x2, [0x80ffffff00000000]}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1106.570229][T10275] binder: 10274:10275 got transaction with invalid offset (104, min 0 max 0) or object.
19:21:14 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2={0xff, 0x2, [0xffffff7f00000000]}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1106.646149][T10278] binder_alloc: binder_alloc_mmap_handler: 10274 20004000-20007000 already mapped failed -16
[ 1106.681412][T10275] binder: BINDER_SET_CONTEXT_MGR already set
[ 1106.687507][T10275] binder: 10274:10275 ioctl 40046207 0 returned -16
19:21:14 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20)
r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2)
r3 = memfd_create(&(0x7f0000000000)='/dev/vbi#\x00', 0x4)
ftruncate(r3, 0x1000000)
setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, &(0x7f0000000180)=[0x3, 0x4], 0x2)
setsockopt$inet_dccp_int(r2, 0x21, 0x13, &(0x7f0000000100)=0x800, 0x4)
write$P9_RWRITE(r0, &(0x7f0000000080)={0xb, 0x77, 0x1, 0x1}, 0xb)
sendfile(r2, r3, &(0x7f00000000c0)=0xf10002, 0xeffffdef)
close(r2)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
setsockopt$inet6_opts(r2, 0x29, 0x3f, &(0x7f0000000340)=@routing={0x62, 0x12, 0x3, 0x4, 0x0, [@loopback, @remote, @loopback, @remote, @empty, @mcast2, @mcast2, @mcast1, @remote]}, 0x98)
ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, 0x0)
setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000040)=0x7, 0x2)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @multicast1}}, 0x7ff, 0x7ff}, 0x0)

19:21:14 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x6c]}}], 0x0, 0x0, &(0x7f0000000300)})

19:21:14 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2={0xff, 0x2, [0xffffffff00000000]}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1107.028474][T10288] binder: 10286:10288 got transaction with invalid offset (108, min 0 max 0) or object.
[ 1107.056237][T10292] binder_alloc: binder_alloc_mmap_handler: 10286 20004000-20007000 already mapped failed -16
[ 1107.106434][T10288] binder: BINDER_SET_CONTEXT_MGR already set
[ 1107.113518][T10288] binder: 10286:10288 ioctl 40046207 0 returned -16
[ 1107.122836][T10294] binder_alloc: 10286: binder_alloc_buf, no vma
19:21:15 executing program 4:
r0 = semget(0x2, 0x4, 0x80)
semctl$SETVAL(r0, 0x0, 0x10, &(0x7f0000000040)=0x322d)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000000)={0x2, 'hsr0\x00'}, 0x18)

19:21:15 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2={0xff, 0x2, [0x0, 0x2]}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:21:15 executing program 3:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2={0xff, 0x2, [0xffffff7f00000000]}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:21:15 executing program 5:
r0 = syz_open_dev$usbmon(&(0x7f00000005c0)='/dev/usbmon#\x00', 0xcd, 0x2000)
ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000600)=0x80000001)
r1 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000100)={'ipvs\x00'}, 0x0)
r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
r4 = dup(r3)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r3)
setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f00000003c0)=0x7f, 0x4)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1)
r5 = dup(0xffffffffffffffff)
pread64(r2, &(0x7f0000000300)=""/14, 0xe, 0x0)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r5)
fsetxattr$trusted_overlay_redirect(r5, &(0x7f0000000340)='trusted.overlay.redirect\x00', &(0x7f0000000480)='./bus\x00', 0x6, 0x3)
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r4)
rename(&(0x7f0000000000)='./bus\x00', &(0x7f0000000140)='./bus\x00')
ioctl$VT_ACTIVATE(r4, 0x5606, 0x8)
getsockopt$inet_tcp_buf(r4, 0x6, 0xb, &(0x7f00000001c0)=""/141, &(0x7f0000000280)=0x8d)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x21020000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x28, r6, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}}, 0x80)
r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0)
fcntl$setlease(r7, 0x400, 0x0)
ftruncate(r7, 0x2007fff)
sendfile(r4, r7, 0x0, 0x8000fffffffe)
write$eventfd(r2, &(0x7f0000000080), 0xfffffe5e)
ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f0000000580)=&(0x7f0000000540))

19:21:15 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x74]}}], 0x0, 0x0, &(0x7f0000000300)})

[ 1107.344981][T10307] binder: 10304:10307 got transaction with invalid offset (116, min 0 max 0) or object.
[ 1107.360192][T10307] binder: BINDER_SET_CONTEXT_MGR already set
[ 1107.373855][T10308] binder_alloc: 10304: binder_alloc_buf, no vma
19:21:15 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2={0xff, 0x2, [0x0, 0x4]}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:21:15 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$pppoe(0x18, 0x1, 0x0)
close(r0)
write$binfmt_misc(r0, &(0x7f0000000000)={'syz0', "90d6fa1cdcad8b4f174a161a2d0121423b57703f238711712e0acc054b604e17ca93c7b4881152dc419cb940cd5e893258d944ec1a3c9cc7c3d4f157c256d79c865170040db4965cb19fde3b56d2d2e3a3d80a6f5bcd4f373faf4fae3a64e1427f8cd13d71e4a24ad7bc89753e21989beb5dcbadb39c3e09adf8afe2ab8d448361d109ba7e5777e6fee0a25b8d7e6b8eaa91e05dc71923dc8abe5613c6a91d"}, 0xa3)

[ 1107.393170][T10307] binder: 10304:10307 ioctl 40046207 0 returned -16
19:21:15 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x7a]}}], 0x0, 0x0, &(0x7f0000000300)})

19:21:15 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x40, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa0000000000400003000001000000000000002560b700ff"])
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x485}]})
syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xdc7, 0x290800)

[ 1107.531515][T10319] binder: 10318:10319 got transaction with invalid offset (122, min 0 max 0) or object.
[ 1107.586863][T10322] binder: BINDER_SET_CONTEXT_MGR already set
[ 1107.611238][T10322] binder: 10318:10322 ioctl 40046207 0 returned -16
19:21:15 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20)
r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2)
r3 = memfd_create(&(0x7f0000000000)='/dev/vbi#\x00', 0x4)
ftruncate(r3, 0x1000000)
setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, &(0x7f0000000180)=[0x3, 0x4], 0x2)
setsockopt$inet_dccp_int(r2, 0x21, 0x13, &(0x7f0000000100)=0x800, 0x4)
write$P9_RWRITE(r0, &(0x7f0000000080)={0xb, 0x77, 0x1, 0x1}, 0xb)
sendfile(r2, r3, &(0x7f00000000c0)=0xf10002, 0xeffffdef)
close(r2)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
setsockopt$inet6_opts(r2, 0x29, 0x3f, &(0x7f0000000340)=@routing={0x62, 0x12, 0x3, 0x4, 0x0, [@loopback, @remote, @loopback, @remote, @empty, @mcast2, @mcast2, @mcast1, @remote]}, 0x98)
ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, 0x0)
setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000040)=0x7, 0x2)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @multicast1}}, 0x7ff, 0x7ff}, 0x0)

19:21:15 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2={0xff, 0x2, [0x0, 0x34000]}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:21:15 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x300]}}], 0x0, 0x0, &(0x7f0000000300)})

[ 1107.921460][T10334] binder: 10333:10334 got transaction with invalid offset (768, min 0 max 0) or object.
[ 1107.972397][T10334] binder_transaction: 13 callbacks suppressed
[ 1107.972416][T10334] binder: 10333:10334 transaction failed 29201/-22, size 0-12288 line 3241
[ 1107.999141][T10340] binder_alloc_mmap_handler: 2 callbacks suppressed
[ 1107.999159][T10340] binder_alloc: binder_alloc_mmap_handler: 10333 20004000-20007000 already mapped failed -16
19:21:15 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f00000000c0)={0xf, 0xf64, 0x8000})
r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x400, 0x4100)
ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000)
madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8000000000000009)

19:21:15 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x201, 0x4)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='veno\x00', 0x5)
flistxattr(r1, &(0x7f0000000040)=""/24, 0x18)
sendto$inet6(r1, &(0x7f0000000280), 0x0, 0x20000004, 0x0, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000340), 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000))
ptrace$setopts(0x4200, r2, 0x6398f609, 0x8)
tkill(r2, 0x401104000000016)
eventfd(0x9)

19:21:15 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2={0xff, 0x2, [0x0, 0x400300]}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:21:15 executing program 5:
r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20)
r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2)
r3 = memfd_create(&(0x7f0000000000)='/dev/vbi#\x00', 0x4)
ftruncate(r3, 0x1000000)
setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, &(0x7f0000000180)=[0x3, 0x4], 0x2)
setsockopt$inet_dccp_int(r2, 0x21, 0x13, &(0x7f0000000100)=0x800, 0x4)
write$P9_RWRITE(r0, &(0x7f0000000080)={0xb, 0x77, 0x1, 0x1}, 0xb)
sendfile(r2, r3, &(0x7f00000000c0)=0xf10002, 0xeffffdef)
close(r2)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
setsockopt$inet6_opts(r2, 0x29, 0x3f, &(0x7f0000000340)=@routing={0x62, 0x12, 0x3, 0x4, 0x0, [@loopback, @remote, @loopback, @remote, @empty, @mcast2, @mcast2, @mcast1, @remote]}, 0x98)
ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, 0x0)
setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000040)=0x7, 0x2)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @multicast1}}, 0x7ff, 0x7ff}, 0x0)

[ 1108.028942][T10334] binder: BINDER_SET_CONTEXT_MGR already set
[ 1108.035517][T10340] binder_alloc_new_buf_locked: 1 callbacks suppressed
[ 1108.035527][T10340] binder_alloc: 10333: binder_alloc_buf, no vma
[ 1108.068717][T10340] binder: 10333:10340 transaction failed 29189/-3, size 0-12288 line 3147
[ 1108.079994][T10334] binder: 10333:10334 ioctl 40046207 0 returned -16
[ 1108.117436][   T17] binder_release_work: 13 callbacks suppressed
[ 1108.117444][   T17] binder: undelivered TRANSACTION_ERROR: 29201
19:21:16 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2={0xff, 0x2, [0x0, 0x1000000]}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1108.137632][   T17] binder: undelivered TRANSACTION_ERROR: 29189
19:21:16 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x7b, 0x0, [0xc0000101]})

19:21:16 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x500]}}], 0x0, 0x0, &(0x7f0000000300)})

19:21:16 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2={0xff, 0x2, [0x0, 0x2000000]}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1108.329751][T10362] binder: 10361:10362 got transaction with invalid offset (1280, min 0 max 0) or object.
[ 1108.346907][T10362] binder: 10361:10362 transaction failed 29201/-22, size 0-12288 line 3241
[ 1108.358678][T10365] binder_alloc: binder_alloc_mmap_handler: 10361 20004000-20007000 already mapped failed -16
19:21:16 executing program 3:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
listen(r0, 0x0)
r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000080)=0x1c, 0x80800)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xffff, @empty, 0x2}, 0x1c)
setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000), 0x4)

[ 1108.378729][T10365] binder: BINDER_SET_CONTEXT_MGR already set
[ 1108.390012][T10365] binder: 10361:10365 ioctl 40046207 0 returned -16
[ 1108.425139][T10368] binder_alloc: 10361: binder_alloc_buf, no vma
[ 1108.427531][   T17] binder: undelivered TRANSACTION_ERROR: 29201
[ 1108.467571][T10368] binder: 10361:10368 transaction failed 29189/-3, size 0-12288 line 3147
[ 1108.476714][   T17] binder: undelivered TRANSACTION_ERROR: 29189
19:21:16 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20)
r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2)
r3 = memfd_create(&(0x7f0000000000)='/dev/vbi#\x00', 0x4)
ftruncate(r3, 0x1000000)
setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, &(0x7f0000000180)=[0x3, 0x4], 0x2)
setsockopt$inet_dccp_int(r2, 0x21, 0x13, &(0x7f0000000100)=0x800, 0x4)
write$P9_RWRITE(r0, &(0x7f0000000080)={0xb, 0x77, 0x1, 0x1}, 0xb)
sendfile(r2, r3, &(0x7f00000000c0)=0xf10002, 0xeffffdef)
close(r2)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
setsockopt$inet6_opts(r2, 0x29, 0x3f, &(0x7f0000000340)=@routing={0x62, 0x12, 0x3, 0x4, 0x0, [@loopback, @remote, @loopback, @remote, @empty, @mcast2, @mcast2, @mcast1, @remote]}, 0x98)
ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, 0x0)
setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000040)=0x7, 0x2)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080))

19:21:16 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2={0xff, 0x2, [0x0, 0x4000000]}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:21:16 executing program 3:
r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000080)=0x3)

19:21:16 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x600]}}], 0x0, 0x0, &(0x7f0000000300)})

19:21:16 executing program 4:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x24, 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x210003, 0x41)

[ 1108.741884][T10382] binder: 10381:10382 got transaction with invalid offset (1536, min 0 max 0) or object.
[ 1108.770703][    C0] net_ratelimit: 19 callbacks suppressed
[ 1108.770713][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1108.782979][    C0] protocol 88fb is buggy, dev hsr_slave_1
19:21:16 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x0, [0x0, 0x0, 0x10]})

[ 1108.784436][T10382] binder: 10381:10382 transaction failed 29201/-22, size 0-12288 line 3241
[ 1108.824867][T10386] binder_alloc: binder_alloc_mmap_handler: 10381 20004000-20007000 already mapped failed -16
[ 1108.911703][T10386] binder_alloc: 10381: binder_alloc_buf, no vma
[ 1108.911723][T10393] binder: BINDER_SET_CONTEXT_MGR already set
[ 1108.925398][T10386] binder: 10381:10386 transaction failed 29189/-3, size 0-12288 line 3147
19:21:16 executing program 5:
r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20)
r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2)
r3 = memfd_create(&(0x7f0000000000)='/dev/vbi#\x00', 0x4)
ftruncate(r3, 0x1000000)
setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, &(0x7f0000000180)=[0x3, 0x4], 0x2)
setsockopt$inet_dccp_int(r2, 0x21, 0x13, &(0x7f0000000100)=0x800, 0x4)
write$P9_RWRITE(r0, &(0x7f0000000080)={0xb, 0x77, 0x1, 0x1}, 0xb)
sendfile(r2, r3, &(0x7f00000000c0)=0xf10002, 0xeffffdef)
close(r2)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
setsockopt$inet6_opts(r2, 0x29, 0x3f, &(0x7f0000000340)=@routing={0x62, 0x12, 0x3, 0x4, 0x0, [@loopback, @remote, @loopback, @remote, @empty, @mcast2, @mcast2, @mcast1, @remote]}, 0x98)
ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, 0x0)
setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000040)=0x7, 0x2)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @multicast1}}, 0x7ff, 0x7ff}, 0x0)

19:21:16 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2={0xff, 0x2, [0x0, 0x80ffffff]}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:21:16 executing program 3:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:getty_var_run_t:s0\x00', 0xfffffffffffffd7b, 0x1)
stat(0x0, 0x0)
poll(&(0x7f0000000080)=[{r0, 0x109}, {r0, 0x30}, {r0, 0x5004}, {r0, 0x200}], 0x4, 0x95)
r1 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
r2 = socket$kcm(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcc, 0xe4, 0x8, {"9b9620c14c72c1afe12dc5c8c9a409fa69383495c146b982bebd5ead1e30b56d8ac843156fad50d722a3ea69f381ff00cea18cf135ab8499bb7a290eb122fdfdb4011a2af45cd124e5af8e69e88233f4e07446741067909ba7722170887c2b1a1b8e2f86193a3ed0460c1f243ab139269ea3d9a8a6b47333afc7671cf7ddda13d39d3d55f3b623ceee84096d01f7ddada728da8708c0c10adb639bf33f0d5388c4f342faada71ac7c0abe00a52dc9dc32f4239abea6369a5d8d4ea0734f5b088cb638ada6f478539468655"}}, {0x0, "a044340ff5eefd1b20014683cc256af6ecda6085febbb26e85d271e9fba92e8ab5845a6fceadee"}}, &(0x7f00000001c0)=""/33, 0x10d, 0x21}, 0x20)
bind$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, {0x3ff, 0x8001, 0x3f, 0x4, 0xb, 0x40}, 0x10001}, 0xa)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="2e0000001e008109e00f80ecdb4cb92e0a48240b5a44fe0be8bd6efb080008000100000001000000060005001200", 0x2e}], 0x1}, 0x0)
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000340))
syz_emit_ethernet(0x300b00, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300030, 0x3a, 0xf0ffff, @ipv4={[0x2, 0x2, 0x543, 0x0, 0x60], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff88, 0x0, 0x0, 0x0, [0x7, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0)

[ 1108.975596][T10393] binder: 10381:10393 ioctl 40046207 0 returned -16
[ 1108.975646][   T17] binder: undelivered TRANSACTION_ERROR: 29201
19:21:16 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x700]}}], 0x0, 0x0, &(0x7f0000000300)})

[ 1109.025839][   T17] binder: undelivered TRANSACTION_ERROR: 29189
[ 1109.051796][T10401] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.3'.
19:21:17 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2={0xff, 0x2, [0x0, 0xffffff7f]}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1109.145027][T10406] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1109.167189][T10408] binder: 10407:10408 got transaction with invalid offset (1792, min 0 max 0) or object.
[ 1109.178942][T10408] binder: 10407:10408 transaction failed 29201/-22, size 0-12288 line 3241
19:21:17 executing program 3:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:getty_var_run_t:s0\x00', 0xfffffffffffffd7b, 0x1)
stat(0x0, 0x0)
poll(&(0x7f0000000080)=[{r0, 0x109}, {r0, 0x30}, {r0, 0x5004}, {r0, 0x200}], 0x4, 0x95)
r1 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
r2 = socket$kcm(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcc, 0xe4, 0x8, {"9b9620c14c72c1afe12dc5c8c9a409fa69383495c146b982bebd5ead1e30b56d8ac843156fad50d722a3ea69f381ff00cea18cf135ab8499bb7a290eb122fdfdb4011a2af45cd124e5af8e69e88233f4e07446741067909ba7722170887c2b1a1b8e2f86193a3ed0460c1f243ab139269ea3d9a8a6b47333afc7671cf7ddda13d39d3d55f3b623ceee84096d01f7ddada728da8708c0c10adb639bf33f0d5388c4f342faada71ac7c0abe00a52dc9dc32f4239abea6369a5d8d4ea0734f5b088cb638ada6f478539468655"}}, {0x0, "a044340ff5eefd1b20014683cc256af6ecda6085febbb26e85d271e9fba92e8ab5845a6fceadee"}}, &(0x7f00000001c0)=""/33, 0x10d, 0x21}, 0x20)
bind$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, {0x3ff, 0x8001, 0x3f, 0x4, 0xb, 0x40}, 0x10001}, 0xa)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="2e0000001e008109e00f80ecdb4cb92e0a48240b5a44fe0be8bd6efb080008000100000001000000060005001200", 0x2e}], 0x1}, 0x0)
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000340))
syz_emit_ethernet(0x300b00, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300030, 0x3a, 0xf0ffff, @ipv4={[0x2, 0x2, 0x543, 0x0, 0x60], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff88, 0x0, 0x0, 0x0, [0x7, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0)

[ 1109.210469][T10413] binder_alloc: binder_alloc_mmap_handler: 10407 20004000-20007000 already mapped failed -16
[ 1109.221792][T10408] binder: BINDER_SET_CONTEXT_MGR already set
[ 1109.233651][T10408] binder: 10407:10408 ioctl 40046207 0 returned -16
[ 1109.240753][T10413] binder_alloc: 10407: binder_alloc_buf, no vma
[ 1109.247875][T10413] binder: 10407:10413 transaction failed 29189/-3, size 0-12288 line 3147
[ 1109.269811][T29136] binder: undelivered TRANSACTION_ERROR: 29201
[ 1109.278900][T29136] binder: undelivered TRANSACTION_ERROR: 29189
[ 1109.323335][T10416] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1109.410718][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1109.416665][    C1] protocol 88fb is buggy, dev hsr_slave_1
19:21:17 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20)
r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2)
r3 = memfd_create(&(0x7f0000000000)='/dev/vbi#\x00', 0x4)
ftruncate(r3, 0x1000000)
setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, &(0x7f0000000180)=[0x3, 0x4], 0x2)
setsockopt$inet_dccp_int(r2, 0x21, 0x13, &(0x7f0000000100)=0x800, 0x4)
write$P9_RWRITE(r0, &(0x7f0000000080)={0xb, 0x77, 0x1, 0x1}, 0xb)
sendfile(r2, r3, &(0x7f00000000c0)=0xf10002, 0xeffffdef)
close(r2)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
setsockopt$inet6_opts(r2, 0x29, 0x3f, &(0x7f0000000340)=@routing={0x62, 0x12, 0x3, 0x4, 0x0, [@loopback, @remote, @loopback, @remote, @empty, @mcast2, @mcast2, @mcast1, @remote]}, 0x98)
ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, 0x0)
setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000040)=0x7, 0x2)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080))

19:21:17 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2={0xff, 0x2, [0x0, 0xffffff80]}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:21:17 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0xa00]}}], 0x0, 0x0, &(0x7f0000000300)})

19:21:17 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:getty_var_run_t:s0\x00', 0xfffffffffffffd7b, 0x1)
stat(0x0, 0x0)
poll(&(0x7f0000000080)=[{r0, 0x109}, {r0, 0x30}, {r0, 0x5004}, {r0, 0x200}], 0x4, 0x95)
r1 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
r2 = socket$kcm(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcc, 0xe4, 0x8, {"9b9620c14c72c1afe12dc5c8c9a409fa69383495c146b982bebd5ead1e30b56d8ac843156fad50d722a3ea69f381ff00cea18cf135ab8499bb7a290eb122fdfdb4011a2af45cd124e5af8e69e88233f4e07446741067909ba7722170887c2b1a1b8e2f86193a3ed0460c1f243ab139269ea3d9a8a6b47333afc7671cf7ddda13d39d3d55f3b623ceee84096d01f7ddada728da8708c0c10adb639bf33f0d5388c4f342faada71ac7c0abe00a52dc9dc32f4239abea6369a5d8d4ea0734f5b088cb638ada6f478539468655"}}, {0x0, "a044340ff5eefd1b20014683cc256af6ecda6085febbb26e85d271e9fba92e8ab5845a6fceadee"}}, &(0x7f00000001c0)=""/33, 0x10d, 0x21}, 0x20)
bind$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, {0x3ff, 0x8001, 0x3f, 0x4, 0xb, 0x40}, 0x10001}, 0xa)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="2e0000001e008109e00f80ecdb4cb92e0a48240b5a44fe0be8bd6efb080008000100000001000000060005001200", 0x2e}], 0x1}, 0x0)
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000340))
syz_emit_ethernet(0x300b00, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300030, 0x3a, 0xf0ffff, @ipv4={[0x2, 0x2, 0x543, 0x0, 0x60], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff88, 0x0, 0x0, 0x0, [0x7, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0)

19:21:17 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2)
ioctl$RTC_WIE_OFF(r1, 0x7010)
ioctl$int_in(r0, 0x5474, 0x0)
ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f00000000c0)=0xd99)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000000)={0x0, 0x2000000})

[ 1109.671117][T10422] binder: 10421:10422 got transaction with invalid offset (2560, min 0 max 0) or object.
[ 1109.708715][T10422] binder: 10421:10422 transaction failed 29201/-22, size 0-12288 line 3241
19:21:17 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2={0xff, 0x2, [0x0, 0x40030000000000]}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1109.731927][T10431] binder_alloc: binder_alloc_mmap_handler: 10421 20004000-20007000 already mapped failed -16
[ 1109.752911][T10422] binder: BINDER_SET_CONTEXT_MGR already set
[ 1109.760236][T10431] binder_alloc: 10421: binder_alloc_buf, no vma
[ 1109.784476][T10422] binder: 10421:10422 ioctl 40046207 0 returned -16
[ 1109.805856][T29136] binder: undelivered TRANSACTION_ERROR: 29201
[ 1109.807618][T10431] binder: 10421:10431 transaction failed 29189/-3, size 0-12288 line 3147
[ 1109.824831][   T17] binder: undelivered TRANSACTION_ERROR: 29189
19:21:17 executing program 5:
r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20)
r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2)
r3 = memfd_create(&(0x7f0000000000)='/dev/vbi#\x00', 0x4)
ftruncate(r3, 0x1000000)
setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, &(0x7f0000000180)=[0x3, 0x4], 0x2)
setsockopt$inet_dccp_int(r2, 0x21, 0x13, &(0x7f0000000100)=0x800, 0x4)
write$P9_RWRITE(r0, &(0x7f0000000080)={0xb, 0x77, 0x1, 0x1}, 0xb)
sendfile(r2, r3, &(0x7f00000000c0)=0xf10002, 0xeffffdef)
close(r2)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
setsockopt$inet6_opts(r2, 0x29, 0x3f, &(0x7f0000000340)=@routing={0x62, 0x12, 0x3, 0x4, 0x0, [@loopback, @remote, @loopback, @remote, @empty, @mcast2, @mcast2, @mcast1, @remote]}, 0x98)
ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, 0x0)
setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000040)=0x7, 0x2)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @multicast1}}, 0x7ff, 0x7ff}, 0x0)

19:21:17 executing program 3:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0)
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4000)
chdir(&(0x7f00000001c0)='./file0\x00')
openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
ftruncate(r2, 0x208200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, &(0x7f0000000740))
getegid()
modify_ldt$read_default(0x2, &(0x7f0000000140)=""/54, 0x36)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000007c0))
getpid()
getuid()
prctl$PR_SET_KEEPCAPS(0x8, 0x0)
open(&(0x7f0000000780)='./bus\x00', 0x1d18, 0x9)

19:21:17 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2={0xff, 0x2, [0x0, 0x100000000000000]}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:21:17 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x1200]}}], 0x0, 0x0, &(0x7f0000000300)})

[ 1109.890727][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1109.891279][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1109.896677][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1109.902882][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1109.920013][T10439] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1109.970721][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1109.976560][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1109.978516][T10446] binder_alloc: binder_alloc_mmap_handler: 10442 20004000-20007000 already mapped failed -16
19:21:17 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2={0xff, 0x2, [0x0, 0x200000000000000]}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1110.005524][   T27] audit: type=1804 audit(1553541677.894:48): pid=10444 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/newroot/1705/file0/bus" dev="ramfs" ino=165080 res=1
[ 1110.070924][T10446] binder_alloc: 10442: binder_alloc_buf, no vma
[ 1110.071740][T10445] binder: BINDER_SET_CONTEXT_MGR already set
19:21:18 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2={0xff, 0x2, [0x0, 0x400000000000000]}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1110.160542][T10445] binder: 10442:10445 ioctl 40046207 0 returned -16
19:21:18 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20)
r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2)
r3 = memfd_create(&(0x7f0000000000)='/dev/vbi#\x00', 0x4)
ftruncate(r3, 0x1000000)
setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, &(0x7f0000000180)=[0x3, 0x4], 0x2)
setsockopt$inet_dccp_int(r2, 0x21, 0x13, &(0x7f0000000100)=0x800, 0x4)
write$P9_RWRITE(r0, &(0x7f0000000080)={0xb, 0x77, 0x1, 0x1}, 0xb)
sendfile(r2, r3, &(0x7f00000000c0)=0xf10002, 0xeffffdef)
close(r2)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
setsockopt$inet6_opts(r2, 0x29, 0x3f, &(0x7f0000000340)=@routing={0x62, 0x12, 0x3, 0x4, 0x0, [@loopback, @remote, @loopback, @remote, @empty, @mcast2, @mcast2, @mcast1, @remote]}, 0x98)
ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, 0x0)
setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000040)=0x7, 0x2)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080))

19:21:18 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2={0xff, 0x2, [0x0, 0x80ffffff00000000]}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:21:18 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x2000]}}], 0x0, 0x0, &(0x7f0000000300)})

19:21:18 executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/softnet_stat\x00')
close(r0)
ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000000000)={0x1})

19:21:18 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2={0xff, 0x2, [0x0, 0xffffff7f00000000]}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1110.568309][T10463] binder_alloc: binder_alloc_mmap_handler: 10460 20004000-20007000 already mapped failed -16
19:21:18 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x2000000088)
setsockopt$inet_int(r0, 0x0, 0x2000000017, &(0x7f0000000040)=0x80000000, 0x21)
bind(r0, &(0x7f0000000080)=@in6={0xa, 0x4e23, 0x8, @remote, 0x7fffffff}, 0x80)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x18004e20}, 0x10)
recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

[ 1110.624142][T10461] binder: BINDER_SET_CONTEXT_MGR already set
[ 1110.630248][T10461] binder: 10460:10461 ioctl 40046207 0 returned -16
[ 1110.687014][T10473] binder_alloc: 10460: binder_alloc_buf, no vma
19:21:18 executing program 5:

19:21:18 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2={0xff, 0x2, [0x0, 0xffffffff00000000]}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:21:18 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x2ff8]}}], 0x0, 0x0, &(0x7f0000000300)})

19:21:18 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x4002, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40246608, &(0x7f0000000000)={0x1206, 0x2, 0x8, 0x80000001, 0x1800000000000, 0x9})
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x4d)

[ 1110.870114][T10485] ------------[ cut here ]------------
[ 1110.875648][T10485] kernel BUG at drivers/android/binder_alloc.c:1141!
[ 1110.917372][T10485] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[ 1110.923490][T10485] CPU: 1 PID: 10485 Comm: syz-executor.0 Not tainted 5.1.0-rc2 #36
[ 1110.931409][T10485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1110.942322][T10485] RIP: 0010:binder_alloc_do_buffer_copy+0xd6/0x510
19:21:18 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x2]}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

19:21:18 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x6}]}, 0x10)
r2 = dup(r0)
getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000240), &(0x7f0000000280)=0xc)
r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080)='NET_DM\x00')
sendmsg$NET_DM_CMD_STOP(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r3, 0x400, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x48001)
r4 = fcntl$dupfd(r0, 0x0, r1)
write$binfmt_aout(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000000000200000000000f0000000000000000000000000e1ff6056dd38b1"], 0xfdef)

[ 1110.948842][T10485] Code: 02 00 0f 85 20 04 00 00 4d 8b 64 24 58 49 29 dc e8 bf f9 23 fc 4c 89 e6 4c 89 ef e8 d4 fa 23 fc 4d 39 e5 76 07 e8 aa f9 23 fc <0f> 0b e8 a3 f9 23 fc 4c 8b 75 d0 4d 29 ec 4c 89 e6 4c 89 f7 e8 b1
[ 1110.960999][ T3877] kobject: 'loop4' (00000000868fc9e8): kobject_uevent_env
[ 1110.968471][T10485] RSP: 0018:ffff88805e6976d8 EFLAGS: 00010212
[ 1110.976983][ T3877] kobject: 'loop4' (00000000868fc9e8): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 1110.981661][T10485] RAX: 0000000000040000 RBX: 0000000020004000 RCX: ffffc90005df3000
[ 1110.981670][T10485] RDX: 0000000000000803 RSI: ffffffff854c77d6 RDI: 0000000000000006
[ 1110.981677][T10485] RBP: ffff88805e697758 R08: ffff88805ee60040 R09: 0000000000000028
[ 1110.981684][T10485] R10: ffffed100bcd2f32 R11: ffff88805e697997 R12: 0000000000002fd8
[ 1110.981692][T10485] R13: 0000000000000028 R14: 0000000000002ff8 R15: 0000000000000000
[ 1110.981704][T10485] FS:  0000000000000000(0000) GS:ffff8880ae900000(0063) knlGS:00000000f5d72b40
[ 1110.981713][T10485] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[ 1110.981721][T10485] CR2: 00007fb9cf20d000 CR3: 00000000390e7000 CR4: 00000000001426e0
[ 1110.981730][T10485] Call Trace:
[ 1110.981754][T10485]  ? memcpy+0x46/0x50
[ 1110.981774][T10485]  binder_alloc_copy_from_buffer+0x37/0x42
[ 1110.981796][T10485]  binder_get_object+0xc3/0x200
[ 1110.999834][ T3877] kobject: 'loop5' (00000000186b1719): kobject_uevent_env
[ 1110.999941][T10485]  binder_transaction+0x2b4a/0x6690
[ 1111.008542][ T3877] kobject: 'loop5' (00000000186b1719): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 1111.015923][T10485]  ? binder_thread_read+0x3d50/0x3d50
[ 1111.015949][T10485]  ? __might_fault+0x12b/0x1e0
[ 1111.015969][T10485]  ? lock_downgrade+0x880/0x880
[ 1111.015991][T10485]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1111.016006][T10485]  ? _copy_from_user+0xdd/0x150
[ 1111.016022][T10485]  binder_thread_write+0x64a/0x2820
[ 1111.016055][T10485]  ? binder_transaction+0x6690/0x6690
[ 1111.016075][T10485]  ? __might_fault+0x12b/0x1e0
[ 1111.138182][T10485]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1111.144457][T10485]  ? _copy_from_user+0xdd/0x150
[ 1111.149435][T10485]  binder_ioctl+0x1033/0x183b
[ 1111.154141][T10485]  ? binder_thread_write+0x2820/0x2820
[ 1111.159720][T10485]  ? __fget+0x381/0x550
[ 1111.163916][T10485]  ? ksys_dup3+0x3e0/0x3e0
[ 1111.168362][T10485]  ? get_old_timespec32+0x200/0x200
[ 1111.173603][T10485]  ? tomoyo_file_ioctl+0x23/0x30
[ 1111.178563][T10485]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1111.184850][T10485]  ? security_file_ioctl+0x93/0xc0
[ 1111.189996][T10485]  ? binder_thread_write+0x2820/0x2820
[ 1111.195486][T10485]  __ia32_compat_sys_ioctl+0x197/0x620
[ 1111.200966][T10485]  do_fast_syscall_32+0x281/0xc98
[ 1111.206013][T10485]  entry_SYSENTER_compat+0x70/0x7f
[ 1111.211141][T10485] RIP: 0023:0xf7f76869
[ 1111.215233][T10485] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[ 1111.234848][T10485] RSP: 002b:00000000f5d720cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[ 1111.243269][T10485] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0306201
[ 1111.251253][T10485] RDX: 0000000020000040 RSI: 0000000000000000 RDI: 0000000000000000
[ 1111.259253][T10485] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1111.267236][T10485] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 1111.275318][T10485] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1111.283301][T10485] Modules linked in:
[ 1111.291884][T10485] ---[ end trace c94151f5f17dc123 ]---
[ 1111.306445][T10485] RIP: 0010:binder_alloc_do_buffer_copy+0xd6/0x510
[ 1111.335393][T10485] Code: 02 00 0f 85 20 04 00 00 4d 8b 64 24 58 49 29 dc e8 bf f9 23 fc 4c 89 e6 4c 89 ef e8 d4 fa 23 fc 4d 39 e5 76 07 e8 aa f9 23 fc <0f> 0b e8 a3 f9 23 fc 4c 8b 75 d0 4d 29 ec 4c 89 e6 4c 89 f7 e8 b1
[ 1111.360823][T10485] RSP: 0018:ffff88805e6976d8 EFLAGS: 00010212
[ 1111.367371][T10485] RAX: 0000000000040000 RBX: 0000000020004000 RCX: ffffc90005df3000
[ 1111.379138][T10485] RDX: 0000000000000803 RSI: ffffffff854c77d6 RDI: 0000000000000006
[ 1111.390499][T10485] RBP: ffff88805e697758 R08: ffff88805ee60040 R09: 0000000000000028
[ 1111.399139][T10485] R10: ffffed100bcd2f32 R11: ffff88805e697997 R12: 0000000000002fd8
[ 1111.413584][T10485] R13: 0000000000000028 R14: 0000000000002ff8 R15: 0000000000000000
19:21:19 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20)
r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2)
r3 = memfd_create(&(0x7f0000000000)='/dev/vbi#\x00', 0x4)
ftruncate(r3, 0x1000000)
setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, &(0x7f0000000180)=[0x3, 0x4], 0x2)
setsockopt$inet_dccp_int(r2, 0x21, 0x13, &(0x7f0000000100)=0x800, 0x4)
write$P9_RWRITE(r0, &(0x7f0000000080)={0xb, 0x77, 0x1, 0x1}, 0xb)
sendfile(r2, r3, &(0x7f00000000c0)=0xf10002, 0xeffffdef)
close(r2)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
setsockopt$inet6_opts(r2, 0x29, 0x3f, &(0x7f0000000340)=@routing={0x62, 0x12, 0x3, 0x4, 0x0, [@loopback, @remote, @loopback, @remote, @empty, @mcast2, @mcast2, @mcast1, @remote]}, 0x98)
ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @multicast1}}, 0x7ff, 0x7ff}, 0x0)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080))

19:21:19 executing program 5:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000000c0)={0x3, 0x1, [0x4, 0x4, 0x8, 0x0, 0x8001, 0x0, 0x2, 0x1]})
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x2)

19:21:19 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x4]}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

[ 1111.434917][T10485] FS:  0000000000000000(0000) GS:ffff8880ae800000(0063) knlGS:00000000f5d72b40
[ 1111.446132][ T3877] kobject: 'loop2' (000000003dab5639): kobject_uevent_env
[ 1111.460780][T10485] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[ 1111.465698][ T3877] kobject: 'loop2' (000000003dab5639): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 1111.474423][T10485] CR2: 000000002cb23000 CR3: 00000000390e7000 CR4: 00000000001426f0
[ 1111.508755][T10485] Kernel panic - not syncing: Fatal exception
[ 1111.515628][T10485] Kernel Offset: disabled
[ 1111.520018][T10485] Rebooting in 86400 seconds..